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", 0x1000, 0xffffffffffffff81}, {&(0x7f0000003300)="227f1f3083a4e35ba5d93617091c624627eb117641f69e68c5708d017b48e42036218a5be74bcf4cbcf0fc2330b7d3d39f1a0d58fe278fd50bde0af7e8ecd653437421b5ef6ecf67e4643bcdf64c175851bb115440dc17a16386bce1eb0ed139a0c1af90c617bf8253fd8f8636b816b92dfdcc82ac65943500c1f150f3c6d85a46d2920c3915c149618579644d4885c701bcc35b969cf29cb638e6fbd9e807f398999b7ba4bd5e2e60adbeafaf125bca8da7c95f855ce67b741836978ca35e30", 0xc0, 0x5}, {&(0x7f00000033c0)="03bc617c1f5003354beb7dbf9375f61445ed2a02cb4375e91a250255de51b8f97add48aee085dbf0dc88e8e4", 0x2c, 0x10000000000000}, {&(0x7f0000003400)="150b7767f2f189f70f705930f014ce", 0xf, 0x3bd}, {&(0x7f0000003440)="8d0fc129cdff305508ff0762c37adf841e0df2d5136e541df47c043d8ab28b7920ba08ad111f0744206018a0598ca416fafd813e4d57b6d7b88136e922c0c8e42ecca0041c66b570007f01442469226480901a479d248528d106cdc2aa2e68be555797db57aa23da0cf3b17cad5577690de38a7b207150dba295e0cc72c703244960fd78eec00584731385f4ae444707ded4215b8c854d3ca0c7b5a9f2b1afcff6430b6556d784ce8ff57c8498c0ebaf", 0xb0, 0x80000000}, {&(0x7f0000003500)="11491d010905e44bffdc9163c2b7b9e7ffdff6401a216360c60a6d8b0d7e2e46be1de052fb2354e4f6789a788d35d26edd69843ccab3", 0x36, 0x5}, {&(0x7f0000003540)="98929e89da5e61c55c5bf18f22e5cfeb9a33be7633c111846becef778e212a73007b551cc4f357501ebe8ebdda831b2e05827f2a21af75015c0adf5cbf4f33c42a9dd95439dedcd8fc9f1e2b7beb8c9d89f4fe79a3b60852436cc78a71793b3470d2d347a6ed559aab1903e9568bd59fa0cd0cf13def4d0515b38ea11388d77bdadaaee092cb8a06539ff8e3ef6885185a3cb1f6d955ee27b672f3b04461b4bbb7529ccb6540060285241f7f38a7186d715b0dd96876588277c68e789708f5dc0d3ce4492379511a6d5044d40ab62a559d403591581caf0e421ba6946161", 0xde, 0x2}, {&(0x7f0000003640)="9c", 0x1, 0x8f2}, {&(0x7f0000003680)="e666353a57b67bcea0e1b312562558283c472e396b104d9b4f0fefc5d2ef1e966b3bf1cf09ec5985978e88f54c8361ef3b9e690a61b081a5f961013465b923f6b776647041c64836a1d6b8089a2231fcb3e0735cb30a931bb3bb3a6d8056d342da351441472a68d3e76df94e1c8fba9bed2676332a00e35f02d17c89b43f796b8978d2daa96a67", 0x87, 0x7}, {&(0x7f0000003740)="f929bd954a112fc7a1d87e366e964f24a8dfbffa3ac780ec582e1c4e9c7a213cc03bf013bee8dffb15b60ce53f94b461c8692cb7d19e0f8aa9286705b53ac7d6cc9e954361db9c12a5c141cd1d2653efb318b71a3096c5d0cec8837b34ce4f2a277b3040d5165dcae3", 0x69, 0x80}], 0x800000, &(0x7f00000038c0)='\x00') pread64(r1, 0x0, 0xce, 0x200000080) 16:59:46 executing program 5 (fault-call:1 fault-nth:0): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 305.962143] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 305.970132] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 305.977397] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 305.984988] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:46 executing program 2 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:46 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000003900), 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000004900)={0x6, 0x0, {0x1, 0x0, 0x80e, 0x2, 0x8}}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000004980)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getgroups(0x7, &(0x7f0000000140)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) setgroups(0x2, &(0x7f0000002280)=[r2, r3]) syz_open_dev$sndctrl(0x0, 0x0, 0xa8645) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="02f43b854e4cf2490baadeb279e6df00000001005caa"], 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000102, 0x8972, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x108) socketpair$nbd(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x105480) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"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"}) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$rose(r4, 0x104, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000022c0)='./file0\x00', 0x7ff, 0xa, &(0x7f00000037c0)=[{&(0x7f0000002300)="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", 0x1000, 0xffffffffffffff81}, {&(0x7f0000003300)="227f1f3083a4e35ba5d93617091c624627eb117641f69e68c5708d017b48e42036218a5be74bcf4cbcf0fc2330b7d3d39f1a0d58fe278fd50bde0af7e8ecd653437421b5ef6ecf67e4643bcdf64c175851bb115440dc17a16386bce1eb0ed139a0c1af90c617bf8253fd8f8636b816b92dfdcc82ac65943500c1f150f3c6d85a46d2920c3915c149618579644d4885c701bcc35b969cf29cb638e6fbd9e807f398999b7ba4bd5e2e60adbeafaf125bca8da7c95f855ce67b741836978ca35e30", 0xc0, 0x5}, {&(0x7f00000033c0)="03bc617c1f5003354beb7dbf9375f61445ed2a02cb4375e91a250255de51b8f97add48aee085dbf0dc88e8e4", 0x2c, 0x10000000000000}, {&(0x7f0000003400)="150b7767f2f189f70f705930f014ce", 0xf, 0x3bd}, {&(0x7f0000003440)="8d0fc129cdff305508ff0762c37adf841e0df2d5136e541df47c043d8ab28b7920ba08ad111f0744206018a0598ca416fafd813e4d57b6d7b88136e922c0c8e42ecca0041c66b570007f01442469226480901a479d248528d106cdc2aa2e68be555797db57aa23da0cf3b17cad5577690de38a7b207150dba295e0cc72c703244960fd78eec00584731385f4ae444707ded4215b8c854d3ca0c7b5a9f2b1afcff6430b6556d784ce8ff57c8498c0ebaf", 0xb0, 0x80000000}, {&(0x7f0000003500)="11491d010905e44bffdc9163c2b7b9e7ffdff6401a216360c60a6d8b0d7e2e46be1de052fb2354e4f6789a788d35d26edd69843ccab3", 0x36, 0x5}, {&(0x7f0000003540)="98929e89da5e61c55c5bf18f22e5cfeb9a33be7633c111846becef778e212a73007b551cc4f357501ebe8ebdda831b2e05827f2a21af75015c0adf5cbf4f33c42a9dd95439dedcd8fc9f1e2b7beb8c9d89f4fe79a3b60852436cc78a71793b3470d2d347a6ed559aab1903e9568bd59fa0cd0cf13def4d0515b38ea11388d77bdadaaee092cb8a06539ff8e3ef6885185a3cb1f6d955ee27b672f3b04461b4bbb7529ccb6540060285241f7f38a7186d715b0dd96876588277c68e789708f5dc0d3ce4492379511a6d5044d40ab62a559d403591581caf0e421ba6946161", 0xde, 0x2}, {&(0x7f0000003640)="9c", 0x1, 0x8f2}, {&(0x7f0000003680)="e666353a57b67bcea0e1b312562558283c472e396b104d9b4f0fefc5d2ef1e966b3bf1cf09ec5985978e88f54c8361ef3b9e690a61b081a5f961013465b923f6b776647041c64836a1d6b8089a2231fcb3e0735cb30a931bb3bb3a6d8056d342da351441472a68d3e76df94e1c8fba9bed2676332a00e35f02d17c89b43f796b8978d2daa96a67", 0x87, 0x7}, {&(0x7f0000003740)="f929bd954a112fc7a1d87e366e964f24a8dfbffa3ac780ec582e1c4e9c7a213cc03bf013bee8dffb15b60ce53f94b461c8692cb7d19e0f8aa9286705b53ac7d6cc9e954361db9c12a5c141cd1d2653efb318b71a3096c5d0cec8837b34ce4f2a277b3040d5165dcae3", 0x69, 0x80}], 0x800000, &(0x7f00000038c0)='\x00') pread64(r1, 0x0, 0xce, 0x200000080) [ 306.127455] FAULT_INJECTION: forcing a failure. [ 306.127455] name failslab, interval 1, probability 0, space 0, times 0 [ 306.157335] FAULT_INJECTION: forcing a failure. [ 306.157335] name failslab, interval 1, probability 0, space 0, times 0 [ 306.175775] FAULT_INJECTION: forcing a failure. [ 306.175775] name failslab, interval 1, probability 0, space 0, times 0 [ 306.188893] CPU: 0 PID: 23578 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 306.196015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.205369] Call Trace: [ 306.207969] dump_stack+0x138/0x197 [ 306.211610] should_fail.cold+0x10f/0x159 [ 306.215776] should_failslab+0xdb/0x130 [ 306.219785] __kmalloc_track_caller+0x2ec/0x790 [ 306.224455] ? __sb_end_write+0xc1/0x100 [ 306.228515] ? strndup_user+0x62/0xf0 [ 306.232310] memdup_user+0x26/0xa0 [ 306.235857] strndup_user+0x62/0xf0 [ 306.239483] SyS_mount+0x3c/0x120 [ 306.242932] ? copy_mnt_ns+0x8c0/0x8c0 [ 306.246821] do_syscall_64+0x1e8/0x640 [ 306.250723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.255576] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.260764] RIP: 0033:0x459879 [ 306.263959] RSP: 002b:00007ff64464dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.271666] RAX: ffffffffffffffda RBX: 00007ff64464dc90 RCX: 0000000000459879 [ 306.278930] RDX: 0000000020000280 RSI: 0000000020000040 RDI: 0000000020000000 [ 306.286196] RBP: 000000000075bf20 R08: 0000000020000300 R09: 0000000000000000 [ 306.293459] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff64464e6d4 [ 306.300718] R13: 00000000004c5e3b R14: 00000000004da948 R15: 0000000000000003 [ 306.314709] CPU: 1 PID: 23582 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 306.321826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.331178] Call Trace: [ 306.333774] dump_stack+0x138/0x197 [ 306.337411] should_fail.cold+0x10f/0x159 [ 306.341568] should_failslab+0xdb/0x130 [ 306.345545] __kmalloc+0x2f0/0x7a0 [ 306.349084] ? kmem_cache_alloc_trace+0x623/0x790 [ 306.353935] ? alloc_pipe_info+0x15c/0x380 [ 306.358168] alloc_pipe_info+0x15c/0x380 [ 306.362233] splice_direct_to_actor+0x5d2/0x7b0 [ 306.366906] ? selinux_file_permission+0x85/0x480 [ 306.371761] ? generic_pipe_buf_nosteal+0x10/0x10 [ 306.376613] ? security_file_permission+0x89/0x1f0 [ 306.381545] ? do_splice_to+0x170/0x170 [ 306.385527] ? rw_verify_area+0xea/0x2b0 [ 306.389597] do_splice_direct+0x18d/0x230 [ 306.393747] ? splice_direct_to_actor+0x7b0/0x7b0 [ 306.398597] ? rw_verify_area+0xea/0x2b0 [ 306.402660] do_sendfile+0x4db/0xbd0 [ 306.406385] ? do_compat_pwritev64+0x140/0x140 [ 306.410975] ? fput+0xd4/0x150 [ 306.414300] SyS_sendfile64+0x102/0x110 [ 306.418275] ? SyS_sendfile+0x130/0x130 [ 306.422249] ? do_syscall_64+0x53/0x640 [ 306.426226] ? SyS_sendfile+0x130/0x130 [ 306.430219] do_syscall_64+0x1e8/0x640 [ 306.434108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.438962] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.444143] RIP: 0033:0x459879 [ 306.444148] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 306.444159] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 306.444164] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 306.444170] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.444175] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 306.444180] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 306.452161] CPU: 1 PID: 23580 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 306.486107] FAULT_INJECTION: forcing a failure. [ 306.486107] name failslab, interval 1, probability 0, space 0, times 0 [ 306.491373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.491378] Call Trace: [ 306.491396] dump_stack+0x138/0x197 [ 306.491413] should_fail.cold+0x10f/0x159 [ 306.491427] should_failslab+0xdb/0x130 [ 306.491442] __kmalloc_track_caller+0x2ec/0x790 [ 306.537983] ? __sb_end_write+0xc1/0x100 [ 306.542054] ? strndup_user+0x62/0xf0 [ 306.545860] memdup_user+0x26/0xa0 [ 306.549400] strndup_user+0x62/0xf0 [ 306.553030] SyS_mount+0x3c/0x120 [ 306.556479] ? copy_mnt_ns+0x8c0/0x8c0 [ 306.560367] do_syscall_64+0x1e8/0x640 [ 306.564251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.569098] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.574283] RIP: 0033:0x459879 16:59:46 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000003900), 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000004900)={0x6, 0x0, {0x1, 0x0, 0x80e, 0x2, 0x8}}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000004980)={0x0, 0x0, 0x2080, {}, [], "d86fc6f7ee80c5efa03a8337dd0786f388d22165c521c0eb44c4331b626ed9e2aa524bd41ebadd6d1a52ca91a86a3902de4e66d8ace627a2d2f0e103c70ead5e1d226b37836cc926940b2b4428f52c593e5742a0ddf66af96ba5aefa6b4ca082df5b34dfcab9b6b2e4d5a86e22743c57964b9d056837b7e87f0132a13311db4b36878415553f16ac04a301c6b825e51454db4f6b251af07ebb7914ae0647795c7dcc0cf48c9f292c6c202db7e1fa34b0968bd7aa744e6f136187a83080d08d8c08ef4b1644e3a6958e1afa297d7d8bb13c5585b1ae0920a105beed191e23c2743308bc16b51f0a6c98181556a3d5ade030acab765a1ad2cf6a6b9597ba40e13c5a008ba0f406b7ec3552d3b488fbc985b26146c8eb40badded920767df9391adcc5542a43e43f158e7f5d86e19c09b0d03ad23c783ab01f87d5cb2454ea9990e489aec78c92db5fb6aa6bbaf28f18942e03074c26f09493d695abacff0c52c25db323b14a9aeeef950cb60f201b3ef455278778ed6a898173df3df560879d79c6d71b3ca54e9d30fa069dee2008fe441a690489d3ffc7b7ec50e3f27656d7cd0345eec1db7e735318733efc76e6ad9a33f918b3eccd016bfb431063c0105372dbdfc458493e16cbedf56d671ebed9b7b8a5d6625a7d9be0a8dd45924969c6705b0a4e322d44a3de7f465ab554e171253dd242daf2b33c3394862509e15b27a5b8307574a2357a6883e6a4f6b0ede0ad0f8e76631ae382930385322d05bfd5f30a89ededde00c745fca1611be03043544fd17806085b662cbb9f5755f768fec8e1a0501fdcf9ca1716caa0962930f5d783840067b74c0f7411ce8c8d50fb0e362b1a727634234f8ea77ec9297d776b9b5f8fd980136699932be83e7c260da9699989e4c9649b416b369088588c1417bb5ebd44a60b07c8c09230f89f052681c91c7ba2776ffc91322e0a0d7352e5b140fecb8fe747156f88383fb945d9f29b03e5dce785b01aebc4bcaebc012f70a83c738d1020e72bc65bd86c2ad8f9b11497bb1bce1000f083dc4c8f8600913b29cc7738f1fe918b94e545f2f59761a32994a6311e75bb2cc98936b070fe79ad03c9c6b13c043fdab1555cdb74b327d9f4de7af9c852d4f8ce600ad791eb73030e1c678694cba2e357f8f23fbe3ce4c183423701c3ac67b5b17a16c0cdc0241c3a3744cb779c3e1fa822cac2c94f09d51d0d83696c4f77013a4fd11e67c7e54722b6823860b3aa1d74427c280279609000000e79947bc65d0414aac94101c4ed4315a4fc450d74c148e6677f74cba3295977af0ce32d8d437d554468c6944bf432e49b6a2ed638ba878021c306c3727300e03553f31760248ff909bc1ef74b4a7a287dacb402c2556988f5a6a549ff4f8996808df624bacb2b8e03c4bd0edb6007fc64be61acd1dc7f072f6502c50d1821c766ab321ab28e48a6513146060b21c38d177210d2cdf46ad04514a5ee65886bed718f5702769a484d35f5b8ca457133cb5ec6040695023d724e7a2dec90c7e47f319558d7a69596843c96c5e346d61cbaf7ff32492109fb3be29aa762c6e50a2ae45449fdff58f32ac5ce580b6c0f84f3008de34a2d5501f185cdbfd8e3d587660ac209d8b9a278ea6f27b759cf668916f89029e48ba346de3bc193f197ee1e48fd388045653c1d485a794df159041457bdca2755a3b166cce3ebe79fcdc97b9e8feae9f8664c1121134dbb454fa880aa49deede7e0c4bfd164404ca75fc75e91e3dc6a08a8dd6d2243459ecc145e4a6876a6cf12a18b6bbdcefc63c2356d3914681735d1a9731ead013cd865aace691082f6927930220680e61a7720089625a95a0f07c0fdb9b9177f0125d55f1dc4df7a91b04e3e3cf620a960dea27b6a18eed71cd6050728de8a01c48abf27ca946ba83393fa534b8adc87222e2786707ac2ec0664ed65fa9321ec6399111fdaaed0dc105889d8a0be50064a818fd560edffecc8e0c832fbb50cd927a932ebe1e1eefc9f9dacbc11ab6b1a2d64ac2b52a8c018ac4271aa3d2d6d9f0991c80dd225530464c4ce551d6ee80b23b847d6660197c11a09ae56ddf137eb5bb3dcd6e07ffdc6e0ae9415da9e9d4915c72a6567d83f23ee5aa434e4d96a9aa542118492dcf39e28d9eed9e1b3c4a1b80141f56dd5e97559d45c661ed0a0268590afb66841d48e86ed7e8c2103307018005ad8abae9e74860df2adb01b003d0511c26a82cea3560e11ca265732aebe245b2514e8b4456d60b66b0959caf9e5667fba1283567dad38c9b7d1862ffdef048997d74981fb06ea4e4678abe1ec1ddd38394959fd92350ce932e1c0cad84692420ea97bb820503322cf2420edf455cf04c6f1192c4cb5e0df85ca706df37707144a0ac05123845577444242a5d7f1d000bb82381da0bf5af56d9ba5690008467c58ad17fd09a75e62b417584834a6633f24575b590225a46426f358df8705ab2497a25e568abfd0b958468eb50db5007f9680ee7ec0df5dc2d6578bb3152c3e96da0f92dbda2c1e6e4f1ae73a1e4defb95a4609c583b3acbf880ddcebc49c0e155e792206c1cf788f43caad52168e2b6d5ff36955f87d526deeb76d818f4089ac6189c914a27fb016baa7837975f45cf06f835f512afc3c8367e6651789f65928a5175ba7be84e30a632ae033312ac76a3456306a14f1a9637e687f2cd7f694fd30cf7ef347914ccdd6ec9ae849e97c67a11c6e5b22b2007150fc1a41998be5d6ae98fa6fc801c63c04af2c0957284fca8fcd2f3d0a2ff7972bfcfb09b714386b583ec7456391679c335be8d91a0fd83b54d5b85e7f37e31485454b35db166ca722b865a8bebeee0089944d432a5d8d7579e1f9df2b29bc9ae939ae977d2bef7d1374f9522ebdf6a4bc24f5e03ef0dcc36c89cf353206378fb057a1869dbd5b16660f14c7105fdafc4ee92fcda26e0ca52e593aab3c4555c2b7cba879d6c806a2c390d82c24929b30f466bca2cb599ee0ac5b582b3df59ee5dd5948c684d088e986c7153e0f96f8ef1d59202645726196942e10a3492b1242eff4deee9aff9c013e838f69dd085757b39e125955a316e43e1f49a67e34917c89c0b3b893787b7abac70436fdc4ee84038787b53c3343c76cce86e96451999d8596aa32e3a56ec87671a94d0a325940e1198f300690571a3c23171de7b5900107eb7c491c4ccefc5c42ca0e2d83fee42da1920126aa9c371780bbecafc308e8d0dab7d1989191cfc82fc9fbaf3bd53ed2f6da6de272898b128c74f1989b16a3cca92ead3ea1a4f42bb4be75a8712a9eeb1959d73b01e44e7f35961a6244e78d4a9563efae6bc64333d356efabbbebd6b1368c77c7a9ae5e3e86b6045acb7c9ac3d030e8b139a8b9d7d679a60af74fd4ffa2ed0c73445896b6628bb14c24f56211142affaed4b62c33f644aedea67b05ac35fd4c30f8de437eb002dfe38979e110d83092096c6dbe77a7953df36ea424dbdafbafe516d061efc2410a801679f5dfbb461c9846a67ea79fffb1a0de95efcdffab9bdc5723d747a349afe1f77328bfe469a08cc47733b5147cf6bc7f531e2e498dadcb16adea1f329f143ffe25a4fb9d0c814ac011e083ee660f1d980ce41ef9e86c219cf75cd42ba6c2f13bddf091822adde1b9e9d1e882f03749ffb58248ad16dd09c9d4033dad9b85bfe4264f34eda7a90706d4ee44c95055611197d89e3d2bd140352da282095846c5106fcdf993b716c1d327d8d4b2517028bfc9b07fe99dfd0543971bbbac4277003c91398ab9ce5abea5cb39ac012711345b30e1cd5dbb79d4856e9170e4347932c144bfc414479ba1e446ec37627eba6e47dd8b0beba85d1a09dfc2d3238244717e24a170706e005729050050918905875f0fe18b8f09dd3aacc84348ecb31175e49cde368b7868525ac70d26b8395f26b6c23dc6d393b8a542febaeb252bbbe07d231ba1a6c50868921ae4d7d4211317b785dae12ed0c3ee09570b54d5780394a4324fd7b468a0d2934634670674f7a41acb1e0731d9451a04c0f7b9ae23014f356bfe9e957c13395c93e220b1ac7fa361763765ef89deb097c2b19e17d239264bc969712fdefba9600f1951bdee9729cbeacdb07c2d32394e4819617fd8f54cd1ee66ef118e8218ba021cc42cd6e152199668748cae1cc9f43be5abe0f8a46bc9cf108039240eadb7dc5e3d2cd00b2a694dcc877dc2a5ca389a4b3702ef098e3e88c64c35946224f08385ddca736734246b2114b4c904b6c9b4b64c7586fb16ab89ff805035360120e16711ef57b8cdbbd1e91f2f69cbd7126da6e0a0222a700ef75447334142305ce82cbe49c94087bb68d2f0b87726f82ad32564fe5e26f2d2fd927327c54f7b8e0908ac237b67c1844fce1c2ed83fe885dcf6165e89ada7987beb9acba90cfa3e71b171f8f4df70a2439a481c334729e736a324bfc5dc7dc90661d47260c4aed27846900426efd1333fe853599c009890bce3350870efc2f7cc8c4fdb5a0efc132030ac51a722e502542713f5fe985bfccd3fca5fa286c58868cb561c25b523aed280befc3669b5f3a25d5dbc0a6443cb5a6e679573952b8a3747604e949478e2016f0d988307c947fef8afda2299a5cc1c3f2220319393d56de5eae30f87aa81f350c76396bb56478d575d4bda19bb7fc2625b46689a8a127ba60d56cb0ba02dfe95196f5a90625d89f34fef805b5c102fbb50309e4aceac6ce9436eb8de5ffd3b23b6fe03d58602b489117d050fec43c141e55f34e14c6e52865994873a9abf92f3ae5fbda06469c632cf2e845e5fe8f95ce6adb4d55ca3bde5411d249bd944cc1e8745d2ed93f393f790a5465eddf5ddcd2c1807bb840373179cbbfa7e93ded513f9b9f024fa9e15c3be19106413bd0ad9eecf52e6585100e2bc900937f4efdeedf166df45e83bcfdeaadffae64ce650709881356cb58f5d138d3cb7b3c442e4bc1c463cad611647e7c39d70cdd2c10b72eee68dcfd9a7beee1a3e6c4b53a7d8d05c090193ad2a3dd26288ffd97bd6679f41b017f28515681d80714a77c197cdff9f2b518303d7ef0313dffc85343a793597f878e8defb23c638d451a55bdf960d75d3a7d26f29cd719e1c737f9804b387a93df91a81000234e956a30630ddbad3314d1802ad2e5761a5b3506e4cf85673a3d07a3dbf6bce0d660070b4bb3815a7a6afee3c90b576beadc8341cc6bc6a311cd56cd5b09186171f65f4c1dcd6fe79e0977fd94fd3d19f4674fbe2f470c4eb72736797bd7689a09f67160aa2857e8cd2d3aed3889beb490effe7331f3b92f3adc7434d1efead94411ba499b8b53cf074bf6106afe567b06d193d4044813629b48d360f953d9297b31d9c7cd10301a7d4860972c23dded2e418d6b83810e7a3200e8fc71c05f593fe883e13785e57168b8819cde62772b5d99ae58e432bf6259502c07d1d4b2f4f41a864757745a986ce2b003220cdf3d3a06b7df761680eb82db7574ba7cd0fa854ad941e018b657afb3ff94f621e576f70b3605e85f330062999d7a21518d454c870cef09c4b9d6fe2f070fc9b396f1dfcf66bccc4dae375e834eabce8fdaeca2d66969419f1d0212f20baf2e8652a97841475e1059e28d3d92588cc47a25a2b23ddaf86928774734b3023dc0183b948df13b565f39be2552a87b8fb8736813c66338bc077db5a2a4980b4e740b2e64e39976a828f968259087c7af50a130d046c6787c12f19a52fe3a4b2209dab0140a0d381b00", "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"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getgroups(0x7, &(0x7f0000000140)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) setgroups(0x2, &(0x7f0000002280)=[r2, r3]) syz_open_dev$sndctrl(0x0, 0x0, 0xa8645) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="02f43b854e4cf2490baadeb279e6df00000001005caa"], 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000102, 0x8972, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x108) socketpair$nbd(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x105480) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"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"}) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$rose(r4, 0x104, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000022c0)='./file0\x00', 0x7ff, 0xa, &(0x7f00000037c0)=[{&(0x7f0000002300)="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", 0x1000, 0xffffffffffffff81}, {&(0x7f0000003300)="227f1f3083a4e35ba5d93617091c624627eb117641f69e68c5708d017b48e42036218a5be74bcf4cbcf0fc2330b7d3d39f1a0d58fe278fd50bde0af7e8ecd653437421b5ef6ecf67e4643bcdf64c175851bb115440dc17a16386bce1eb0ed139a0c1af90c617bf8253fd8f8636b816b92dfdcc82ac65943500c1f150f3c6d85a46d2920c3915c149618579644d4885c701bcc35b969cf29cb638e6fbd9e807f398999b7ba4bd5e2e60adbeafaf125bca8da7c95f855ce67b741836978ca35e30", 0xc0, 0x5}, {&(0x7f00000033c0)="03bc617c1f5003354beb7dbf9375f61445ed2a02cb4375e91a250255de51b8f97add48aee085dbf0dc88e8e4", 0x2c, 0x10000000000000}, {&(0x7f0000003400)="150b7767f2f189f70f705930f014ce", 0xf, 0x3bd}, {&(0x7f0000003440)="8d0fc129cdff305508ff0762c37adf841e0df2d5136e541df47c043d8ab28b7920ba08ad111f0744206018a0598ca416fafd813e4d57b6d7b88136e922c0c8e42ecca0041c66b570007f01442469226480901a479d248528d106cdc2aa2e68be555797db57aa23da0cf3b17cad5577690de38a7b207150dba295e0cc72c703244960fd78eec00584731385f4ae444707ded4215b8c854d3ca0c7b5a9f2b1afcff6430b6556d784ce8ff57c8498c0ebaf", 0xb0, 0x80000000}, {&(0x7f0000003500)="11491d010905e44bffdc9163c2b7b9e7ffdff6401a216360c60a6d8b0d7e2e46be1de052fb2354e4f6789a788d35d26edd69843ccab3", 0x36, 0x5}, {&(0x7f0000003540)="98929e89da5e61c55c5bf18f22e5cfeb9a33be7633c111846becef778e212a73007b551cc4f357501ebe8ebdda831b2e05827f2a21af75015c0adf5cbf4f33c42a9dd95439dedcd8fc9f1e2b7beb8c9d89f4fe79a3b60852436cc78a71793b3470d2d347a6ed559aab1903e9568bd59fa0cd0cf13def4d0515b38ea11388d77bdadaaee092cb8a06539ff8e3ef6885185a3cb1f6d955ee27b672f3b04461b4bbb7529ccb6540060285241f7f38a7186d715b0dd96876588277c68e789708f5dc0d3ce4492379511a6d5044d40ab62a559d403591581caf0e421ba6946161", 0xde, 0x2}, {&(0x7f0000003640)="9c", 0x1, 0x8f2}, {&(0x7f0000003680)="e666353a57b67bcea0e1b312562558283c472e396b104d9b4f0fefc5d2ef1e966b3bf1cf09ec5985978e88f54c8361ef3b9e690a61b081a5f961013465b923f6b776647041c64836a1d6b8089a2231fcb3e0735cb30a931bb3bb3a6d8056d342da351441472a68d3e76df94e1c8fba9bed2676332a00e35f02d17c89b43f796b8978d2daa96a67", 0x87, 0x7}, {&(0x7f0000003740)="f929bd954a112fc7a1d87e366e964f24a8dfbffa3ac780ec582e1c4e9c7a213cc03bf013bee8dffb15b60ce53f94b461c8692cb7d19e0f8aa9286705b53ac7d6cc9e954361db9c12a5c141cd1d2653efb318b71a3096c5d0cec8837b34ce4f2a277b3040d5165dcae3", 0x69, 0x80}], 0x800000, &(0x7f00000038c0)='\x00') pread64(r1, 0x0, 0xce, 0x200000080) 16:59:46 executing program 5 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 306.577458] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.585154] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 306.592406] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 306.599656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 306.606911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 306.614162] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 306.622137] CPU: 0 PID: 23590 Comm: syz-executor.5 Not tainted 4.14.141 #37 [ 306.629262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.638621] Call Trace: [ 306.641209] dump_stack+0x138/0x197 [ 306.644836] should_fail.cold+0x10f/0x159 [ 306.648983] should_failslab+0xdb/0x130 [ 306.652976] __kmalloc_track_caller+0x2ec/0x790 [ 306.657642] ? kasan_check_write+0x14/0x20 [ 306.661869] ? strndup_user+0x62/0xf0 [ 306.665667] memdup_user+0x26/0xa0 [ 306.669201] strndup_user+0x62/0xf0 [ 306.672828] SyS_mount+0x6b/0x120 [ 306.676278] ? copy_mnt_ns+0x8c0/0x8c0 [ 306.680162] do_syscall_64+0x1e8/0x640 [ 306.684042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.688891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 306.694073] RIP: 0033:0x459879 [ 306.697263] RSP: 002b:00007ff64464dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.704967] RAX: ffffffffffffffda RBX: 00007ff64464dc90 RCX: 0000000000459879 [ 306.712232] RDX: 0000000020000280 RSI: 0000000020000040 RDI: 0000000020000000 [ 306.719496] RBP: 000000000075bf20 R08: 0000000020000300 R09: 0000000000000000 16:59:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:47 executing program 1 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:47 executing program 2 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 306.726762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff64464e6d4 [ 306.734132] R13: 00000000004c5e3b R14: 00000000004da948 R15: 0000000000000003 [ 306.835678] FAULT_INJECTION: forcing a failure. [ 306.835678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.856867] FAULT_INJECTION: forcing a failure. [ 306.856867] name failslab, interval 1, probability 0, space 0, times 0 [ 306.868758] CPU: 1 PID: 23601 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 306.868769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.885205] Call Trace: [ 306.887816] dump_stack+0x138/0x197 [ 306.891458] should_fail.cold+0x10f/0x159 [ 306.895609] ? __might_sleep+0x93/0xb0 [ 306.899532] __alloc_pages_nodemask+0x1d6/0x7a0 [ 306.904207] ? __alloc_pages_slowpath+0x2930/0x2930 [ 306.909222] ? lock_downgrade+0x6e0/0x6e0 [ 306.913380] alloc_pages_vma+0xc9/0x4c0 [ 306.917361] shmem_alloc_page+0xf6/0x1a0 [ 306.921417] ? shmem_swapin+0x1a0/0x1a0 [ 306.925390] ? cred_has_capability+0x142/0x290 [ 306.929973] ? check_preemption_disabled+0x3c/0x250 [ 306.934992] ? __this_cpu_preempt_check+0x1d/0x30 [ 306.939844] ? percpu_counter_add_batch+0x112/0x160 [ 306.944858] ? __vm_enough_memory+0x26a/0x490 [ 306.949352] shmem_alloc_and_acct_page+0x12a/0x680 [ 306.954281] shmem_getpage_gfp+0x3e7/0x25d0 [ 306.958607] ? shmem_add_to_page_cache+0x860/0x860 [ 306.963543] ? avc_has_perm_noaudit+0x420/0x420 [ 306.968206] shmem_file_read_iter+0x486/0x9a0 [ 306.972704] ? fsnotify+0x92f/0x11e0 [ 306.976416] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 306.981425] ? iov_iter_pipe+0x9f/0x2c0 [ 306.985401] generic_file_splice_read+0x37d/0x600 [ 306.990231] ? fsnotify+0x11e0/0x11e0 [ 306.994025] ? add_to_pipe+0x340/0x340 [ 306.997923] ? rw_verify_area+0xea/0x2b0 [ 307.001980] ? add_to_pipe+0x340/0x340 [ 307.005860] do_splice_to+0x105/0x170 [ 307.009661] splice_direct_to_actor+0x222/0x7b0 [ 307.014327] ? generic_pipe_buf_nosteal+0x10/0x10 [ 307.019161] ? do_splice_to+0x170/0x170 [ 307.023127] ? rw_verify_area+0xea/0x2b0 [ 307.028728] do_splice_direct+0x18d/0x230 [ 307.032873] ? splice_direct_to_actor+0x7b0/0x7b0 [ 307.037717] ? rw_verify_area+0xea/0x2b0 [ 307.041775] do_sendfile+0x4db/0xbd0 [ 307.045497] ? do_compat_pwritev64+0x140/0x140 [ 307.050077] ? fput+0xd4/0x150 [ 307.053274] SyS_sendfile64+0x102/0x110 [ 307.057239] ? SyS_sendfile+0x130/0x130 [ 307.061202] ? do_syscall_64+0x53/0x640 [ 307.065291] ? SyS_sendfile+0x130/0x130 [ 307.069270] do_syscall_64+0x1e8/0x640 [ 307.073149] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.077993] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.083176] RIP: 0033:0x459879 [ 307.086357] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.094076] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 307.101340] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 307.108599] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.115865] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 307.123222] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 307.151039] CPU: 0 PID: 23600 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 307.158166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.167523] Call Trace: [ 307.170115] dump_stack+0x138/0x197 [ 307.173748] should_fail.cold+0x10f/0x159 [ 307.177901] should_failslab+0xdb/0x130 [ 307.181878] kmem_cache_alloc+0x2d7/0x780 [ 307.186023] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 307.190954] ? __might_fault+0x110/0x1d0 [ 307.195012] getname_flags+0xcb/0x580 [ 307.198810] ? __might_fault+0x110/0x1d0 [ 307.202882] user_path_at_empty+0x2f/0x50 [ 307.207035] do_mount+0x12b/0x27d0 [ 307.210601] ? copy_mount_string+0x40/0x40 [ 307.214835] ? _copy_from_user+0x99/0x110 [ 307.218983] ? memdup_user+0x58/0xa0 [ 307.222711] ? copy_mount_options+0x1fe/0x2f0 [ 307.227216] SyS_mount+0xab/0x120 [ 307.230679] ? copy_mnt_ns+0x8c0/0x8c0 [ 307.234567] do_syscall_64+0x1e8/0x640 [ 307.238458] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.243304] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.248488] RIP: 0033:0x459879 16:59:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:47 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x20, 0x9, {"b4a3b506c92902c2379f38b2b638d9a2"}, 0x5}}}, 0x90) 16:59:47 executing program 2 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 307.251674] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.259393] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 307.266668] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 307.273939] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.273946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 307.273952] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:47 executing program 1 (fault-call:1 fault-nth:2): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 307.436032] FAULT_INJECTION: forcing a failure. [ 307.436032] name failslab, interval 1, probability 0, space 0, times 0 [ 307.447640] CPU: 1 PID: 23620 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 307.454750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.464117] Call Trace: [ 307.466722] dump_stack+0x138/0x197 [ 307.468409] FAULT_INJECTION: forcing a failure. [ 307.468409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.470475] should_fail.cold+0x10f/0x159 [ 307.486413] should_failslab+0xdb/0x130 [ 307.490385] kmem_cache_alloc+0x47/0x780 [ 307.494434] ? __alloc_pages_slowpath+0x2930/0x2930 [ 307.499440] ? lock_downgrade+0x6e0/0x6e0 [ 307.503585] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 307.509206] __radix_tree_create+0x337/0x4d0 [ 307.513608] __radix_tree_insert+0xab/0x570 [ 307.517925] ? __radix_tree_create+0x4d0/0x4d0 [ 307.522510] shmem_add_to_page_cache+0x5a4/0x860 [ 307.527260] ? shmem_writepage+0xbb0/0xbb0 [ 307.531479] ? __radix_tree_preload+0x1d2/0x260 [ 307.536143] shmem_getpage_gfp+0x1757/0x25d0 [ 307.540551] ? shmem_add_to_page_cache+0x860/0x860 [ 307.545473] ? avc_has_perm_noaudit+0x420/0x420 [ 307.550134] shmem_file_read_iter+0x486/0x9a0 [ 307.554624] ? fsnotify+0x92f/0x11e0 [ 307.558330] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 307.563337] ? iov_iter_pipe+0x9f/0x2c0 [ 307.567301] generic_file_splice_read+0x37d/0x600 [ 307.572134] ? fsnotify+0x11e0/0x11e0 [ 307.575921] ? add_to_pipe+0x340/0x340 [ 307.579823] ? rw_verify_area+0xea/0x2b0 [ 307.583874] ? add_to_pipe+0x340/0x340 [ 307.587751] do_splice_to+0x105/0x170 [ 307.591544] splice_direct_to_actor+0x222/0x7b0 [ 307.596202] ? generic_pipe_buf_nosteal+0x10/0x10 [ 307.601035] ? do_splice_to+0x170/0x170 [ 307.604999] ? rw_verify_area+0xea/0x2b0 [ 307.609053] do_splice_direct+0x18d/0x230 [ 307.613188] ? splice_direct_to_actor+0x7b0/0x7b0 [ 307.618023] ? rw_verify_area+0xea/0x2b0 [ 307.622089] do_sendfile+0x4db/0xbd0 [ 307.625798] ? do_compat_pwritev64+0x140/0x140 [ 307.630375] ? fput+0xd4/0x150 [ 307.633559] SyS_sendfile64+0x102/0x110 [ 307.637525] ? SyS_sendfile+0x130/0x130 [ 307.641490] ? do_syscall_64+0x53/0x640 [ 307.645450] ? SyS_sendfile+0x130/0x130 [ 307.649412] do_syscall_64+0x1e8/0x640 [ 307.653286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.658124] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.663299] RIP: 0033:0x459879 [ 307.666489] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 307.674185] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 16:59:48 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000003900), 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000004900)={0x6, 0x0, {0x1, 0x0, 0x80e, 0x2, 0x8}}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000004980)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getgroups(0x7, &(0x7f0000000140)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) setgroups(0x2, &(0x7f0000002280)=[r2, r3]) syz_open_dev$sndctrl(0x0, 0x0, 0xa8645) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="02f43b854e4cf2490baadeb279e6df00000001005caa"], 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000102, 0x8972, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x108) socketpair$nbd(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x105480) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) openat$vhci(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$rose(r4, 0x104, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f00000022c0)='./file0\x00', 0x7ff, 0xa, &(0x7f00000037c0)=[{&(0x7f0000002300)="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", 0x1000, 0xffffffffffffff81}, {&(0x7f0000003300)="227f1f3083a4e35ba5d93617091c624627eb117641f69e68c5708d017b48e42036218a5be74bcf4cbcf0fc2330b7d3d39f1a0d58fe278fd50bde0af7e8ecd653437421b5ef6ecf67e4643bcdf64c175851bb115440dc17a16386bce1eb0ed139a0c1af90c617bf8253fd8f8636b816b92dfdcc82ac65943500c1f150f3c6d85a46d2920c3915c149618579644d4885c701bcc35b969cf29cb638e6fbd9e807f398999b7ba4bd5e2e60adbeafaf125bca8da7c95f855ce67b741836978ca35e30", 0xc0, 0x5}, {&(0x7f00000033c0)="03bc617c1f5003354beb7dbf9375f61445ed2a02cb4375e91a250255de51b8f97add48aee085dbf0dc88e8e4", 0x2c, 0x10000000000000}, {&(0x7f0000003400)="150b7767f2f189f70f705930f014ce", 0xf, 0x3bd}, {&(0x7f0000003440)="8d0fc129cdff305508ff0762c37adf841e0df2d5136e541df47c043d8ab28b7920ba08ad111f0744206018a0598ca416fafd813e4d57b6d7b88136e922c0c8e42ecca0041c66b570007f01442469226480901a479d248528d106cdc2aa2e68be555797db57aa23da0cf3b17cad5577690de38a7b207150dba295e0cc72c703244960fd78eec00584731385f4ae444707ded4215b8c854d3ca0c7b5a9f2b1afcff6430b6556d784ce8ff57c8498c0ebaf", 0xb0, 0x80000000}, {&(0x7f0000003500)="11491d010905e44bffdc9163c2b7b9e7ffdff6401a216360c60a6d8b0d7e2e46be1de052fb2354e4f6789a788d35d26edd69843ccab3", 0x36, 0x5}, {&(0x7f0000003540)="98929e89da5e61c55c5bf18f22e5cfeb9a33be7633c111846becef778e212a73007b551cc4f357501ebe8ebdda831b2e05827f2a21af75015c0adf5cbf4f33c42a9dd95439dedcd8fc9f1e2b7beb8c9d89f4fe79a3b60852436cc78a71793b3470d2d347a6ed559aab1903e9568bd59fa0cd0cf13def4d0515b38ea11388d77bdadaaee092cb8a06539ff8e3ef6885185a3cb1f6d955ee27b672f3b04461b4bbb7529ccb6540060285241f7f38a7186d715b0dd96876588277c68e789708f5dc0d3ce4492379511a6d5044d40ab62a559d403591581caf0e421ba6946161", 0xde, 0x2}, {&(0x7f0000003640)="9c", 0x1, 0x8f2}, {&(0x7f0000003680)="e666353a57b67bcea0e1b312562558283c472e396b104d9b4f0fefc5d2ef1e966b3bf1cf09ec5985978e88f54c8361ef3b9e690a61b081a5f961013465b923f6b776647041c64836a1d6b8089a2231fcb3e0735cb30a931bb3bb3a6d8056d342da351441472a68d3e76df94e1c8fba9bed2676332a00e35f02d17c89b43f796b8978d2daa96a67", 0x87, 0x7}, {&(0x7f0000003740)="f929bd954a112fc7a1d87e366e964f24a8dfbffa3ac780ec582e1c4e9c7a213cc03bf013bee8dffb15b60ce53f94b461c8692cb7d19e0f8aa9286705b53ac7d6cc9e954361db9c12a5c141cd1d2653efb318b71a3096c5d0cec8837b34ce4f2a277b3040d5165dcae3", 0x69, 0x80}], 0x800000, &(0x7f00000038c0)='\x00') pread64(r1, 0x0, 0xce, 0x200000080) [ 307.681464] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 307.688718] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.696089] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 307.703344] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 307.710632] CPU: 0 PID: 23625 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 307.717734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.727084] Call Trace: [ 307.729682] dump_stack+0x138/0x197 [ 307.733320] should_fail.cold+0x10f/0x159 16:59:48 executing program 0 (fault-call:3 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 307.737472] __alloc_pages_nodemask+0x1d6/0x7a0 [ 307.742158] ? fs_reclaim_acquire+0x20/0x20 [ 307.746484] ? __alloc_pages_slowpath+0x2930/0x2930 [ 307.751517] cache_grow_begin+0x80/0x400 [ 307.755591] kmem_cache_alloc+0x6a6/0x780 [ 307.759737] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 307.764677] getname_flags+0xcb/0x580 [ 307.768479] ? __might_fault+0x110/0x1d0 [ 307.772548] user_path_at_empty+0x2f/0x50 [ 307.776699] do_mount+0x12b/0x27d0 [ 307.780249] ? copy_mount_string+0x40/0x40 [ 307.784491] ? _copy_from_user+0x99/0x110 [ 307.788651] ? memdup_user+0x58/0xa0 [ 307.792372] ? copy_mount_options+0x1fe/0x2f0 [ 307.796875] SyS_mount+0xab/0x120 [ 307.800331] ? copy_mnt_ns+0x8c0/0x8c0 [ 307.804223] do_syscall_64+0x1e8/0x640 [ 307.808112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.812972] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.818164] RIP: 0033:0x459879 [ 307.821436] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 307.829145] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 16:59:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc) 16:59:48 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x0, &(0x7f0000000140), 0x10, &(0x7f0000000180)='em0[@cgroup*\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c74696d656f75743d30783030303030303030666665303030dda02c003c5f8d58d1f6891874f24fa31c0f6d6428617bbf332576b0f602ff94123f8a236beab81328ad48fb4b9e391886327cd2bfcd72ed38f4ebfc0a106d612f90620a0e435b3eef16f0005fe5aa478ad8a53ff4879d"]) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000002c0)={0x0, {0x1, 0x1ff}}) [ 307.836413] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 307.843683] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 307.850957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 307.859736] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:48 executing program 1 (fault-call:1 fault-nth:3): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x2000) write$P9_RWALK(r1, &(0x7f0000000040)={0x4a, 0x6f, 0x1, {0x5, [{0x2, 0x1, 0xfff}, {0x68}, {0x41, 0x4}, {0x0, 0x2, 0x3}, {0x40, 0x0, 0x1}]}}, 0x4a) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:48 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @remote}, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x4, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @random="f971d4aa9aa8"}, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x6b, "d6069ffb83ae7db0b6edad7efeab83583ca8e762429fb4b51cdd3a1f349ae00846b5feaabf7c24c86717a548fdcf48b4d0bfb0eb006e3cc163bb2d7dd5a88cc5d9bfd802034edc249651db18479056afa8db3b5510a0f07caeeb09c63d4962be546260815ed36dfc231a11"}, &(0x7f0000000100)=0x73) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r3}, 0x8) 16:59:48 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x10000) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 308.083585] FAULT_INJECTION: forcing a failure. [ 308.083585] name failslab, interval 1, probability 0, space 0, times 0 [ 308.136412] CPU: 0 PID: 23652 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 308.143557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.152919] Call Trace: [ 308.155513] dump_stack+0x138/0x197 [ 308.159149] should_fail.cold+0x10f/0x159 [ 308.163302] should_failslab+0xdb/0x130 [ 308.167276] kmem_cache_alloc+0x2d7/0x780 [ 308.171424] ? lock_downgrade+0x6e0/0x6e0 [ 308.175579] alloc_vfsmnt+0x28/0x7d0 [ 308.179295] vfs_kern_mount.part.0+0x2a/0x3d0 [ 308.183791] do_mount+0x417/0x27d0 [ 308.187348] ? copy_mount_string+0x40/0x40 [ 308.191591] ? memdup_user+0x58/0xa0 [ 308.195303] ? copy_mount_options+0x1fe/0x2f0 [ 308.199798] SyS_mount+0xab/0x120 [ 308.203247] ? copy_mnt_ns+0x8c0/0x8c0 [ 308.207138] do_syscall_64+0x1e8/0x640 [ 308.211023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.215871] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.221049] RIP: 0033:0x459879 [ 308.221055] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 16:59:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80000001, 0x1) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0xd2, 0xfff, 0x2a34c456, 0x7, 0x1, 0x5}) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:48 executing program 2 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:48 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8000, 0x101080) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,timeout=0x000ffe00000,\x00\x00\x00\x00\x00\x00']) [ 308.221066] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 308.221072] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 308.221077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.221083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 308.221089] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 308.315545] FAULT_INJECTION: forcing a failure. [ 308.315545] name failslab, interval 1, probability 0, space 0, times 0 [ 308.326774] CPU: 0 PID: 23669 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 308.333881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.343239] Call Trace: [ 308.345836] dump_stack+0x138/0x197 [ 308.349486] should_fail.cold+0x10f/0x159 [ 308.353654] ? radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 308.359465] should_failslab+0xdb/0x130 [ 308.363452] kmem_cache_alloc+0x47/0x780 [ 308.367635] ? __alloc_pages_slowpath+0x2930/0x2930 [ 308.372647] ? lock_downgrade+0x6e0/0x6e0 [ 308.376840] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 308.382588] __radix_tree_create+0x337/0x4d0 [ 308.387124] __radix_tree_insert+0xab/0x570 [ 308.391454] ? __radix_tree_create+0x4d0/0x4d0 [ 308.396044] shmem_add_to_page_cache+0x5a4/0x860 [ 308.400804] ? shmem_writepage+0xbb0/0xbb0 [ 308.405040] ? __radix_tree_preload+0x1d2/0x260 [ 308.409710] shmem_getpage_gfp+0x1757/0x25d0 [ 308.414133] ? shmem_add_to_page_cache+0x860/0x860 [ 308.419069] ? avc_has_perm_noaudit+0x420/0x420 [ 308.423750] shmem_file_read_iter+0x486/0x9a0 [ 308.428251] ? fsnotify+0x92f/0x11e0 [ 308.431964] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 308.436981] ? iov_iter_pipe+0x9f/0x2c0 [ 308.440956] generic_file_splice_read+0x37d/0x600 [ 308.445796] ? fsnotify+0x11e0/0x11e0 [ 308.449594] ? add_to_pipe+0x340/0x340 [ 308.453506] ? rw_verify_area+0xea/0x2b0 [ 308.457559] ? add_to_pipe+0x340/0x340 [ 308.461439] do_splice_to+0x105/0x170 [ 308.465239] splice_direct_to_actor+0x222/0x7b0 [ 308.469903] ? generic_pipe_buf_nosteal+0x10/0x10 [ 308.474743] ? do_splice_to+0x170/0x170 [ 308.478726] ? rw_verify_area+0xea/0x2b0 [ 308.482795] do_splice_direct+0x18d/0x230 [ 308.486944] ? splice_direct_to_actor+0x7b0/0x7b0 [ 308.491781] ? rw_verify_area+0xea/0x2b0 [ 308.495896] do_sendfile+0x4db/0xbd0 [ 308.499612] ? do_compat_pwritev64+0x140/0x140 [ 308.504178] ? fput+0xd4/0x150 [ 308.507351] SyS_sendfile64+0x102/0x110 [ 308.511315] ? SyS_sendfile+0x130/0x130 [ 308.515288] ? do_syscall_64+0x53/0x640 [ 308.519264] ? SyS_sendfile+0x130/0x130 [ 308.523219] do_syscall_64+0x1e8/0x640 [ 308.527086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.531913] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.537086] RIP: 0033:0x459879 [ 308.540260] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.548045] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 308.555294] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 308.562543] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 308.569880] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 308.577130] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:49 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:49 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0xe) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d72646d612c506f72743d3078303030303030303030303030303030302c74696d656f7574513078303030303030303066666530303030302c0073e559ef4dbf79c153ede9e1019787fa2bd323a9907dfc69d16dd441568019d5ce2d6014d92760ecacd621686f34896b1d6ad5642e75589c54b12390800428595b43137e3823ee44ddc9b596fe5250d1f774e04cebe340b6d930a0dbb70d485f238c7ba60e83c865390954ef9567fb40ba423f9224015ace0f90c17a82a3b983632b402dc80b0fbcfb0369c3de8ca5de282a3015892ade615b2a2c23074d8f6dfff930912ef304c44d10ad"]) 16:59:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000000, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2000000000000006) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) timerfd_gettime(r1, &(0x7f0000000080)) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:49 executing program 1 (fault-call:1 fault-nth:4): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:49 executing program 2 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 308.739514] FAULT_INJECTION: forcing a failure. [ 308.739514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 308.749532] FAULT_INJECTION: forcing a failure. [ 308.749532] name failslab, interval 1, probability 0, space 0, times 0 [ 308.774889] CPU: 1 PID: 23693 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 308.782019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.791373] Call Trace: [ 308.793971] dump_stack+0x138/0x197 [ 308.798185] should_fail.cold+0x10f/0x159 [ 308.804155] ? __might_sleep+0x93/0xb0 [ 308.808042] __alloc_pages_nodemask+0x1d6/0x7a0 [ 308.812712] ? __alloc_pages_slowpath+0x2930/0x2930 [ 308.817722] ? lock_downgrade+0x6e0/0x6e0 [ 308.821875] alloc_pages_vma+0xc9/0x4c0 [ 308.825851] shmem_alloc_page+0xf6/0x1a0 [ 308.829913] ? shmem_swapin+0x1a0/0x1a0 [ 308.833887] ? cred_has_capability+0x142/0x290 [ 308.838466] ? check_preemption_disabled+0x3c/0x250 [ 308.843493] ? __this_cpu_preempt_check+0x1d/0x30 [ 308.848328] ? percpu_counter_add_batch+0x112/0x160 [ 308.853341] ? __vm_enough_memory+0x26a/0x490 [ 308.857842] shmem_alloc_and_acct_page+0x12a/0x680 [ 308.862775] shmem_getpage_gfp+0x3e7/0x25d0 [ 308.867124] ? shmem_add_to_page_cache+0x860/0x860 [ 308.872058] shmem_file_read_iter+0x486/0x9a0 [ 308.876563] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 308.881585] ? iov_iter_pipe+0x9f/0x2c0 [ 308.885557] generic_file_splice_read+0x37d/0x600 [ 308.890392] ? fsnotify+0x11e0/0x11e0 [ 308.894185] ? add_to_pipe+0x340/0x340 [ 308.898078] ? rw_verify_area+0xea/0x2b0 [ 308.902160] ? add_to_pipe+0x340/0x340 [ 308.906146] do_splice_to+0x105/0x170 [ 308.909944] splice_direct_to_actor+0x222/0x7b0 [ 308.914610] ? generic_pipe_buf_nosteal+0x10/0x10 [ 308.919448] ? do_splice_to+0x170/0x170 [ 308.923425] ? rw_verify_area+0xea/0x2b0 [ 308.927477] do_splice_direct+0x18d/0x230 [ 308.931617] ? splice_direct_to_actor+0x7b0/0x7b0 [ 308.936456] ? rw_verify_area+0xea/0x2b0 [ 308.940515] do_sendfile+0x4db/0xbd0 [ 308.944236] ? do_compat_pwritev64+0x140/0x140 [ 308.948818] ? fput+0xd4/0x150 [ 308.952010] SyS_sendfile64+0x102/0x110 [ 308.955978] ? SyS_sendfile+0x130/0x130 [ 308.959943] ? do_syscall_64+0x53/0x640 [ 308.963920] ? SyS_sendfile+0x130/0x130 [ 308.967891] do_syscall_64+0x1e8/0x640 [ 308.971774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.976617] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 308.981806] RIP: 0033:0x459879 [ 308.984985] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.992691] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 308.999951] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 309.007214] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.014479] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 309.021743] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 309.030628] CPU: 0 PID: 23694 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 309.037725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.037731] Call Trace: [ 309.049661] dump_stack+0x138/0x197 [ 309.053298] should_fail.cold+0x10f/0x159 [ 309.057454] should_failslab+0xdb/0x130 [ 309.061435] kmem_cache_alloc_trace+0x2e9/0x790 [ 309.066112] ? lock_downgrade+0x6e0/0x6e0 [ 309.070257] sget_userns+0xfe/0xc30 [ 309.070266] ? get_anon_bdev+0x1c0/0x1c0 [ 309.070285] mount_pseudo_xattr+0xaf/0x4a0 [ 309.070295] ? move_cursor+0x500/0x500 [ 309.070313] dax_mount+0x2f/0x40 [ 309.070321] mount_fs+0x97/0x2a1 [ 309.070336] vfs_kern_mount.part.0+0x5e/0x3d0 [ 309.070350] do_mount+0x417/0x27d0 [ 309.070367] ? copy_mount_string+0x40/0x40 [ 309.070381] ? memdup_user+0x58/0xa0 [ 309.082255] ? copy_mount_options+0x1fe/0x2f0 [ 309.082269] SyS_mount+0xab/0x120 [ 309.082277] ? copy_mnt_ns+0x8c0/0x8c0 [ 309.082291] do_syscall_64+0x1e8/0x640 [ 309.082299] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.082316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.089540] RIP: 0033:0x459879 16:59:49 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d610070897274353077303030302e30306817303030303030302c74696d656f75743d3078303030303030303066666530303030302c00"]) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffff, 0x40000) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'bridge_slave_1\x00', 0x7ff}) sysfs$3(0x3) 16:59:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000001) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) write(r0, &(0x7f0000000180)="f54da6952dba623ade226c1f5f9728fc0d5f1112f903a0086d2fddab17a37c62278308b3583643d43746008e6575c0ea1743d57b555e659d9740bc8411c3dbf67e4a1afc60997c4998db9803e980d525b0a43b8f493fee84378826fe5ac056915143e5645e6778328ceda2dcfea807e7c09dd6181cb8802a3ed59221d62893e21ffec858c044e382fe4a", 0x8a) 16:59:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) 16:59:49 executing program 2 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="90d9326219039d3a23ce647a314b9a207587ebffb2f757dd4818e9a3826866f6fd80f4b68b5d9244d9be9fc35517580d1fa3153ad365e465df0d8412df21f18d73bb30cb1f2285b6746a99193d794a8a6f9c1a23bc7d91426c4928c5b8d045997f2aa1327b43803dd6b72c95ed200b2ea7f23d482441fd97d6d97388b63982f7dcd3db14e66de299692df7839ab4b2b79fff11a434bfa106b54180bb9e3d374dd80289ccf9f158907d993777480239106e9a72a212811306e17a19e08f68c2996cd693ec659e4a77bdc32cc34dffbe33c35adf2d687bb63a7fbfc3e29d4bb739", 0xe0}, {&(0x7f0000000180)="b01a8403267ebe74a193e68436aaf2b68cfaec72d1a819473d34e4ddecb29c012d3b5648ac75647baf4d687cd9e55e0e6dd56fd18884f40fac3664729711c6ed32bb8993f61b5f606c875b25832eb2ed3f20dcad1fd871aaff158dfa9a1ad3b5c5a98d66e64132569d0f7908bd61b8955882047d4a6dbfa80f827b9e2ab61e0d01c0cf68560341", 0x87}, {&(0x7f0000000240)="5ccd7db1ee8c0842e6018bf22f45471142c8b51e33bf0c24b4a2f5dbab619570bc0ca68689b9d25d6464f0a51a005006257f5660ee11f48c5baad359eed27a683d4b539b0ba12e9384373eb3b12a47fbd84a649a63e819", 0x57}], 0x3, 0x0) [ 309.137922] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.145638] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 309.152912] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 309.160186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.167466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 309.174738] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:49 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}}) ioperm(0x3ff, 0x800, 0x8) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') 16:59:49 executing program 1 (fault-call:1 fault-nth:5): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:49 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e20, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10001}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 309.252714] FAULT_INJECTION: forcing a failure. [ 309.252714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) setreuid(0x0, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) r1 = getuid() r2 = getuid() syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x0, &(0x7f0000000140), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='mode=0x0000000000000001,nojoliid=', @ANYRESHEX=r0, @ANYBLOB=',unhide,uid<', @ANYRESDEC=r1, @ANYBLOB=',permit_directio,fowner<', @ANYRESDEC=r2, @ANYBLOB=',appraise_type=imasig,appraise,appraise_type=imasig,\x00']) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 309.359155] shmem_alloc_page+0xf6/0x1a0 [ 309.363222] ? shmem_swapin+0x1a0/0x1a0 [ 309.367202] ? cred_has_capability+0x142/0x290 [ 309.371875] ? check_preemption_disabled+0x3c/0x250 [ 309.376913] ? __this_cpu_preempt_check+0x1d/0x30 [ 309.381758] ? percpu_counter_add_batch+0x112/0x160 [ 309.386776] ? __vm_enough_memory+0x26a/0x490 [ 309.391282] shmem_alloc_and_acct_page+0x12a/0x680 [ 309.396217] shmem_getpage_gfp+0x3e7/0x25d0 [ 309.400546] ? shmem_add_to_page_cache+0x860/0x860 [ 309.405480] shmem_file_read_iter+0x486/0x9a0 16:59:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000040)={0xf7, 0x4aef, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 309.409995] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 309.415010] ? iov_iter_pipe+0x9f/0x2c0 [ 309.418987] generic_file_splice_read+0x37d/0x600 [ 309.423832] ? fsnotify+0x11e0/0x11e0 [ 309.427633] ? add_to_pipe+0x340/0x340 [ 309.431538] ? rw_verify_area+0xea/0x2b0 [ 309.435598] ? add_to_pipe+0x340/0x340 [ 309.439491] do_splice_to+0x105/0x170 [ 309.443297] splice_direct_to_actor+0x222/0x7b0 [ 309.447973] ? generic_pipe_buf_nosteal+0x10/0x10 [ 309.447989] ? do_splice_to+0x170/0x170 [ 309.448001] ? rw_verify_area+0xea/0x2b0 16:59:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x688, 0x800) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x6, 0x6, @loopback, 0x7fff}, {0xa, 0x4e24, 0x7f, @mcast2, 0xfffffffffffffffd}, 0x100000000, [0x40, 0xfffffffffffffc01, 0x3, 0x9, 0x8001, 0x1, 0x8, 0x401]}, 0x5c) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 309.448013] do_splice_direct+0x18d/0x230 [ 309.456979] ? splice_direct_to_actor+0x7b0/0x7b0 [ 309.470001] ? rw_verify_area+0xea/0x2b0 [ 309.474066] do_sendfile+0x4db/0xbd0 [ 309.477792] ? do_compat_pwritev64+0x140/0x140 [ 309.482479] ? fput+0xd4/0x150 [ 309.485676] SyS_sendfile64+0x102/0x110 [ 309.485688] ? SyS_sendfile+0x130/0x130 [ 309.485700] ? do_syscall_64+0x53/0x640 [ 309.485711] ? SyS_sendfile+0x130/0x130 [ 309.485722] do_syscall_64+0x1e8/0x640 [ 309.505458] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.510313] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.510322] RIP: 0033:0x459879 [ 309.510327] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 309.510337] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 309.510342] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 309.510347] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.510353] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x800000000209b, 0x6000) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) socketpair$unix(0x1, 0xc1575a5c675b745e, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 309.510358] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 309.551002] FAULT_INJECTION: forcing a failure. [ 309.551002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.574956] CPU: 0 PID: 23741 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 309.582056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.591418] Call Trace: [ 309.594010] dump_stack+0x138/0x197 [ 309.597646] should_fail.cold+0x10f/0x159 [ 309.601804] __alloc_pages_nodemask+0x1d6/0x7a0 [ 309.606475] ? fs_reclaim_acquire+0x20/0x20 16:59:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400, 0x12) write$P9_RREAD(r1, &(0x7f0000000040)={0xf9, 0x75, 0x1, {0xee, "5bb459fdcdbabf20ab38f80fd7dd722d8898034fb6b8677b660e007dd19dda74a1581b660ce7182a88b90a45810373a0b43d3b27585b30bc252416e4d0c1fd2bb3beb049ba0fcc296c657743eb8077d29e2519c7b5b33e777d304b9b1c6d525620560d09dae14cfceba41ddc76d986c3b3112d42891f7ec34f7ce2b903908e12a22706bc217347ee4c4bbf4a4e057df37c7eee68e0a043a571d60b3345cb21837d0e0f426582beb99121ec63aeee29b7c2d6d1c7206d8473c156e8ed640628face0a9ec9550e03e2a04288991f68698d9ec7db8e1e87a5b29e769999d424f57663d478da07a64b46337e3f6320b1"}}, 0xf9) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 309.610802] ? __alloc_pages_slowpath+0x2930/0x2930 [ 309.615835] cache_grow_begin+0x80/0x400 [ 309.619910] kmem_cache_alloc_trace+0x6b2/0x790 [ 309.624582] ? lock_downgrade+0x6e0/0x6e0 [ 309.628740] sget_userns+0xfe/0xc30 [ 309.632368] ? get_anon_bdev+0x1c0/0x1c0 [ 309.636442] mount_pseudo_xattr+0xaf/0x4a0 [ 309.640677] ? move_cursor+0x500/0x500 [ 309.644571] dax_mount+0x2f/0x40 [ 309.647935] mount_fs+0x97/0x2a1 [ 309.651305] vfs_kern_mount.part.0+0x5e/0x3d0 [ 309.655802] do_mount+0x417/0x27d0 [ 309.659348] ? copy_mount_string+0x40/0x40 [ 309.663586] ? memdup_user+0x58/0xa0 [ 309.667297] ? copy_mount_options+0x1fe/0x2f0 [ 309.671799] SyS_mount+0xab/0x120 [ 309.675247] ? copy_mnt_ns+0x8c0/0x8c0 [ 309.679134] do_syscall_64+0x1e8/0x640 [ 309.683023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.687876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.693057] RIP: 0033:0x459879 [ 309.693064] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.693075] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 16:59:50 executing program 2 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 309.693081] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 309.693086] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.693092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 309.693098] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 309.717014] FAULT_INJECTION: forcing a failure. [ 309.717014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.731956] CPU: 0 PID: 23753 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 309.753004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.753010] Call Trace: [ 309.753027] dump_stack+0x138/0x197 [ 309.753046] should_fail.cold+0x10f/0x159 [ 309.753060] ? __might_sleep+0x93/0xb0 [ 309.769498] __alloc_pages_nodemask+0x1d6/0x7a0 [ 309.788347] ? __alloc_pages_slowpath+0x2930/0x2930 [ 309.793364] ? lock_downgrade+0x6e0/0x6e0 [ 309.793389] alloc_pages_vma+0xc9/0x4c0 [ 309.793410] shmem_alloc_page+0xf6/0x1a0 [ 309.793420] ? shmem_swapin+0x1a0/0x1a0 [ 309.793432] ? cred_has_capability+0x142/0x290 [ 309.793447] ? check_preemption_disabled+0x3c/0x250 [ 309.801548] ? __this_cpu_preempt_check+0x1d/0x30 [ 309.801562] ? percpu_counter_add_batch+0x112/0x160 [ 309.801575] ? __vm_enough_memory+0x26a/0x490 [ 309.801592] shmem_alloc_and_acct_page+0x12a/0x680 [ 309.801606] shmem_getpage_gfp+0x3e7/0x25d0 [ 309.801627] ? shmem_add_to_page_cache+0x860/0x860 [ 309.809643] shmem_file_read_iter+0x486/0x9a0 [ 309.809666] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 309.819237] ? iov_iter_pipe+0x9f/0x2c0 [ 309.819251] generic_file_splice_read+0x37d/0x600 [ 309.867541] ? fsnotify+0x11e0/0x11e0 [ 309.871369] ? add_to_pipe+0x340/0x340 [ 309.875280] ? rw_verify_area+0xea/0x2b0 [ 309.879341] ? add_to_pipe+0x340/0x340 [ 309.883237] do_splice_to+0x105/0x170 [ 309.887049] splice_direct_to_actor+0x222/0x7b0 [ 309.891729] ? generic_pipe_buf_nosteal+0x10/0x10 [ 309.896584] ? do_splice_to+0x170/0x170 [ 309.900563] ? rw_verify_area+0xea/0x2b0 [ 309.904628] do_splice_direct+0x18d/0x230 [ 309.908776] ? splice_direct_to_actor+0x7b0/0x7b0 [ 309.913622] ? rw_verify_area+0xea/0x2b0 [ 309.917680] do_sendfile+0x4db/0xbd0 [ 309.921405] ? do_compat_pwritev64+0x140/0x140 [ 309.925987] ? fput+0xd4/0x150 [ 309.929185] SyS_sendfile64+0x102/0x110 [ 309.933169] ? SyS_sendfile+0x130/0x130 [ 309.937143] ? do_syscall_64+0x53/0x640 [ 309.941121] ? SyS_sendfile+0x130/0x130 [ 309.945192] do_syscall_64+0x1e8/0x640 [ 309.949075] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.953911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 309.959183] RIP: 0033:0x459879 16:59:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x81, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x1, 0x1200000, 0x14800, 0x0, 0x1f}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x3) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x4, 0x8001) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x3, 0xffffffffffffff85) 16:59:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x62, @broadcast, 0x4e22, 0x2, 'sh\x00', 0x9, 0x821, 0x3e}, 0x2c) [ 309.962363] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 309.970074] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 309.977326] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 309.984575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 309.991827] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 309.999080] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:50 executing program 1 (fault-call:1 fault-nth:6): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:50 executing program 2 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) 16:59:50 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740)='/dev/zero\x00', 0x50083, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/rfkill\x00', 0x40000, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000a40)={0x2, 0x0, @broadcast}, &(0x7f0000000a80)=0x10) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000ac0)={0x0}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8) getgroups(0x5, &(0x7f0000000c80)=[0x0, 0xee01, 0x0, 0xee00, 0xee00]) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)={0x10, 0x2, 0x0, 0x5, 0x100, 0xffffffffffffffff, 0x2, [], 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x3c) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/uhid\x00', 0x802, 0x0) r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000e00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r18 = eventfd(0x550f) r19 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/capi/capi20ncci\x00', 0x800, 0x0) r20 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000f00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0}, &(0x7f0000000f80)=0xc) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$caif_stream(0x25, 0x1, 0x1) r25 = socket$inet6_udplite(0xa, 0x2, 0x88) r26 = syz_open_dev$sndtimer(&(0x7f0000001240)='/dev/snd/timer\x00', 0x0, 0x2000) r27 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r28 = socket$inet6_dccp(0xa, 0x6, 0x0) r29 = syz_open_dev$dmmidi(&(0x7f0000001280)='/dev/dmmidi#\x00', 0x5, 0x101000) r30 = syz_open_dev$sndtimer(&(0x7f00000012c0)='/dev/snd/timer\x00', 0x0, 0x280400) r31 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001300)='/dev/video1\x00', 0x2, 0x0) r32 = syz_open_dev$mouse(&(0x7f0000001340)='/dev/input/mouse#\x00', 0x1, 0x20000) r33 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001380)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r34 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0xe, 0x5, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f00000014c0)='GPL\x00', 0x4, 0x20, &(0x7f0000001500)=""/32, 0x40f00, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x1, 0x10, 0x10001, 0x6}, 0x10}, 0x70) r35 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001640)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r36 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001680), 0x800) r37 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000001700)={0x99, 0x2, 0x652a19515a01d7d2, 0xffffffffffffffff}) r39 = eventfd2(0x9, 0x1) r40 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001740)='/dev/cuse\x00', 0x2, 0x0) r41 = eventfd2(0xfff, 0x1) sendmsg$unix(r0, &(0x7f0000001900)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r4, r5]}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x30, 0x1, 0x1, [r13, r14, r15, r16, r17, r18, r19, r20]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x2c, 0x1, 0x1, [r24, r25, r26, r27, r28, r29, r30]}}, @rights={{0x2c, 0x1, 0x1, [r31, r32, r33, r34, r35, r36, r37]}}, @rights={{0x20, 0x1, 0x1, [r38, r39, r40, r41]}}], 0x160, 0x40010}, 0x4090) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000140)="c96a2e105c5a331af79f1140417a6909099df25e8467ce5b53081fdccb9dd9782258d9f1619d0bec43800421ab81ff563681bf35262e28e122bb721521a17514b5a11432428532fe95be2cc4daaffe8c8b9978b0e677398514c4e038175ec85a1d3c765d29a90c1379a73633ecd1b3b04d2b108d", 0x74}, {&(0x7f00000001c0), 0x0, 0x3}, {&(0x7f0000000200)="38508436c816d02a6c29ea53dbbcda64e08de491817616cf8b7e6df510190169591288fee3fb1ae8bbd40c7d72d458cc293d2cfa0b084dd756a9b4c7b40eac0902ca7f10dcb8944f0ede60afffbf3a7d9a95c00fd96eae54d40163a0ad", 0x5d, 0x7}, {&(0x7f0000000340)="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", 0xfc, 0x29f}, {&(0x7f0000000440)="8247399cf254b5b46272e38471c6ba31f6a1610d88a0f16967a195310277317ce9343467a7d94347231a91c4ff26b46487917741e511c101cea30131ace08fdefea24e9b71dd689d33d9069250ce9f77b415a740876bfcf3a81f09a17beceed768da7e45dbd868d1881fb37b078206cebe9510584f284dc7b8a7fe34dc4e369be3b2cd101811e4448fdbef85de452beaa8bdcec675270d350ea7709f7bbb58f70696837e1de9d99dd3b6d4c45e333dad79a3f9b0b0942a6e01b7a90c3ede86e5f150578ca2f7011b6efc08d547f74fe10888cbef4de9b6aa8e1f72179fbe1ab271f7", 0xe2, 0x1}, {&(0x7f0000000540)="545600ea367b3738dafd12c13ce1f8eea50da8b6a05476f71ff575fb024aee6d24ec11e37bd893603b054b673eb2456dfd6c2c9ac6af6875b9d9b2de1d6473a9e3085920e6439d42e171a9a4c257ffd326140d0415148751b2bf7fa78210a811af8581e2f37eac18dfe8b645ec9911b11c64224a8fa64679accf65", 0x7b, 0x7}, {&(0x7f00000002c0)="8a10611e", 0x4, 0x6}], 0x20000, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6f646f74732c6e6fff6f74732c6e6f646f74732c6e6f646f74732c61756469742c7375626ab0327365723d706f72742c00"]) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0)=@random={'user.', 'md5sum\x00'}, &(0x7f0000000700)=':wlan0(-cgroupprocposix_acl_access*&bdev\x00', 0x29, 0x1) 16:59:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x301000) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/169) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 310.114937] FAULT_INJECTION: forcing a failure. [ 310.114937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$getown(r0, 0x9) sched_getaffinity(r2, 0x8, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x31, 0x9, 0x2, 0x2, 0x9, 0x4, 0x3, 0xfb9, 0x9, 0x0, 0x9, 0x800, 0x3}, {0x0, 0x7a78efdf, 0x5, 0x6df, 0x0, 0x9, 0x100000000, 0x9, 0x752, 0x1, 0x4, 0x9}, {0x7, 0x917, 0x1000, 0x5, 0x8000000000, 0x10000, 0x1, 0x100000001, 0x5, 0x7, 0x2, 0x3, 0x1}], 0x78}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140), 0xc) 16:59:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8002, {r1, r2+10000000}}) clock_getres(0x4, &(0x7f0000000080)) [ 310.168044] FAULT_INJECTION: forcing a failure. [ 310.168044] name failslab, interval 1, probability 0, space 0, times 0 [ 310.185764] CPU: 0 PID: 23773 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 310.192896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.202248] Call Trace: [ 310.202271] dump_stack+0x138/0x197 [ 310.202290] should_fail.cold+0x10f/0x159 [ 310.202301] ? __might_sleep+0x93/0xb0 [ 310.202314] __alloc_pages_nodemask+0x1d6/0x7a0 [ 310.202329] ? __alloc_pages_slowpath+0x2930/0x2930 [ 310.202339] ? lock_downgrade+0x6e0/0x6e0 [ 310.202358] alloc_pages_vma+0xc9/0x4c0 [ 310.202407] shmem_alloc_page+0xf6/0x1a0 [ 310.202419] ? shmem_swapin+0x1a0/0x1a0 [ 310.216631] ? cred_has_capability+0x142/0x290 [ 310.216644] ? check_preemption_disabled+0x3c/0x250 [ 310.251986] ? __this_cpu_preempt_check+0x1d/0x30 [ 310.256838] ? percpu_counter_add_batch+0x112/0x160 [ 310.261862] ? __vm_enough_memory+0x26a/0x490 [ 310.266360] shmem_alloc_and_acct_page+0x12a/0x680 [ 310.271323] shmem_getpage_gfp+0x3e7/0x25d0 [ 310.275747] ? shmem_add_to_page_cache+0x860/0x860 [ 310.280690] shmem_file_read_iter+0x486/0x9a0 [ 310.285199] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 310.290215] ? iov_iter_pipe+0x9f/0x2c0 [ 310.294192] generic_file_splice_read+0x37d/0x600 [ 310.299043] ? fsnotify+0x11e0/0x11e0 [ 310.302847] ? add_to_pipe+0x340/0x340 [ 310.306748] ? rw_verify_area+0xea/0x2b0 [ 310.310806] ? add_to_pipe+0x340/0x340 [ 310.314696] do_splice_to+0x105/0x170 [ 310.318503] splice_direct_to_actor+0x222/0x7b0 [ 310.323179] ? generic_pipe_buf_nosteal+0x10/0x10 [ 310.328021] ? do_splice_to+0x170/0x170 [ 310.331992] ? rw_verify_area+0xea/0x2b0 [ 310.336048] do_splice_direct+0x18d/0x230 [ 310.340195] ? splice_direct_to_actor+0x7b0/0x7b0 [ 310.345047] ? rw_verify_area+0xea/0x2b0 [ 310.349105] do_sendfile+0x4db/0xbd0 [ 310.352822] ? do_compat_pwritev64+0x140/0x140 [ 310.357411] ? fput+0xd4/0x150 [ 310.360612] SyS_sendfile64+0x102/0x110 [ 310.364587] ? SyS_sendfile+0x130/0x130 16:59:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) [ 310.368570] ? do_syscall_64+0x53/0x640 [ 310.372541] ? SyS_sendfile+0x130/0x130 [ 310.376518] do_syscall_64+0x1e8/0x640 [ 310.380402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.385257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.390440] RIP: 0033:0x459879 [ 310.393623] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 310.401328] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 310.408609] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 310.415873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.423139] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 310.430405] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 310.439820] CPU: 1 PID: 23778 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 310.446945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.456298] Call Trace: [ 310.458891] dump_stack+0x138/0x197 [ 310.462531] should_fail.cold+0x10f/0x159 [ 310.466686] should_failslab+0xdb/0x130 [ 310.470671] __kmalloc+0x2f0/0x7a0 [ 310.474219] ? __list_lru_init+0x6b/0x660 [ 310.478370] __list_lru_init+0x6b/0x660 [ 310.478388] sget_userns+0x4e0/0xc30 [ 310.478396] ? get_anon_bdev+0x1c0/0x1c0 [ 310.478415] mount_pseudo_xattr+0xaf/0x4a0 [ 310.486071] ? move_cursor+0x500/0x500 [ 310.486091] dax_mount+0x2f/0x40 [ 310.486103] mount_fs+0x97/0x2a1 [ 310.504955] vfs_kern_mount.part.0+0x5e/0x3d0 [ 310.509460] do_mount+0x417/0x27d0 [ 310.513009] ? copy_mount_string+0x40/0x40 16:59:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r4}}, 0x18) [ 310.517253] ? memdup_user+0x58/0xa0 [ 310.520967] ? copy_mount_options+0x1fe/0x2f0 [ 310.525464] SyS_mount+0xab/0x120 [ 310.528917] ? copy_mnt_ns+0x8c0/0x8c0 [ 310.532810] do_syscall_64+0x1e8/0x640 [ 310.536700] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.541554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.546876] RIP: 0033:0x459879 [ 310.550070] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.557802] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 310.565067] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 310.572335] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 310.579597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 310.586862] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:51 executing program 0: socketpair$unix(0x1, 0xf20b061304fa1ceb, 0x0, &(0x7f00000004c0)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2c7) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x125443, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:51 executing program 2 (fault-call:4 fault-nth:9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:51 executing program 1 (fault-call:1 fault-nth:7): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:51 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=rdma,', {'port'}}) [ 310.766299] FAULT_INJECTION: forcing a failure. [ 310.766299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.783757] FAULT_INJECTION: forcing a failure. [ 310.783757] name failslab, interval 1, probability 0, space 0, times 0 [ 310.809077] CPU: 0 PID: 23821 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 310.816202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.825546] Call Trace: [ 310.825567] dump_stack+0x138/0x197 [ 310.825588] should_fail.cold+0x10f/0x159 [ 310.825600] ? __might_sleep+0x93/0xb0 [ 310.825616] __alloc_pages_nodemask+0x1d6/0x7a0 [ 310.825632] ? __alloc_pages_slowpath+0x2930/0x2930 [ 310.825642] ? lock_downgrade+0x6e0/0x6e0 [ 310.825663] alloc_pages_vma+0xc9/0x4c0 [ 310.825678] shmem_alloc_page+0xf6/0x1a0 [ 310.862149] ? shmem_swapin+0x1a0/0x1a0 [ 310.866114] ? cred_has_capability+0x142/0x290 [ 310.866128] ? check_preemption_disabled+0x3c/0x250 [ 310.866140] ? __this_cpu_preempt_check+0x1d/0x30 [ 310.880537] ? percpu_counter_add_batch+0x112/0x160 [ 310.885561] ? __vm_enough_memory+0x26a/0x490 [ 310.890061] shmem_alloc_and_acct_page+0x12a/0x680 [ 310.895001] shmem_getpage_gfp+0x3e7/0x25d0 [ 310.899344] ? shmem_add_to_page_cache+0x860/0x860 [ 310.904282] shmem_file_read_iter+0x486/0x9a0 [ 310.908797] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 310.913816] ? iov_iter_pipe+0x9f/0x2c0 [ 310.917796] generic_file_splice_read+0x37d/0x600 [ 310.922653] ? fsnotify+0x11e0/0x11e0 [ 310.926454] ? add_to_pipe+0x340/0x340 [ 310.930363] ? rw_verify_area+0xea/0x2b0 [ 310.934421] ? add_to_pipe+0x340/0x340 [ 310.938310] do_splice_to+0x105/0x170 [ 310.942118] splice_direct_to_actor+0x222/0x7b0 [ 310.946791] ? generic_pipe_buf_nosteal+0x10/0x10 [ 310.951640] ? do_splice_to+0x170/0x170 [ 310.955609] ? rw_verify_area+0xea/0x2b0 [ 310.959669] do_splice_direct+0x18d/0x230 [ 310.963813] ? splice_direct_to_actor+0x7b0/0x7b0 [ 310.968656] ? rw_verify_area+0xea/0x2b0 [ 310.972716] do_sendfile+0x4db/0xbd0 [ 310.976439] ? do_compat_pwritev64+0x140/0x140 [ 310.981021] ? fput+0xd4/0x150 [ 310.984216] SyS_sendfile64+0x102/0x110 [ 310.988187] ? SyS_sendfile+0x130/0x130 [ 310.992161] ? do_syscall_64+0x53/0x640 [ 310.996135] ? SyS_sendfile+0x130/0x130 [ 311.000109] do_syscall_64+0x1e8/0x640 [ 311.003992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.008841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.014023] RIP: 0033:0x459879 16:59:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:51 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000002c0)={@initdev, @rand_addr, @empty}, &(0x7f0000000300)=0xc) add_key(&(0x7f0000000100)='trusted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="cc7e4f22e6b9ff26c2fe3558b76948178c7bbc3cf11da7e5b19f0bc16e3ec2c409b0cc9a8fb19c32979d6952d082fde455d5f58540e43397c705cbd22727f1bcb2dc32d45de92b83459a2561f8e7d24c93a603e2b45eb97f8faa046eef8bba0121199da383c09e825355801a517b8a4369190754ffaf0c6b41614156efe58e47aa7d19324a5e7a454479d90205086a1e5b5dea9c1f78c97433033d803c4b12bef0783ae4aee19303baa51a1e740c3a2b7dcc162fb5ee8d204d0388efd5c17bd6f37f913d5ab73a07", 0xc8, 0xfffffffffffffff9) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000340)={0x88, @loopback, 0x4e21, 0x2, 'ovf\x00', 0x2, 0xa029, 0x71}, 0x2c) 16:59:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000040)=""/17) bind$netlink(r1, &(0x7f0000000140), 0xc) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) [ 311.017204] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 311.024921] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 311.032765] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 311.040027] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.047290] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 311.054556] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 311.073182] CPU: 0 PID: 23822 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 311.080298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.089649] Call Trace: [ 311.089667] dump_stack+0x138/0x197 [ 311.095867] should_fail.cold+0x10f/0x159 [ 311.100028] should_failslab+0xdb/0x130 [ 311.104013] __kmalloc+0x2f0/0x7a0 [ 311.107651] ? __list_lru_init+0x6b/0x660 [ 311.111806] __list_lru_init+0x6b/0x660 [ 311.115181] 9pnet: Could not find request transport: rdmi [ 311.115781] sget_userns+0x4e0/0xc30 [ 311.125012] ? get_anon_bdev+0x1c0/0x1c0 [ 311.129086] mount_pseudo_xattr+0xaf/0x4a0 [ 311.133346] ? move_cursor+0x500/0x500 [ 311.137250] dax_mount+0x2f/0x40 [ 311.138890] 9pnet: Could not find request transport: rdmi [ 311.140614] mount_fs+0x97/0x2a1 [ 311.140632] vfs_kern_mount.part.0+0x5e/0x3d0 [ 311.140645] do_mount+0x417/0x27d0 [ 311.140660] ? copy_mount_string+0x40/0x40 [ 311.140674] ? memdup_user+0x58/0xa0 [ 311.140683] ? copy_mount_options+0x1fe/0x2f0 [ 311.140698] SyS_mount+0xab/0x120 [ 311.140708] ? copy_mnt_ns+0x8c0/0x8c0 [ 311.177388] do_syscall_64+0x1e8/0x640 [ 311.181285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.186152] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.191343] RIP: 0033:0x459879 [ 311.194534] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.202250] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 311.210205] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 16:59:51 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x10000) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x672c, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xffffffffffffffbc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 16:59:51 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8300, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x0, @local}) 16:59:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffb000/0x3000)=nil) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) [ 311.217477] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.224751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 311.232026] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:51 executing program 1 (fault-call:1 fault-nth:8): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:51 executing program 2 (fault-call:4 fault-nth:10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x400003, 0x10004}, 0xfffffffffffffeb5) 16:59:51 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x400100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xf0, "2ec6325bb275d8cbe9f7f2d6444164766f1bec293c67bf1a885a2cc401b40e85f2f7ebbfede89da79c712c120839668cc7526b913125a3780698ad8a0ed06a15b4d9e98c370468a34cb8bc7fd5adf111b1aa3e387022a9798101ba35de3d621539e399df0004b75b602aade3ba7d5abeaaa57ff614a080c863608225bbd7e693f2c1ffb5d3309cd926a16df039fe937d0481abb32c639db82579de57bc230942686a717784083618371399d95254e66672342861c1cd458655177cd2cc12f08aafc814aea6c2238dd32dec379512d2d81b0ea21caccecfd9056f1aa0a169c20b7b906aff25e9f8d7893760eda732ae7f"}, &(0x7f0000000200)=0xf8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x2, [0x2, 0xceb]}, &(0x7f00000002c0)=0xc) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="74721b616e733d72646d612c74696d656f93743d3078303030303030303066666530303030302c00be9dde2880cf5b8229f9eb208c7c55c900"/80]) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x400000bc919) 16:59:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) 16:59:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 311.444813] 9pnet_virtio: no channels available for device 127.0.0.1 [ 311.449021] FAULT_INJECTION: forcing a failure. [ 311.449021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.465572] FAULT_INJECTION: forcing a failure. [ 311.465572] name failslab, interval 1, probability 0, space 0, times 0 [ 311.496544] CPU: 1 PID: 23872 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 311.499104] 9pnet_virtio: no channels available for device 127.0.0.1 [ 311.503693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.503699] Call Trace: [ 311.503720] dump_stack+0x138/0x197 [ 311.503741] should_fail.cold+0x10f/0x159 [ 311.503751] ? __might_sleep+0x93/0xb0 [ 311.503764] __alloc_pages_nodemask+0x1d6/0x7a0 [ 311.503777] ? __alloc_pages_slowpath+0x2930/0x2930 [ 311.503793] ? lock_downgrade+0x6e0/0x6e0 [ 311.503818] alloc_pages_vma+0xc9/0x4c0 [ 311.519702] shmem_alloc_page+0xf6/0x1a0 [ 311.534175] ? shmem_swapin+0x1a0/0x1a0 [ 311.534191] ? cred_has_capability+0x142/0x290 [ 311.534206] ? check_preemption_disabled+0x3c/0x250 [ 311.534221] ? __this_cpu_preempt_check+0x1d/0x30 [ 311.534233] ? percpu_counter_add_batch+0x112/0x160 [ 311.534246] ? __vm_enough_memory+0x26a/0x490 [ 311.583992] shmem_alloc_and_acct_page+0x12a/0x680 [ 311.588947] shmem_getpage_gfp+0x3e7/0x25d0 [ 311.593288] ? shmem_add_to_page_cache+0x860/0x860 [ 311.593310] shmem_file_read_iter+0x486/0x9a0 [ 311.593329] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 311.608009] ? iov_iter_pipe+0x9f/0x2c0 [ 311.611999] generic_file_splice_read+0x37d/0x600 [ 311.616848] ? fsnotify+0x11e0/0x11e0 [ 311.620661] ? add_to_pipe+0x340/0x340 [ 311.624566] ? rw_verify_area+0xea/0x2b0 [ 311.628981] ? add_to_pipe+0x340/0x340 [ 311.632881] do_splice_to+0x105/0x170 [ 311.636695] splice_direct_to_actor+0x222/0x7b0 [ 311.641382] ? generic_pipe_buf_nosteal+0x10/0x10 [ 311.646241] ? do_splice_to+0x170/0x170 [ 311.650224] ? rw_verify_area+0xea/0x2b0 [ 311.654315] do_splice_direct+0x18d/0x230 [ 311.658473] ? splice_direct_to_actor+0x7b0/0x7b0 [ 311.663325] ? rw_verify_area+0xea/0x2b0 [ 311.667392] do_sendfile+0x4db/0xbd0 [ 311.671119] ? do_compat_pwritev64+0x140/0x140 [ 311.675712] ? fput+0xd4/0x150 [ 311.678903] SyS_sendfile64+0x102/0x110 [ 311.682888] ? SyS_sendfile+0x130/0x130 [ 311.686862] ? do_syscall_64+0x53/0x640 [ 311.690844] ? SyS_sendfile+0x130/0x130 16:59:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x0, 0x2) faccessat(r1, &(0x7f0000000340)='./file0\x00', 0x2, 0x500) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x101001, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0xb, @raw_data="2a4b8fada60a817a441607a0d91902adcbb3b6d9dfa9a4f1ec298aac6821546846c246a51a50ac73a081dfa1a4bc412890d47c5506d0df8d4438b3fac8b539298d1f5809689e2302f0671b2de41e12cde7574003b5d7da3f913d895023310462f370a9899b154a9c7d9ce56353e239f4715275ac4e45a34d4b8ef628a1ff0c6bcfc5a1a3dd812de0aa1af9bed97d0170e138cc1717dbfd0e0493a1449366a2ad9d0653d564c6e5d2fc7701825bf1de3d5057de032b1afc435595d3a5610abc669252953e400363b5"}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x8000, @mcast2, 0xffffffffffffffe0}, {0xa, 0x4e21, 0x6, @remote}, 0xfd4, [0x9, 0x6, 0x3, 0x800000000000000, 0x9, 0x4, 0x1, 0x9]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:52 executing program 5: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 311.694821] do_syscall_64+0x1e8/0x640 [ 311.694832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.694850] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.694862] RIP: 0033:0x459879 [ 311.703557] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 311.703570] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 311.703581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 311.703587] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.703593] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 311.703599] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 311.760935] CPU: 0 PID: 23874 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 311.768049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.777398] Call Trace: [ 311.779989] dump_stack+0x138/0x197 [ 311.783620] should_fail.cold+0x10f/0x159 [ 311.787773] should_failslab+0xdb/0x130 [ 311.791753] __kmalloc+0x2f0/0x7a0 [ 311.795309] ? lock_downgrade+0x6e0/0x6e0 [ 311.805696] ? register_shrinker+0xbd/0x220 [ 311.810027] register_shrinker+0xbd/0x220 [ 311.814166] sget_userns+0x9bf/0xc30 [ 311.817860] ? get_anon_bdev+0x1c0/0x1c0 [ 311.821908] mount_pseudo_xattr+0xaf/0x4a0 [ 311.826124] ? move_cursor+0x500/0x500 [ 311.829996] dax_mount+0x2f/0x40 [ 311.833349] mount_fs+0x97/0x2a1 [ 311.836697] vfs_kern_mount.part.0+0x5e/0x3d0 [ 311.841184] do_mount+0x417/0x27d0 [ 311.844718] ? copy_mount_string+0x40/0x40 [ 311.848941] ? memdup_user+0x58/0xa0 [ 311.852636] ? copy_mount_options+0x1fe/0x2f0 [ 311.857135] SyS_mount+0xab/0x120 [ 311.860583] ? copy_mnt_ns+0x8c0/0x8c0 [ 311.864471] do_syscall_64+0x1e8/0x640 [ 311.868342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.873170] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.878345] RIP: 0033:0x459879 [ 311.881528] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.889232] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 16:59:52 executing program 1 (fault-call:1 fault-nth:9): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:52 executing program 5: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001580)={0x0, 0xfffffffffffffffd, 0x10001, 0x8, 0x1, 0x1}, &(0x7f00000015c0)=0x11) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000001600)=@assoc_id=r2, &(0x7f0000001640)=0x4) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'keyring'}, {0x20, 'posix_acl_access'}, {0x20, '127.0.0.1\x00'}, {0x20, 'timeout'}, {0x20, 'port'}, {0x20, ',%lo'}, {0x20, 'trans=rdma,'}], 0xa, "89e22c24c446a7a7c1db07923175b7b35a3bc13b2d1d18a611d8e16c85204c0ae40a433d56a56f2e3cc6b741e85af1debb1d207df68e20544d01af7e58c55de72246564cd972358110d4e90562c98f06a9b3ee56a6def4d689e4571542a1a5f6909e4e48a627509401c090d266266e69ec9c12fd4cd0e336fffeeffb1751f1c04aed8e30e55562ef5042c831282c2ae40f4e23b46d1b8d276e"}, 0xe6) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 16:59:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 16:59:52 executing program 2 (fault-call:4 fault-nth:11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x4c0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0x5}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x80200) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2800000037010002080000004f0000004200000000000000a80608f9ce5d37455a2f17bf979c64d9398b35a5d82dc9df5d061f36112caabde51bac805afbba1431e2b8b55015a425df76959fb3b7af4da222534280fda58e37910335e99a384f6f5e6b099ef8f3cf16c795a8f7fe", @ANYRES32=r2, @ANYBLOB='\n\x00/dev/nbd#\x00'], 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000008c0)=0x8, 0x4) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 311.896492] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 311.903743] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 311.911003] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 311.918266] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 312.024197] FAULT_INJECTION: forcing a failure. [ 312.024197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.050338] FAULT_INJECTION: forcing a failure. [ 312.050338] name failslab, interval 1, probability 0, space 0, times 0 [ 312.088905] CPU: 1 PID: 23902 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 312.096035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.096043] Call Trace: [ 312.107993] dump_stack+0x138/0x197 [ 312.111629] should_fail.cold+0x10f/0x159 [ 312.115787] ? __might_sleep+0x93/0xb0 [ 312.119679] __alloc_pages_nodemask+0x1d6/0x7a0 [ 312.124353] ? __alloc_pages_slowpath+0x2930/0x2930 [ 312.129380] ? lock_downgrade+0x6e0/0x6e0 [ 312.133541] alloc_pages_vma+0xc9/0x4c0 [ 312.133561] shmem_alloc_page+0xf6/0x1a0 [ 312.133572] ? shmem_swapin+0x1a0/0x1a0 [ 312.133585] ? cred_has_capability+0x142/0x290 [ 312.133599] ? check_preemption_disabled+0x3c/0x250 [ 312.150138] ? __this_cpu_preempt_check+0x1d/0x30 [ 312.150151] ? percpu_counter_add_batch+0x112/0x160 [ 312.150168] ? __vm_enough_memory+0x26a/0x490 [ 312.150188] shmem_alloc_and_acct_page+0x12a/0x680 [ 312.150203] shmem_getpage_gfp+0x3e7/0x25d0 [ 312.150240] ? shmem_add_to_page_cache+0x860/0x860 [ 312.165106] shmem_file_read_iter+0x486/0x9a0 [ 312.165131] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 312.165145] ? iov_iter_pipe+0x9f/0x2c0 [ 312.165159] generic_file_splice_read+0x37d/0x600 [ 312.178879] ? fsnotify+0x11e0/0x11e0 [ 312.178893] ? add_to_pipe+0x340/0x340 [ 312.178918] ? rw_verify_area+0xea/0x2b0 [ 312.178926] ? add_to_pipe+0x340/0x340 [ 312.178937] do_splice_to+0x105/0x170 [ 312.178950] splice_direct_to_actor+0x222/0x7b0 [ 312.221491] ? generic_pipe_buf_nosteal+0x10/0x10 [ 312.221506] ? do_splice_to+0x170/0x170 [ 312.221519] ? rw_verify_area+0xea/0x2b0 [ 312.221531] do_splice_direct+0x18d/0x230 [ 312.221543] ? splice_direct_to_actor+0x7b0/0x7b0 [ 312.221560] ? rw_verify_area+0xea/0x2b0 [ 312.221572] do_sendfile+0x4db/0xbd0 [ 312.255790] ? do_compat_pwritev64+0x140/0x140 [ 312.260382] ? fput+0xd4/0x150 [ 312.263583] SyS_sendfile64+0x102/0x110 [ 312.267558] ? SyS_sendfile+0x130/0x130 [ 312.271536] ? do_syscall_64+0x53/0x640 [ 312.275518] ? SyS_sendfile+0x130/0x130 [ 312.279488] do_syscall_64+0x1e8/0x640 [ 312.279499] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:59:52 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x100) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x2) 16:59:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x101, 0x0, 0x2020, 0x5, 0x3, 0x9, 0x3, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="2f00000006000000000000000000000001000000000000000100000000000000060000000000000023656d30232b002c2e06a0a5eda5cd85caad7c8fa738f042c54bd18700532f86bfb80518d2c066c110d12a4e924d21f492afaf3b9f50922309b4906b3439d7f7450de88701f52188db3bf9c6337299010311d62c9c2ebfc12352b254ec62a7b2e5e0468cb3e837bd63f7"], 0x2f) 16:59:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001, {}, 0x0, 0x2}) 16:59:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 312.279518] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.279527] RIP: 0033:0x459879 [ 312.279532] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 312.279544] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 312.279552] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 312.318894] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.326154] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 312.326161] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 312.346004] CPU: 0 PID: 23906 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 312.353117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.362468] Call Trace: [ 312.365060] dump_stack+0x138/0x197 [ 312.368696] should_fail.cold+0x10f/0x159 [ 312.372855] should_failslab+0xdb/0x130 [ 312.376837] kmem_cache_alloc+0x2d7/0x780 [ 312.381006] ? up_write+0x1a/0x60 [ 312.384456] ? register_shrinker+0x1a9/0x220 [ 312.388863] ? dax_i_callback+0x100/0x100 [ 312.393012] dax_alloc_inode+0x1d/0x80 [ 312.396898] alloc_inode+0x64/0x180 [ 312.400547] new_inode_pseudo+0x19/0xf0 [ 312.404523] new_inode+0x1f/0x40 [ 312.407898] mount_pseudo_xattr+0x205/0x4a0 [ 312.412235] ? move_cursor+0x500/0x500 [ 312.416129] dax_mount+0x2f/0x40 [ 312.419496] mount_fs+0x97/0x2a1 [ 312.422872] vfs_kern_mount.part.0+0x5e/0x3d0 [ 312.427367] do_mount+0x417/0x27d0 [ 312.430919] ? copy_mount_string+0x40/0x40 [ 312.435154] ? memdup_user+0x58/0xa0 [ 312.438863] ? copy_mount_options+0x1fe/0x2f0 [ 312.443361] SyS_mount+0xab/0x120 [ 312.446814] ? copy_mnt_ns+0x8c0/0x8c0 [ 312.450704] do_syscall_64+0x1e8/0x640 [ 312.454588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.459427] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.464599] RIP: 0033:0x459879 [ 312.467768] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.475463] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 312.482721] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 312.489972] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.497225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 312.504474] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:53 executing program 1 (fault-call:1 fault-nth:10): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:53 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200, 0x0) recvfrom(r0, &(0x7f0000000100)=""/97, 0x61, 0x10000, 0x0, 0x0) 16:59:53 executing program 2 (fault-call:4 fault-nth:12): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:53 executing program 0: seccomp(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1f, 0x7, 0x1, 0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8100, 0x0) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x754) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0x1b0, 0x1b0, 0x1b0, 0xc0, 0xc0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000040), {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0xff000000, 'rose0\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x3, 0x2}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x1, 0x4, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast1, @local, 0xffffffff, 0xff, 'ip6tnl0\x00', 'nlmon0\x00', {0xff}, {}, 0x88, 0x3, 0x18}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x10, 0x1, 0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x776b, @remote, 0x8, 0xb, [0x2e, 0x39, 0x26, 0x37, 0x40, 0xa, 0x5, 0xe, 0x14, 0x29, 0x2e, 0x34, 0x15, 0x7, 0x7, 0x3c], 0x2, 0x6, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 16:59:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 312.598074] FAULT_INJECTION: forcing a failure. [ 312.598074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 312.634411] FAULT_INJECTION: forcing a failure. [ 312.634411] name failslab, interval 1, probability 0, space 0, times 0 [ 312.655693] CPU: 1 PID: 23945 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 312.662821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.662826] Call Trace: [ 312.662845] dump_stack+0x138/0x197 [ 312.662864] should_fail.cold+0x10f/0x159 [ 312.662877] ? __might_sleep+0x93/0xb0 [ 312.686488] __alloc_pages_nodemask+0x1d6/0x7a0 [ 312.691164] ? __alloc_pages_slowpath+0x2930/0x2930 [ 312.696191] ? lock_downgrade+0x6e0/0x6e0 [ 312.700349] alloc_pages_vma+0xc9/0x4c0 [ 312.704332] shmem_alloc_page+0xf6/0x1a0 [ 312.708395] ? shmem_swapin+0x1a0/0x1a0 [ 312.712382] ? cred_has_capability+0x142/0x290 [ 312.716969] ? check_preemption_disabled+0x3c/0x250 [ 312.722081] ? __this_cpu_preempt_check+0x1d/0x30 [ 312.727011] ? percpu_counter_add_batch+0x112/0x160 [ 312.732029] ? __vm_enough_memory+0x26a/0x490 [ 312.732048] shmem_alloc_and_acct_page+0x12a/0x680 [ 312.741457] shmem_getpage_gfp+0x3e7/0x25d0 [ 312.745794] ? shmem_add_to_page_cache+0x860/0x860 [ 312.750726] shmem_file_read_iter+0x486/0x9a0 [ 312.750751] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 312.750765] ? iov_iter_pipe+0x9f/0x2c0 [ 312.750779] generic_file_splice_read+0x37d/0x600 [ 312.750788] ? fsnotify+0x11e0/0x11e0 [ 312.750799] ? add_to_pipe+0x340/0x340 [ 312.776772] ? rw_verify_area+0xea/0x2b0 [ 312.780823] ? add_to_pipe+0x340/0x340 [ 312.784707] do_splice_to+0x105/0x170 [ 312.788503] splice_direct_to_actor+0x222/0x7b0 [ 312.793166] ? generic_pipe_buf_nosteal+0x10/0x10 [ 312.798004] ? do_splice_to+0x170/0x170 [ 312.801973] ? rw_verify_area+0xea/0x2b0 [ 312.806039] do_splice_direct+0x18d/0x230 [ 312.810193] ? splice_direct_to_actor+0x7b0/0x7b0 [ 312.815031] ? rw_verify_area+0xea/0x2b0 [ 312.819087] do_sendfile+0x4db/0xbd0 [ 312.822800] ? do_compat_pwritev64+0x140/0x140 [ 312.827374] ? fput+0xd4/0x150 [ 312.830565] SyS_sendfile64+0x102/0x110 [ 312.834528] ? SyS_sendfile+0x130/0x130 [ 312.838514] ? do_syscall_64+0x53/0x640 [ 312.842482] ? SyS_sendfile+0x130/0x130 [ 312.846446] do_syscall_64+0x1e8/0x640 [ 312.850326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.855180] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 312.860362] RIP: 0033:0x459879 [ 312.863542] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 312.871246] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 312.878513] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 312.885769] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 312.893027] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x7, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000040)='/dev/snd/seq\x00', &(0x7f0000000080)='Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', &(0x7f00000000c0)='wlan1\'/*\x00', &(0x7f0000000100)='Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', &(0x7f0000000200)='cpuset\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='/dev/snd/seq\x00', &(0x7f00000002c0)='Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', &(0x7f0000000300)='posix_acl_accesscgroupvboxnet0posix_acl_access+&procem0\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', &(0x7f0000000440)='$\x00']) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000040)={0x2, 0x101, 0xcf60}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 312.900287] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 312.907569] CPU: 0 PID: 23950 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 312.914673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.924026] Call Trace: [ 312.926608] dump_stack+0x138/0x197 [ 312.930243] should_fail.cold+0x10f/0x159 [ 312.934404] should_failslab+0xdb/0x130 [ 312.938384] kmem_cache_alloc+0x2d7/0x780 [ 312.942533] ? up_write+0x1a/0x60 [ 312.945988] ? register_shrinker+0x1a9/0x220 [ 312.950404] ? dax_i_callback+0x100/0x100 [ 312.954559] dax_alloc_inode+0x1d/0x80 [ 312.958446] alloc_inode+0x64/0x180 [ 312.962077] new_inode_pseudo+0x19/0xf0 [ 312.966049] new_inode+0x1f/0x40 [ 312.969424] mount_pseudo_xattr+0x205/0x4a0 [ 312.973751] ? move_cursor+0x500/0x500 [ 312.977643] dax_mount+0x2f/0x40 [ 312.981011] mount_fs+0x97/0x2a1 [ 312.984385] vfs_kern_mount.part.0+0x5e/0x3d0 [ 312.988883] do_mount+0x417/0x27d0 [ 312.992432] ? copy_mount_string+0x40/0x40 [ 312.996673] ? memdup_user+0x58/0xa0 [ 313.000390] ? copy_mount_options+0x1fe/0x2f0 16:59:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10b000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000500)) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:53 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) [ 313.004884] SyS_mount+0xab/0x120 [ 313.008338] ? copy_mnt_ns+0x8c0/0x8c0 [ 313.012233] do_syscall_64+0x1e8/0x640 [ 313.016119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.020973] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.026655] RIP: 0033:0x459879 [ 313.029841] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.037553] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 313.044820] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 313.052087] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.059355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 313.066628] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:53 executing program 1 (fault-call:1 fault-nth:11): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:53 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, &(0x7f0000000100)=""/122) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 16:59:53 executing program 2 (fault-call:4 fault-nth:13): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = geteuid() ioprio_get$uid(0x3, r2) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0xff, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0x1}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x7ffd}) 16:59:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 313.213881] FAULT_INJECTION: forcing a failure. [ 313.213881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.233792] FAULT_INJECTION: forcing a failure. [ 313.233792] name failslab, interval 1, probability 0, space 0, times 0 [ 313.246787] CPU: 0 PID: 23990 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 313.253910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.263274] Call Trace: [ 313.265866] dump_stack+0x138/0x197 [ 313.265889] should_fail.cold+0x10f/0x159 [ 313.273630] ? __might_sleep+0x93/0xb0 [ 313.273645] __alloc_pages_nodemask+0x1d6/0x7a0 [ 313.273658] ? __alloc_pages_slowpath+0x2930/0x2930 [ 313.273668] ? lock_downgrade+0x6e0/0x6e0 [ 313.273688] alloc_pages_vma+0xc9/0x4c0 [ 313.273705] shmem_alloc_page+0xf6/0x1a0 [ 313.273717] ? shmem_swapin+0x1a0/0x1a0 [ 313.303365] ? cred_has_capability+0x142/0x290 [ 313.307968] ? check_preemption_disabled+0x3c/0x250 [ 313.312992] ? __this_cpu_preempt_check+0x1d/0x30 [ 313.317831] ? percpu_counter_add_batch+0x112/0x160 [ 313.322861] ? __vm_enough_memory+0x26a/0x490 [ 313.327355] shmem_alloc_and_acct_page+0x12a/0x680 [ 313.332284] shmem_getpage_gfp+0x3e7/0x25d0 [ 313.336613] ? shmem_add_to_page_cache+0x860/0x860 [ 313.341541] shmem_file_read_iter+0x486/0x9a0 [ 313.346040] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 313.351047] ? iov_iter_pipe+0x9f/0x2c0 [ 313.355016] generic_file_splice_read+0x37d/0x600 [ 313.359852] ? fsnotify+0x11e0/0x11e0 16:59:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:53 executing program 5: mkdir(0xfffffffffffffffd, 0x100010006) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 313.363651] ? add_to_pipe+0x340/0x340 [ 313.367540] ? rw_verify_area+0xea/0x2b0 [ 313.371602] ? add_to_pipe+0x340/0x340 [ 313.375493] do_splice_to+0x105/0x170 [ 313.379297] splice_direct_to_actor+0x222/0x7b0 [ 313.383967] ? generic_pipe_buf_nosteal+0x10/0x10 [ 313.388812] ? do_splice_to+0x170/0x170 [ 313.392786] ? rw_verify_area+0xea/0x2b0 [ 313.396846] do_splice_direct+0x18d/0x230 [ 313.400990] ? splice_direct_to_actor+0x7b0/0x7b0 [ 313.405835] ? rw_verify_area+0xea/0x2b0 [ 313.409898] do_sendfile+0x4db/0xbd0 [ 313.413628] ? do_compat_pwritev64+0x140/0x140 [ 313.418211] ? fput+0xd4/0x150 [ 313.421399] SyS_sendfile64+0x102/0x110 [ 313.425372] ? SyS_sendfile+0x130/0x130 [ 313.429340] ? do_syscall_64+0x53/0x640 [ 313.433310] ? SyS_sendfile+0x130/0x130 [ 313.437278] do_syscall_64+0x1e8/0x640 [ 313.441165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.446013] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.451201] RIP: 0033:0x459879 [ 313.454386] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 313.462094] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 313.469362] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 313.476631] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 313.485262] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 313.492525] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 313.504708] CPU: 1 PID: 23997 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 313.511824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.521185] Call Trace: [ 313.523775] dump_stack+0x138/0x197 [ 313.527429] should_fail.cold+0x10f/0x159 [ 313.531589] should_failslab+0xdb/0x130 [ 313.535567] kmem_cache_alloc+0x2d7/0x780 [ 313.539720] ? dax_alloc_inode+0x1d/0x80 [ 313.543782] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 313.549240] selinux_inode_alloc_security+0xb6/0x2a0 [ 313.554355] security_inode_alloc+0x94/0xd0 [ 313.558683] inode_init_always+0x552/0xaf0 16:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 313.562917] alloc_inode+0x81/0x180 [ 313.566545] new_inode_pseudo+0x19/0xf0 [ 313.570527] new_inode+0x1f/0x40 [ 313.573896] mount_pseudo_xattr+0x205/0x4a0 [ 313.578226] ? move_cursor+0x500/0x500 [ 313.582124] dax_mount+0x2f/0x40 [ 313.585493] mount_fs+0x97/0x2a1 [ 313.588867] vfs_kern_mount.part.0+0x5e/0x3d0 [ 313.593365] do_mount+0x417/0x27d0 [ 313.596920] ? copy_mount_string+0x40/0x40 [ 313.601167] ? memdup_user+0x58/0xa0 [ 313.604879] ? copy_mount_options+0x1fe/0x2f0 [ 313.609379] SyS_mount+0xab/0x120 [ 313.612836] ? copy_mnt_ns+0x8c0/0x8c0 [ 313.616725] do_syscall_64+0x1e8/0x640 [ 313.616736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.616755] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 313.616767] RIP: 0033:0x459879 [ 313.633818] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.633831] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 313.633837] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 313.633843] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 16:59:54 executing program 1 (fault-call:1 fault-nth:12): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:54 executing program 5: mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 16:59:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="af5c9836f283142a16074b85ab2aa72db6ec144729d4243d509d90852440a1c67ac68dd9217176ace0e2dfa24b1b955193d101c8aa6d61c61f6fa262c3fe89794b3905ebfd6d1d693c0c51e3716ed7b5ceaad9b9af81dfddf80eacb6cc8a4b6a53c56a9252a46b281acabbb70bac771400f108b0830487", 0x77}, {&(0x7f0000000ac0)="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", 0x1000}], 0x2, 0x0) 16:59:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3, 0x511000) write$P9_RWALK(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x7e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000240)={0x7, 0x6, 0x84a8}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x20400080}, 0xc) renameat(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') r3 = dup2(r2, r0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='/proc/self/net/pfkey\x00') prctl$PR_SET_FP_MODE(0x2d, 0x2) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x1, 0xffff, 0x6, 0x6, 0x0, 0x3, 0x100, 0x2, 0x5, 0x3, 0x8, 0x7, 0xfff, 0x0, 0x3, 0x200, 0x0, 0xfffffffffffff800, 0x3, 0x514, 0x1e8d, 0xffffffffffffffff, 0x8, 0x7fff, 0x4, 0x4, 0x8, 0x1, 0x20, 0x400, 0x80000000, 0x1, 0x4caafd8a, 0x2, 0x4, 0x6, 0x0, 0x3, 0x7, @perf_bp={&(0x7f0000000000), 0x5}, 0x600, 0x2, 0x0, 0x9, 0xfff, 0xffffffff, 0x3}, r3, 0xffffffffffffffff, r4, 0x7) 16:59:54 executing program 2 (fault-call:4 fault-nth:14): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 313.633849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 313.633856] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 313.750325] FAULT_INJECTION: forcing a failure. [ 313.750325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200080, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x404200) dup3(r1, r0, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) [ 313.812109] FAULT_INJECTION: forcing a failure. [ 313.812109] name failslab, interval 1, probability 0, space 0, times 0 [ 313.819001] CPU: 1 PID: 24032 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 313.830439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.830445] Call Trace: [ 313.830462] dump_stack+0x138/0x197 [ 313.830482] should_fail.cold+0x10f/0x159 [ 313.830495] ? __might_sleep+0x93/0xb0 [ 313.846031] __alloc_pages_nodemask+0x1d6/0x7a0 [ 313.846045] ? __alloc_pages_slowpath+0x2930/0x2930 [ 313.846056] ? lock_downgrade+0x6e0/0x6e0 [ 313.868495] alloc_pages_vma+0xc9/0x4c0 [ 313.872482] shmem_alloc_page+0xf6/0x1a0 [ 313.876550] ? shmem_swapin+0x1a0/0x1a0 [ 313.880557] ? cred_has_capability+0x142/0x290 [ 313.880571] ? check_preemption_disabled+0x3c/0x250 [ 313.880586] ? __this_cpu_preempt_check+0x1d/0x30 [ 313.880598] ? percpu_counter_add_batch+0x112/0x160 [ 313.880612] ? __vm_enough_memory+0x26a/0x490 [ 313.890303] shmem_alloc_and_acct_page+0x12a/0x680 [ 313.890320] shmem_getpage_gfp+0x3e7/0x25d0 [ 313.890342] ? shmem_add_to_page_cache+0x860/0x860 [ 313.890361] shmem_file_read_iter+0x486/0x9a0 [ 313.923302] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 313.928313] ? iov_iter_pipe+0x9f/0x2c0 [ 313.932282] generic_file_splice_read+0x37d/0x600 [ 313.937113] ? fsnotify+0x11e0/0x11e0 [ 313.940909] ? add_to_pipe+0x340/0x340 [ 313.944797] ? rw_verify_area+0xea/0x2b0 [ 313.948850] ? add_to_pipe+0x340/0x340 [ 313.952742] do_splice_to+0x105/0x170 [ 313.956537] splice_direct_to_actor+0x222/0x7b0 [ 313.961203] ? generic_pipe_buf_nosteal+0x10/0x10 [ 313.966044] ? do_splice_to+0x170/0x170 [ 313.970014] ? rw_verify_area+0xea/0x2b0 [ 313.974081] do_splice_direct+0x18d/0x230 [ 313.978226] ? splice_direct_to_actor+0x7b0/0x7b0 [ 313.983069] ? rw_verify_area+0xea/0x2b0 [ 313.987124] do_sendfile+0x4db/0xbd0 [ 313.990838] ? do_compat_pwritev64+0x140/0x140 [ 313.995415] ? fput+0xd4/0x150 [ 313.998607] SyS_sendfile64+0x102/0x110 [ 314.002577] ? SyS_sendfile+0x130/0x130 [ 314.006552] ? do_syscall_64+0x53/0x640 [ 314.010527] ? SyS_sendfile+0x130/0x130 [ 314.014495] do_syscall_64+0x1e8/0x640 [ 314.018549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.023392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.028574] RIP: 0033:0x459879 [ 314.031753] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.039452] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 314.046711] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 314.053970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.061229] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 314.068492] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 314.075776] CPU: 0 PID: 24040 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 314.082883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.092237] Call Trace: [ 314.094825] dump_stack+0x138/0x197 [ 314.098457] should_fail.cold+0x10f/0x159 [ 314.102613] should_failslab+0xdb/0x130 [ 314.106598] kmem_cache_alloc_trace+0x2e9/0x790 16:59:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @time={r1, r2+30000000}, {}, {}, @queue={0x0, {0x200, 0x4}}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x4, 0x2, 0x1000, 0x8001}, 0x14) 16:59:54 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 16:59:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r3 = accept4$netrom(r2, 0x0, &(0x7f0000000040), 0x800) syncfs(r3) 16:59:54 executing program 2 (fault-call:4 fault-nth:15): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 314.111270] ? lock_downgrade+0x6e0/0x6e0 [ 314.115428] get_mountpoint+0xd4/0x330 [ 314.119316] lock_mount+0xe0/0x2c0 [ 314.122861] do_add_mount+0x27/0x350 [ 314.126581] do_mount+0x1307/0x27d0 [ 314.130216] ? copy_mount_string+0x40/0x40 [ 314.134456] ? memdup_user+0x58/0xa0 [ 314.138172] ? copy_mount_options+0x1fe/0x2f0 [ 314.142669] SyS_mount+0xab/0x120 [ 314.146124] ? copy_mnt_ns+0x8c0/0x8c0 [ 314.150007] do_syscall_64+0x1e8/0x640 [ 314.150016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.150034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.150043] RIP: 0033:0x459879 [ 314.150048] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.150059] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 314.150065] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 314.150070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.150076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 314.150097] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 314.236898] FAULT_INJECTION: forcing a failure. [ 314.236898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 314.253156] CPU: 0 PID: 24057 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 314.260280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.260285] Call Trace: [ 314.260304] dump_stack+0x138/0x197 [ 314.260325] should_fail.cold+0x10f/0x159 [ 314.260336] ? __might_sleep+0x93/0xb0 [ 314.260350] __alloc_pages_nodemask+0x1d6/0x7a0 [ 314.260366] ? __alloc_pages_slowpath+0x2930/0x2930 [ 314.260378] ? lock_downgrade+0x6e0/0x6e0 [ 314.260400] alloc_pages_vma+0xc9/0x4c0 [ 314.260417] shmem_alloc_page+0xf6/0x1a0 [ 314.260427] ? shmem_swapin+0x1a0/0x1a0 [ 314.260441] ? cred_has_capability+0x142/0x290 [ 314.260453] ? check_preemption_disabled+0x3c/0x250 [ 314.260466] ? __this_cpu_preempt_check+0x1d/0x30 [ 314.260477] ? percpu_counter_add_batch+0x112/0x160 [ 314.280157] ? __vm_enough_memory+0x26a/0x490 [ 314.280176] shmem_alloc_and_acct_page+0x12a/0x680 [ 314.280192] shmem_getpage_gfp+0x3e7/0x25d0 [ 314.280211] ? shmem_add_to_page_cache+0x860/0x860 [ 314.347864] shmem_file_read_iter+0x486/0x9a0 [ 314.352370] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 314.357368] ? iov_iter_pipe+0x9f/0x2c0 [ 314.361329] generic_file_splice_read+0x37d/0x600 [ 314.366164] ? fsnotify+0x11e0/0x11e0 [ 314.369947] ? add_to_pipe+0x340/0x340 [ 314.373865] ? rw_verify_area+0xea/0x2b0 [ 314.377906] ? add_to_pipe+0x340/0x340 [ 314.381774] do_splice_to+0x105/0x170 [ 314.385556] splice_direct_to_actor+0x222/0x7b0 [ 314.390211] ? generic_pipe_buf_nosteal+0x10/0x10 [ 314.395040] ? do_splice_to+0x170/0x170 [ 314.398998] ? rw_verify_area+0xea/0x2b0 [ 314.403040] do_splice_direct+0x18d/0x230 [ 314.407172] ? splice_direct_to_actor+0x7b0/0x7b0 [ 314.411999] ? rw_verify_area+0xea/0x2b0 [ 314.416052] do_sendfile+0x4db/0xbd0 [ 314.419751] ? do_compat_pwritev64+0x140/0x140 [ 314.424317] ? fput+0xd4/0x150 [ 314.427493] SyS_sendfile64+0x102/0x110 [ 314.431471] ? SyS_sendfile+0x130/0x130 [ 314.435447] ? do_syscall_64+0x53/0x640 [ 314.439403] ? SyS_sendfile+0x130/0x130 [ 314.443362] do_syscall_64+0x1e8/0x640 [ 314.447230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.452060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.457230] RIP: 0033:0x459879 [ 314.460401] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 314.468094] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 314.475359] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 16:59:55 executing program 1 (fault-call:1 fault-nth:13): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c74696d656f75743d3078303030303030303066666530303030302c00213e207233b682960cb038"]) 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x4d9, 0x8001, {0x77359400}}) fcntl$setstatus(r0, 0x4, 0x44000) 16:59:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x400000) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000040)=0x9) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 314.482609] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.489944] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 314.497196] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000001}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xfc00000000000, 0xffff, 0x5, 0xc7, 0x400]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000006680)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bind$netlink(r2, &(0x7f00000066c0)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="0ebcd130c4c46e278632ed08baa8a6f647cd63157d796019566d70de77723b413289eef4cc78c62eefc0bf08a97e76bdff2486cee4dc9af43e3a32ca650d880a513349ccb93c00204ef4fd1422d48a8a75494bf1b0b12786df1725f0d5b944d43bd9987f1acc6152b83d05fe0d6ef60927dd63bcda51782e49fe640a56fe1f4110ef6c565f526dd53b38c40772d4a7ee86c833d2db41fc72fabcf689102a9d6adf461691ca68d7280dbc17", 0xab, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r1, 0x1000, 0x61}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000ac0)="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", &(0x7f00000002c0)="653e850d1c38a77a0e6949fd5b9a1d8951fe7ce7cabebf20c5adc8d9238fe472837b945203283bd722f0c3461bf54a8a7c5802859b8ab2e106ae303298ecd1b11475eb0302487e3f78c137322562958400772213f79fd5a88d2e0148dc3d9f9138") write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a121, 0x8001, {}, 0x0, 0x8000}) [ 314.617043] FAULT_INJECTION: forcing a failure. [ 314.617043] name failslab, interval 1, probability 0, space 0, times 0 [ 314.653020] CPU: 1 PID: 24073 Comm: syz-executor.1 Not tainted 4.14.141 #37 [ 314.660153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.669506] Call Trace: [ 314.672102] dump_stack+0x138/0x197 [ 314.675738] should_fail.cold+0x10f/0x159 [ 314.679897] should_failslab+0xdb/0x130 [ 314.683875] kmem_cache_alloc_trace+0x2e9/0x790 [ 314.688530] ? lock_downgrade+0x6e0/0x6e0 [ 314.688549] get_mountpoint+0xd4/0x330 [ 314.696554] lock_mount+0xe0/0x2c0 [ 314.700137] do_add_mount+0x27/0x350 [ 314.703859] do_mount+0x1307/0x27d0 [ 314.707493] ? copy_mount_string+0x40/0x40 [ 314.711738] ? memdup_user+0x58/0xa0 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c74696d656f754623ccfb3a7f6b743d3078303030303030303066666530303000302c00"]) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 16:59:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 314.715451] ? copy_mount_options+0x1fe/0x2f0 [ 314.719956] SyS_mount+0xab/0x120 [ 314.723406] ? copy_mnt_ns+0x8c0/0x8c0 [ 314.727294] do_syscall_64+0x1e8/0x640 [ 314.727305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.727325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.727334] RIP: 0033:0x459879 [ 314.727339] RSP: 002b:00007fbe9fc63c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.752107] RAX: ffffffffffffffda RBX: 00007fbe9fc63c90 RCX: 0000000000459879 [ 314.752114] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 314.752120] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 314.752126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe9fc646d4 [ 314.752132] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 16:59:55 executing program 2 (fault-call:4 fault-nth:16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0xffffff7b) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0xf7, 0x2, 0x3f, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:55 executing program 1 (fault-call:1 fault-nth:14): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000001c0)=[0xee00, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) chown(&(0x7f00000000c0)='./file0\x00', r0, r1) 16:59:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x84800) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x8, 0x73a1, 0x48af, 0x8, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x100, 0x0) sendto$netrom(r3, &(0x7f0000000040)="e239d6d694d4bb3a031fc15655df32248f8f0fb984aaa2473b3eabe2dc3451d301587908339c54fc5c746f8cd9e1a22d3b1c7902cfa2e561ab548055d25fc216e7c63d8c6460f1de0403fc905238beb1c81d6c4284edab0e0090d28e8b916d33243ee4496b320812de9e2416142edf61a6dad84e58bf4f2a464c224881b75570501decf5e858c94db0bb0c", 0x8b, 0x80, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$netlink(r2, &(0x7f0000000140), 0xc) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000100)) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x40, 0x100) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x5, 0x7fff, 0x1ff, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x7}], 0x30) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0x8001, {r2, r3+10000000}, 0xffffffff}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file1\x00', 0xa001, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000400)="d4661416e9a7d7918a18a0bb6721086df87d1579364440295395492639aa233e1e7975f82edcd6d95b3e607ce95a4eb473f787be1f52c5b02ca96dac9d6459d1f50514e7713d292325aa03d6ccdfbac2ab52b71a72e39071226ddfdc74620e52dafd8fb731611eef5e406a2899d6a17ee1c1f45c965143b3c65773f405be242619f4bc51c0134318fc9dc7f681975bbf5a74f5feee81909d3d47aad57aa57bcb4bec7eb0ee0abfbdf02361ff2fa9701e0e2a21e5d527aa62e98252e74dc907761e894cab57797c8910cff81cffa30ba5944491057146f7b43680", 0xda, 0x1f}, {&(0x7f0000000500)="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", 0x1000, 0xfff}, {&(0x7f0000000280)="60c57ecc7aacb64fa2996ead112cb5b10a32b502636c04063a10f3ffef987397b53414e5191af9a1c67b543d211b09a23bbd7592d0796a8e6a4aaaf385d4c0e944e9084aba95699abac65032b8fc2f6fe143b1f9cdb612a687f263224fa54bb4368e0ba1ea31641ea9e2", 0x6a, 0xc46}, {&(0x7f0000001500)="a20a31aede9cd479835ae47bd7ca2f6e361141594cbe9b66eb78a4653cc95a462f60c77687d8e6fcfa8fd53bc5d43d04899350c7771c0440c9c3991ea4ebc70888897b84fd693233938aa1175abbe27b23c0d8146fa38a78be247ca167d920956796d584692e301c29b848f7d8c5ac1f70400197298a32001875e38164e2043f623bb5d0b150fc485100a268fba32bee45b570bc6df57d75abdaa2bc356848b74bb86ca3ea396d48acdf59c8cc1b0e3138f6b0a6f38fb969", 0xb8, 0x1}, {&(0x7f0000000340)="119fa3ca75ae12441d78106197b052223663e0dc263a24372fb5f6864f0c5e62c64a90066c57aad1d1d5ab63c391fda194c77a3ac05a9f75da77db6689fc3e9ef1d90ceae0da9e2bc0ca748be6a9ff4c18f7c2b081711c49b92373a6d3c47c9ed513743e59f5aa", 0x67, 0xfff}], 0x40004, &(0x7f0000001640)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00') ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x9f0000, 0x82b, 0x0, [], &(0x7f00000016c0)={0x9f0bfb, 0x5, [], @string=&(0x7f0000001680)=0x3c2c}}) [ 314.933423] FAULT_INJECTION: forcing a failure. [ 314.933423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/autofs\x00', 0xbadb4b8f23bf0b5e, 0x0) getpeername$packet(r0, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001800)=0x14) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) sendmmsg$sock(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="c5997fe0e8c7fe641d237f2d3ecbdcc7ef06842d73bae9dc70d9208d46e7b337c1bf0e807fc2e3fdcc0697fcd4a7", 0x2e}, {&(0x7f0000000140)="e7ef8b92b77787f8e3b05d45f68eb241a9f1756d6f04782fdc44570f3dc948fad0ad793908399d0637412f3343960395bb29beea607f3d4d6c8b", 0x3a}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000180)="b3bf9b5a22c87695e921696d77d2d83a9306a068a85dc0494bb5966f95dc7bae6fb9d96d95b0bb056d90881ecaf64a3c9ab0b4c7be187fed8d7dd3e8e95ef6a433d98d393e289d7ed9a398ba30eb3587ee5856bd44effddecfd40bd9b54b8afcf1f08c473d6f00e9e191deddc28a32f5cf61adea2eff1d7afdecd559c88082f340c2da5e31329a3b39cbbc5f1e21c09d06ad79432b2880eb9be899d12a3f4575ebd21d050ce48d9c1a13", 0xaa}], 0x4, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xa9}}], 0x30}}, {{&(0x7f0000001340)=@in6={0xa, 0x4e24, 0x2, @mcast1, 0x7}, 0x80, &(0x7f0000001480)=[{&(0x7f00000013c0)="fc9262b0acc4cd864576fd7e2075e71daa768eaa85739abb29da82f13b2a4b50d112999f826399a45ab301381a363608ac4e7e88263d5b708cf69cbdf83847138948c82eae02ec806afccb7101ffcccae38c376d6607966a02a4ed5d229be7fbd6f8ef746e76304634bf3f72a725a389292fa4a81e162d0ed3d4f528689442f44f77b2b8de5e18ae2f", 0x89}], 0x1, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001500)="607101a81221942caf6a0b3159b6e186a562d763b4673c0a68d86b009937804e09482df999dce49c7a1f2f7d17fadac834c6", 0x32}], 0x1, &(0x7f0000001580)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}, {{&(0x7f00000015c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001640)}], 0x1, &(0x7f00000016c0)=[@mark={{0x14, 0x1, 0x24, 0x850}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}], 0x4, 0x4048000) 16:59:55 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) connect$caif(r0, &(0x7f00000000c0)=@dgm={0x25, 0xd7}, 0x18) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7ff, 0x4) [ 315.051334] CPU: 1 PID: 24109 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 315.058480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.067839] Call Trace: [ 315.070441] dump_stack+0x138/0x197 [ 315.074087] should_fail.cold+0x10f/0x159 [ 315.078242] ? __might_sleep+0x93/0xb0 [ 315.082144] __alloc_pages_nodemask+0x1d6/0x7a0 [ 315.086820] ? __alloc_pages_slowpath+0x2930/0x2930 [ 315.091841] ? lock_downgrade+0x6e0/0x6e0 [ 315.096006] alloc_pages_vma+0xc9/0x4c0 16:59:55 executing program 0: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 315.099990] shmem_alloc_page+0xf6/0x1a0 [ 315.104061] ? shmem_swapin+0x1a0/0x1a0 [ 315.108039] ? cred_has_capability+0x142/0x290 [ 315.112625] ? check_preemption_disabled+0x3c/0x250 [ 315.117646] ? __this_cpu_preempt_check+0x1d/0x30 [ 315.122488] ? percpu_counter_add_batch+0x112/0x160 [ 315.127517] ? __vm_enough_memory+0x26a/0x490 [ 315.127537] shmem_alloc_and_acct_page+0x12a/0x680 [ 315.127559] shmem_getpage_gfp+0x3e7/0x25d0 [ 315.127580] ? shmem_add_to_page_cache+0x860/0x860 [ 315.136987] shmem_file_read_iter+0x486/0x9a0 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 315.137013] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 315.137026] ? iov_iter_pipe+0x9f/0x2c0 [ 315.137038] generic_file_splice_read+0x37d/0x600 [ 315.137054] ? fsnotify+0x11e0/0x11e0 [ 315.168712] ? add_to_pipe+0x340/0x340 [ 315.172605] ? rw_verify_area+0xea/0x2b0 [ 315.172615] ? add_to_pipe+0x340/0x340 [ 315.172624] do_splice_to+0x105/0x170 [ 315.172636] splice_direct_to_actor+0x222/0x7b0 [ 315.189012] ? generic_pipe_buf_nosteal+0x10/0x10 [ 315.193958] ? do_splice_to+0x170/0x170 [ 315.197935] ? rw_verify_area+0xea/0x2b0 [ 315.202006] do_splice_direct+0x18d/0x230 [ 315.206158] ? splice_direct_to_actor+0x7b0/0x7b0 [ 315.211098] ? rw_verify_area+0xea/0x2b0 [ 315.215167] do_sendfile+0x4db/0xbd0 [ 315.218896] ? do_compat_pwritev64+0x140/0x140 [ 315.223482] ? fput+0xd4/0x150 [ 315.226666] SyS_sendfile64+0x102/0x110 [ 315.230638] ? SyS_sendfile+0x130/0x130 [ 315.234608] ? do_syscall_64+0x53/0x640 [ 315.238574] ? SyS_sendfile+0x130/0x130 [ 315.242558] do_syscall_64+0x1e8/0x640 [ 315.246446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.251300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.256494] RIP: 0033:0x459879 [ 315.259681] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 315.267393] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 315.274658] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 315.274664] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.274669] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:55 executing program 2 (fault-call:4 fault-nth:17): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:55 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030d2fe6ba919c26a58e67fd40530302c74696d656f75743d3078303030303030303066666530303030302c00"]) 16:59:55 executing program 1: r0 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r2 = geteuid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@aname={'aname', 0x3d, 'dax\x00'}}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@smackfsroot={'smackfsroot', 0x3d, ']'}}, {@uid_lt={'uid<', r1}}, {@uid_lt={'uid<', r2}}, {@pcr={'pcr', 0x3d, 0xe}}, {@audit='audit'}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x7058}}, {@euid_eq={'euid', 0x3d, r3}}, {@seclabel='seclabel'}, {@smackfshat={'smackfshat'}}]}}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 315.274674] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x6, "031593677970633f", "8cb9cf0c3492c1eaa7eb48ec59677a990c6e6913ec7bb1de4079b7ea5e063fbb", 0x10001, 0x7fffffff}) 16:59:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 315.374850] FAULT_INJECTION: forcing a failure. [ 315.374850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.419743] CPU: 0 PID: 24154 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 315.426872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.436212] Call Trace: [ 315.438787] dump_stack+0x138/0x197 [ 315.442402] should_fail.cold+0x10f/0x159 [ 315.446534] ? __might_sleep+0x93/0xb0 [ 315.450406] __alloc_pages_nodemask+0x1d6/0x7a0 [ 315.455060] ? __alloc_pages_slowpath+0x2930/0x2930 [ 315.460060] ? lock_downgrade+0x6e0/0x6e0 [ 315.464196] alloc_pages_vma+0xc9/0x4c0 [ 315.468157] shmem_alloc_page+0xf6/0x1a0 [ 315.472212] ? shmem_swapin+0x1a0/0x1a0 [ 315.476256] ? cred_has_capability+0x142/0x290 [ 315.480823] ? check_preemption_disabled+0x3c/0x250 [ 315.485822] ? __this_cpu_preempt_check+0x1d/0x30 [ 315.490645] ? percpu_counter_add_batch+0x112/0x160 [ 315.495653] ? __vm_enough_memory+0x26a/0x490 [ 315.500146] shmem_alloc_and_acct_page+0x12a/0x680 [ 315.505062] shmem_getpage_gfp+0x3e7/0x25d0 [ 315.509382] ? shmem_add_to_page_cache+0x860/0x860 [ 315.514299] shmem_file_read_iter+0x486/0x9a0 [ 315.518785] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 315.523793] ? iov_iter_pipe+0x9f/0x2c0 [ 315.527749] generic_file_splice_read+0x37d/0x600 [ 315.532573] ? fsnotify+0x11e0/0x11e0 [ 315.536358] ? add_to_pipe+0x340/0x340 [ 315.540235] ? rw_verify_area+0xea/0x2b0 [ 315.544278] ? add_to_pipe+0x340/0x340 [ 315.548149] do_splice_to+0x105/0x170 [ 315.551934] splice_direct_to_actor+0x222/0x7b0 [ 315.556589] ? generic_pipe_buf_nosteal+0x10/0x10 [ 315.561418] ? do_splice_to+0x170/0x170 [ 315.565375] ? rw_verify_area+0xea/0x2b0 [ 315.569419] do_splice_direct+0x18d/0x230 [ 315.573554] ? splice_direct_to_actor+0x7b0/0x7b0 [ 315.578382] ? rw_verify_area+0xea/0x2b0 [ 315.582430] do_sendfile+0x4db/0xbd0 [ 315.586131] ? do_compat_pwritev64+0x140/0x140 [ 315.590696] ? fput+0xd4/0x150 [ 315.593887] SyS_sendfile64+0x102/0x110 [ 315.597844] ? SyS_sendfile+0x130/0x130 [ 315.601800] ? do_syscall_64+0x53/0x640 [ 315.605758] ? SyS_sendfile+0x130/0x130 [ 315.609713] do_syscall_64+0x1e8/0x640 [ 315.613582] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:59:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:56 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x124) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) unshare(0x4000000) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x2000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r2}}, 0x18) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 315.618430] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 315.623601] RIP: 0033:0x459879 [ 315.626862] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 315.634552] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 315.641802] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 315.649053] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 315.656305] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 315.663554] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:56 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x90818572afc0de5) execveat(r0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='dax\x00', &(0x7f00000001c0)='dax\x00', &(0x7f0000000200)='dax\x00', &(0x7f0000000240)='\'eth1em0nodev-,%\x00', &(0x7f0000000280)='\x10\x00', &(0x7f00000002c0)='ppp1}nodev\'\x00', &(0x7f0000000340)='/dev/input/mice\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='system*!\x00'], &(0x7f00000005c0)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='++\x00', &(0x7f0000000500)='self)vboxnet1\x00', &(0x7f0000000540)='/dev/input/mice\x00', &(0x7f0000000580)='proc\x00'], 0x400) write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20, 0x0, 0x6, {0x400, 0x0, 0xeb5, 0x5}}, 0x20) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100), 0x4) 16:59:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xffffffffffffffb1) 16:59:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:56 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000000)=0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'veth0_to_bridge\x00', {0x2, 0x4e24, @remote}}) 16:59:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x100000000000001e, 0x0, 0x0, 0x8}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:56 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2000, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x101, 0x7fff}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x5, 0x1, [0x13]}, 0xa) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) 16:59:56 executing program 2 (fault-call:4 fault-nth:18): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) 16:59:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2900, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={0x0, 0x0, 0xb54}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000240)={r2, r3, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={r4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000280)=0x8, 0x4) [ 316.011817] FAULT_INJECTION: forcing a failure. [ 316.011817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:56 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 316.095307] CPU: 0 PID: 24204 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 316.102568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.111923] Call Trace: [ 316.114516] dump_stack+0x138/0x197 [ 316.118161] should_fail.cold+0x10f/0x159 [ 316.122317] ? __might_sleep+0x93/0xb0 [ 316.126211] __alloc_pages_nodemask+0x1d6/0x7a0 [ 316.130891] ? __alloc_pages_slowpath+0x2930/0x2930 [ 316.135911] ? lock_downgrade+0x6e0/0x6e0 [ 316.140080] alloc_pages_vma+0xc9/0x4c0 [ 316.144065] shmem_alloc_page+0xf6/0x1a0 [ 316.148130] ? shmem_swapin+0x1a0/0x1a0 [ 316.152106] ? cred_has_capability+0x142/0x290 [ 316.156701] ? check_preemption_disabled+0x3c/0x250 [ 316.161733] ? __this_cpu_preempt_check+0x1d/0x30 [ 316.166578] ? percpu_counter_add_batch+0x112/0x160 [ 316.171595] ? __vm_enough_memory+0x26a/0x490 [ 316.176101] shmem_alloc_and_acct_page+0x12a/0x680 [ 316.181041] shmem_getpage_gfp+0x3e7/0x25d0 [ 316.185378] ? shmem_add_to_page_cache+0x860/0x860 [ 316.190321] shmem_file_read_iter+0x486/0x9a0 16:59:56 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000002,timeout=0x00000000ffe00000,\x00\x00\x00\x00']) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) [ 316.194835] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 316.199854] ? iov_iter_pipe+0x9f/0x2c0 [ 316.203934] generic_file_splice_read+0x37d/0x600 [ 316.208773] ? fsnotify+0x11e0/0x11e0 [ 316.212575] ? add_to_pipe+0x340/0x340 [ 316.216477] ? rw_verify_area+0xea/0x2b0 [ 316.220534] ? add_to_pipe+0x340/0x340 [ 316.224423] do_splice_to+0x105/0x170 [ 316.228227] splice_direct_to_actor+0x222/0x7b0 [ 316.232908] ? generic_pipe_buf_nosteal+0x10/0x10 [ 316.237754] ? do_splice_to+0x170/0x170 [ 316.241726] ? rw_verify_area+0xea/0x2b0 [ 316.245791] do_splice_direct+0x18d/0x230 [ 316.249938] ? splice_direct_to_actor+0x7b0/0x7b0 [ 316.254801] ? rw_verify_area+0xea/0x2b0 [ 316.258859] do_sendfile+0x4db/0xbd0 [ 316.262578] ? do_compat_pwritev64+0x140/0x140 [ 316.267161] ? fput+0xd4/0x150 [ 316.270362] SyS_sendfile64+0x102/0x110 [ 316.274339] ? SyS_sendfile+0x130/0x130 [ 316.278398] ? do_syscall_64+0x53/0x640 [ 316.282371] ? SyS_sendfile+0x130/0x130 [ 316.286349] do_syscall_64+0x1e8/0x640 [ 316.290232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.295088] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.300276] RIP: 0033:0x459879 [ 316.303461] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.311168] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 316.318438] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 316.325704] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.332976] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x10000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x408c00, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000080)=[0xfff, 0x372, 0x7, 0xffffffffffff066b, 0x8b92, 0xff, 0x4, 0x2, 0x4], 0x9, 0x4, 0x2, 0x3, 0xffffffffffff61b4, 0xf5, {0x8, 0xe9, 0x1, 0xee9, 0x81, 0xf87, 0xd3b, 0x3ff, 0xff, 0x2, 0x20, 0xdd2, 0x8, 0x9, "01be3997970766809520927a3db3ee8837d88fc298245da308730806902cd3a1"}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80, 0x0) sendto$llc(r0, &(0x7f0000000200)="56c1863d1b408cf5dd2f40d4419c67f821bb925e59d0cebbd35424183e48bbac761c45beef13956277ce7d0d95fa78a95354aa872b65e123f016510a940bfa09e0cc1e10f46eba1c70b581ee1a3aa34efb203cb71df06fa751fc749b5432e5b63738b9dd5e545f024b2d9834fce782a14c79af7e42514a4ebc9dbcc654f08542012fe00d54b94b26ee8d3da95895a19344be72c97d49faadf3534d4a1bde9603dbe0921542475d9607880f379194e80db75bddb72ea162e9079503bc37b21013", 0x32, 0x4000000, &(0x7f00000002c0)={0x1a, 0x0, 0x7, 0x81, 0x2, 0x8, @link_local}, 0x10) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)='vfat\x00', 0x10, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x5, &(0x7f0000001480)=0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0xffffffffffff8000, 0x3, 0xffffffffffffff00, 0xeb3, 0x2], 0x5, 0x6, 0x1ff, 0x6, 0x3b, 0x2, {0x5, 0x3, 0x10001, 0x1f, 0x0, 0x3, 0x0, 0x8, 0x9, 0x0, 0x1f, 0x2884, 0x5, 0xffffffffffffff00, "7aa03be18a9658f1d1666c4ef483e3e879aa35d46976c0babe555b8d85f5ba4b"}}) r2 = semget$private(0x0, 0x4, 0x100) semctl$SEM_INFO(r2, 0x571fbd07c9f5759a, 0x13, &(0x7f0000000480)=""/4096) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000300)) [ 316.340253] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:56 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:56 executing program 2 (fault-call:4 fault-nth:19): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:56 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472613e0f0a71efad36012df8fcc1d59a27b8a26e733d72646d612c706f727411f239e83030303030303030303030781ff92bb9ee2b27a13a89a881d66d303030f3cc1a3030305799bd3327"]) mkdir(&(0x7f00000000c0)='./file0\x00', 0x180) 16:59:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) memfd_create(&(0x7f00000001c0)='/dev/vsock\x00', 0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1a}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xdf9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40) [ 316.459195] FAULT_INJECTION: forcing a failure. [ 316.459195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.497952] 9pnet_virtio: no channels available for device 127.0.0.1 [ 316.544574] CPU: 1 PID: 24239 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 316.551716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.561082] Call Trace: [ 316.563685] dump_stack+0x138/0x197 [ 316.567328] should_fail.cold+0x10f/0x159 [ 316.571488] ? __might_sleep+0x93/0xb0 [ 316.575382] __alloc_pages_nodemask+0x1d6/0x7a0 [ 316.580058] ? __alloc_pages_slowpath+0x2930/0x2930 [ 316.585072] ? lock_downgrade+0x6e0/0x6e0 [ 316.589230] alloc_pages_vma+0xc9/0x4c0 16:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="146a3e6605f7ec12157c", 0xa}, {&(0x7f0000000400)="efa41d327ce5d362f68884f8a5cf49", 0xf}, {&(0x7f0000000500)="5d45bca0efbaf25a4cab788ce3ced3f0258ac49401c96f6153bc8cb21f7efa36769184424b3623103b2845df6ad3a2de60255c4b18a336b181c0836d270a98f8bfc78a696981c022a118785d6d508d12121b3e984b2556eced616325e31f3e90464520a359cb990808c278bdb268e4c91d73e89b0026d7733a58bf83eb2a1ebadc777592122e885dbe94c15aa0f2e7d1813f93a0bc61b608b98d3f782a2eb7d495850034a551037e21e086ecabd056bbe59b5f4e28e0aa0d9a95d67d3874ade3a464f4cc3aeb3e1d314667561a", 0xcd}, {&(0x7f0000000440)="c5896f13a6499d7f209e8f0074bffa9971cdc439cede314f37fcc5f3e4f31d0ade72b58fa2a9acadba2dc3515848f77d80be7d265bf1b5ce14762e4467bc31b3f24652080f11f15d6ebeca1d7156fc12", 0x50}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="1bc157579af367844a678c05665978bd618bfa17c86cb9aae422ba32253e4b2f8a40979c594789de198819bdbf77bd2d64cfa5054ec02b45ea402d1dbc950a8c96b39670beaa15b488c76ce994b879d814a0fcd5db07c7042d1a75f31feaa8536133b9f4c67a85f3add9e645de4f518815df0a64f1b284533fd75366aef1ef04ad41", 0x82}, {&(0x7f00000007c0)="74087b9126b05737f9b61627838de42bc9f123ea82b498929d720426db7d203c6a8d6911974270acc920a926f047e09a7a836de7f8003c2c834ce1a3d48eafb3e78eaeb5a8b9a8a891d2afac9f39648052bbb139e4e1cffd1e32067dd4f4f2e59efaec79ee2297e93bb07769eb556158bf140d63deaa557423771531077b7f6a45496e04bef89c7bfe8bbf29645fd6", 0x8f}, {&(0x7f0000000880)="67f90a622577331db18b3fbc494fc431ad8fd740c51197f3dad133ed4457860bdb37617f963d7df5e38955857319c4ef6faca771e00f03e7139ca7a5f4de7c753225dfc47e5846b57e58bc52b6b174a0af40ed359fd40f0de3f3117aec01c3a5fd1dc67a2c8526e0bf3892a8d3ea665301a28e35a3b39a98e8a9c3b35822b6190114", 0x82}], 0x8, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001800000426bd7000ffdbdf2580202001ff00000b0008000008000500ac14140a08000600010000000c000800d3389e16050000000c00160008004100", @ANYRES32=r3, @ANYBLOB="08000500ac1414bb207dd78e9da72a0dbca3b36f9b0a66cf6050ac93ad78156d037abd66eac65c7dd96039e28092502854e72aa0c7c60d7a07c2ea40d20b64d2facd971f256d31e6a4dda2f27e591e2741313a215eeb41ea96079b0792fe294a217e78cff7627ae7d74b772542bbe1efe42eb52cc2b4b14839911d1b83fcce4bbe5aff40dae54adb8a"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000180)) pwrite64(r2, &(0x7f0000000280)="d524e80d4b6f21376a14721fa4e4732d3f7e8c7240eba7e84b7a45dc5b89a09c2fa97a91b65e64100ffcc101334aadcea262e76b1164642692d4f3e0f9e12854b7552de06f3aadf03f7a858c803b8a1ea0a231f799f42963f44f64ab3955d9891a93cad1ddf38abfb9370c7f", 0x6c, 0x54) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000ac0)={0xd5af, 0x2, 'client1\x00', 0x4, "ae7aedf85ce6fcbb", "f3ff40e74501c099b1e52ad7d003170a52d41b226a1f84d1fa1f5add1f3e9824", 0x9, 0xfff}) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:57 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x400041) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x800, 0x5, 0xfff, 0x7fffffff, 0x8, 0x3, 0x1b, 0x2}}) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685, &(0x7f00000003c0)={0x1, 0xffffffff80000001, 0x1000, 0x89, &(0x7f0000000200)="4f897496f2e919b83b0c3f9a03c51bc6b043eadb8649d796f3135382fea560909ba5189c69f9c89f9fb239e695d7e5877aaf6634ca78796aacfacafbd75c5ef5828e56c69c24e05417ae5b12bf30f2d0fa10cb11d0055a3f66d92005cdc1b79926dd991452b1bb838558e5b3b0bbf620d1c3d6413412ee786a8f808dffcb704c05abdd8155225c8097", 0xde, 0x0, &(0x7f00000002c0)="b26f590648ea271d4101f1efe36220e7c0431b9d78ab6ee45b29b83e6877605d206f30b3787537022bb007784a622620625e7f9c63df2fc14ca88743723febcbea96688b03ff1c83371794b229a988d7faf915084d1e62cb689a6784f9d8f7c21ac123ff861d60b4957382c13d400a7590a3b349df203f451fdc28d02c8bc34fade3ce04cb391f7b32fa7b17e2852ebe13d3bd7d41981a3553ac8c9278e3f882382a6815aeb729156ab4b7239fe08d1e307061d350bd3591571c2ac2a33eee3df62ea56a95258e5a41597273a5901a37f2d56acccf8036bd2852ec0ab43e"}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000480)={'ip6tnl0\x00', @broadcast}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00', 0x10) [ 316.593335] shmem_alloc_page+0xf6/0x1a0 [ 316.597400] ? shmem_swapin+0x1a0/0x1a0 [ 316.601382] ? cred_has_capability+0x142/0x290 [ 316.606090] ? check_preemption_disabled+0x3c/0x250 [ 316.611116] ? __this_cpu_preempt_check+0x1d/0x30 [ 316.615968] ? percpu_counter_add_batch+0x112/0x160 [ 316.620994] ? __vm_enough_memory+0x26a/0x490 [ 316.625497] shmem_alloc_and_acct_page+0x12a/0x680 [ 316.630437] shmem_getpage_gfp+0x3e7/0x25d0 [ 316.634777] ? shmem_add_to_page_cache+0x860/0x860 [ 316.639712] shmem_file_read_iter+0x486/0x9a0 [ 316.644215] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 316.649229] ? iov_iter_pipe+0x9f/0x2c0 [ 316.653214] generic_file_splice_read+0x37d/0x600 [ 316.653225] ? fsnotify+0x11e0/0x11e0 [ 316.653237] ? add_to_pipe+0x340/0x340 [ 316.653257] ? rw_verify_area+0xea/0x2b0 [ 316.661952] ? add_to_pipe+0x340/0x340 [ 316.661963] do_splice_to+0x105/0x170 [ 316.661976] splice_direct_to_actor+0x222/0x7b0 [ 316.661991] ? generic_pipe_buf_nosteal+0x10/0x10 [ 316.662006] ? do_splice_to+0x170/0x170 [ 316.662015] ? rw_verify_area+0xea/0x2b0 [ 316.662026] do_splice_direct+0x18d/0x230 [ 316.699254] ? splice_direct_to_actor+0x7b0/0x7b0 [ 316.704108] ? rw_verify_area+0xea/0x2b0 [ 316.708169] do_sendfile+0x4db/0xbd0 [ 316.708189] ? do_compat_pwritev64+0x140/0x140 [ 316.716457] ? fput+0xd4/0x150 [ 316.716471] SyS_sendfile64+0x102/0x110 [ 316.716482] ? SyS_sendfile+0x130/0x130 [ 316.727589] ? do_syscall_64+0x53/0x640 [ 316.731572] ? SyS_sendfile+0x130/0x130 [ 316.735548] do_syscall_64+0x1e8/0x640 [ 316.739416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.744247] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 316.749420] RIP: 0033:0x459879 [ 316.752606] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.760309] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 316.767743] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 316.774994] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.782246] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:57 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) getpeername(r0, &(0x7f00000000c0)=@llc, &(0x7f0000000000)=0x80) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:57 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8001, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') 16:59:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x3, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 316.789504] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:57 executing program 2 (fault-call:4 fault-nth:20): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:57 executing program 0: symlink(&(0x7f00000002c0)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='.//ile0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) unlink(&(0x7f0000000180)='.//ile0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/f.le.\x00', 0x101000, 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x1, 0xba97}) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x90, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6fa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x715f}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:57 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, 0x9, 0x7, 0x8, 0x1d, "d9099661a2744cc564a17bc5e03024642c691c15d1f152013e1f26eeca"}, 0x29) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x3, 0x4) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0xfbed5c7726bf433e) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x6000, 0x3000, 0x0, 0x1, 0x5}) 16:59:57 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) socket$inet_udplite(0x2, 0x2, 0x88) [ 316.899183] FAULT_INJECTION: forcing a failure. [ 316.899183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 16:59:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @tick, {0x0, 0x80000}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 316.959378] CPU: 1 PID: 24281 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 316.966530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.975887] Call Trace: [ 316.975907] dump_stack+0x138/0x197 [ 316.975928] should_fail.cold+0x10f/0x159 [ 316.975941] ? __might_sleep+0x93/0xb0 [ 316.975956] __alloc_pages_nodemask+0x1d6/0x7a0 [ 316.975974] ? __alloc_pages_slowpath+0x2930/0x2930 [ 316.999906] ? lock_downgrade+0x6e0/0x6e0 [ 317.004083] alloc_pages_vma+0xc9/0x4c0 [ 317.008068] shmem_alloc_page+0xf6/0x1a0 [ 317.008080] ? shmem_swapin+0x1a0/0x1a0 [ 317.008094] ? cred_has_capability+0x142/0x290 [ 317.008108] ? check_preemption_disabled+0x3c/0x250 [ 317.026352] ? __this_cpu_preempt_check+0x1d/0x30 [ 317.031202] ? percpu_counter_add_batch+0x112/0x160 [ 317.031224] ? __vm_enough_memory+0x26a/0x490 [ 317.031245] shmem_alloc_and_acct_page+0x12a/0x680 [ 317.040741] shmem_getpage_gfp+0x3e7/0x25d0 [ 317.040766] ? shmem_add_to_page_cache+0x860/0x860 [ 317.040783] shmem_file_read_iter+0x486/0x9a0 16:59:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8fc15d2664bc2257, 0xf3623491e506bda) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10800200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0xf10, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x300000, 0x5, 0x3f, 0x1}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 317.040809] ? shmem_mfill_atomic_pte+0x1720/0x1720 [ 317.064466] ? iov_iter_pipe+0x9f/0x2c0 [ 317.068455] generic_file_splice_read+0x37d/0x600 [ 317.073305] ? fsnotify+0x11e0/0x11e0 [ 317.077153] ? add_to_pipe+0x340/0x340 [ 317.081055] ? rw_verify_area+0xea/0x2b0 [ 317.085118] ? add_to_pipe+0x340/0x340 [ 317.089013] do_splice_to+0x105/0x170 [ 317.092823] splice_direct_to_actor+0x222/0x7b0 [ 317.097499] ? generic_pipe_buf_nosteal+0x10/0x10 [ 317.102348] ? do_splice_to+0x170/0x170 16:59:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="3394c04b3143a73710245be6f51a3c9ec909b47b56e46d5e7bd3c1912e0f7fd604d5cb3b4aa0cc238d292496b68fb179b2f613de38bba0b315234a1c10640fa3bd44837fb55438e872a53e5b38a2f3e5d0e3496ca929239638bc05f4ef0f0748a17dd49bc877d7e4e7db06dc661ad2c5a89cb26daa9e0c485b6b1d7ca67b1267441c45ed2852841c", 0x88, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x7) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x74a2653b, 0x4, 0xfffffffffffffff9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 317.106352] ? rw_verify_area+0xea/0x2b0 [ 317.110425] do_splice_direct+0x18d/0x230 [ 317.114576] ? splice_direct_to_actor+0x7b0/0x7b0 [ 317.119423] ? rw_verify_area+0xea/0x2b0 [ 317.123849] do_sendfile+0x4db/0xbd0 [ 317.127595] ? do_compat_pwritev64+0x140/0x140 [ 317.132189] ? fput+0xd4/0x150 [ 317.135391] SyS_sendfile64+0x102/0x110 [ 317.139384] ? SyS_sendfile+0x130/0x130 [ 317.143370] ? do_syscall_64+0x53/0x640 [ 317.147357] ? SyS_sendfile+0x130/0x130 [ 317.151353] do_syscall_64+0x1e8/0x640 [ 317.155248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.160113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.165298] RIP: 0033:0x459879 [ 317.165305] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 317.165319] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 317.165327] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 317.176514] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.176521] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 317.176526] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:57 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:57 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d6124706f72743d30783630303030303015303030304d4b4a302c74696d656f75743330783030303030303030666665303073c32f3dbab1a1e51d9fdb403030302c00"]) 16:59:57 executing program 1: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) clone(0x20000, &(0x7f0000000140)="06dd9cb80d3f75e54750524f9ba127ad63305b716def2236a8c4c13e7900d44e294cf18c9279f59f1cac739737091d4283a61d9b836440e28972ee15c9da353a6d0da4f520c2055257f1cb7215768b64788279da08657cd2cbfeb5afeb6349058ae68bec7d94e460bd42d229a2dffe6bad382c72c555c27d3b3347eeb61d8355ab8b9555801c1fb6c131340364b965", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="7ee96e43bf28845482930116832e753dc306bbca374a9af72985e2fbb662879e62ac") r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000300)=0xfff) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x80, 0x8000) 16:59:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:57 executing program 2 (fault-call:4 fault-nth:21): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800000000bff) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd2940661cb3059d7}, 0x4) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 317.369314] 9pnet: Could not find request transport: rdma$port=0x60000000000MKJ0 [ 317.397918] FAULT_INJECTION: forcing a failure. [ 317.397918] name failslab, interval 1, probability 0, space 0, times 0 16:59:57 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x18000, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x4, 0x9, 0x5, 0x0, 0x0, [{r1, 0x0, 0x9}, {r2}, {r3, 0x0, 0xffffffffffffffff}, {r4, 0x0, 0xffffffffffffff72}, {r5, 0x0, 0x26}]}) 16:59:57 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xdc}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0xe980}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) fcntl$setflags(r2, 0x2, 0x1) write$sndseq(r2, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:57 executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/67, 0x43) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0xfffffffffffffe0f, 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) times(&(0x7f0000000240)) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) accept(r0, &(0x7f0000000380)=@rc, &(0x7f0000000140)=0x80) [ 317.482077] CPU: 1 PID: 24327 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 317.489229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.498591] Call Trace: [ 317.501187] dump_stack+0x138/0x197 [ 317.504809] should_fail.cold+0x10f/0x159 [ 317.504828] should_failslab+0xdb/0x130 [ 317.512934] kmem_cache_alloc_node+0x287/0x780 [ 317.517527] ? __lock_acquire+0x5f7/0x4620 [ 317.521770] __alloc_skb+0x9c/0x500 [ 317.525573] ? skb_scrub_packet+0x4b0/0x4b0 [ 317.530163] alloc_skb_with_frags+0x86/0x4b0 [ 317.534577] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 317.539530] sock_alloc_send_pskb+0x5db/0x740 [ 317.544048] ? sock_wmalloc+0xf0/0xf0 [ 317.547859] ? _raw_spin_unlock+0x2d/0x50 [ 317.552018] unix_dgram_sendmsg+0x34c/0xf80 [ 317.556340] ? selinux_tun_dev_create+0xc0/0xc0 [ 317.561021] ? unix_stream_connect+0x11f0/0x11f0 [ 317.565785] ? security_socket_sendmsg+0x89/0xb0 [ 317.570542] ? unix_stream_connect+0x11f0/0x11f0 [ 317.575298] sock_sendmsg+0xce/0x110 16:59:58 executing program 1: getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40200, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x10) [ 317.579008] kernel_sendmsg+0x44/0x50 [ 317.582815] sock_no_sendpage+0x107/0x130 [ 317.586964] ? sock_kzfree_s+0x50/0x50 [ 317.590868] kernel_sendpage+0x92/0xf0 [ 317.594757] ? sock_kzfree_s+0x50/0x50 [ 317.598645] sock_sendpage+0x8b/0xc0 [ 317.598658] ? timespec_trunc+0xb5/0x120 [ 317.598669] ? kernel_sendpage+0xf0/0xf0 [ 317.606421] pipe_to_sendpage+0x242/0x340 [ 317.606435] ? direct_splice_actor+0x190/0x190 [ 317.606451] __splice_from_pipe+0x348/0x780 [ 317.606462] ? direct_splice_actor+0x190/0x190 [ 317.606477] ? direct_splice_actor+0x190/0x190 [ 317.632689] splice_from_pipe+0xf0/0x150 [ 317.636758] ? splice_shrink_spd+0xb0/0xb0 [ 317.641011] generic_splice_sendpage+0x3c/0x50 [ 317.645594] ? splice_from_pipe+0x150/0x150 [ 317.649926] direct_splice_actor+0x123/0x190 [ 317.654336] splice_direct_to_actor+0x29e/0x7b0 [ 317.659021] ? generic_pipe_buf_nosteal+0x10/0x10 [ 317.663870] ? do_splice_to+0x170/0x170 [ 317.667840] ? rw_verify_area+0xea/0x2b0 [ 317.671900] do_splice_direct+0x18d/0x230 [ 317.676045] ? splice_direct_to_actor+0x7b0/0x7b0 16:59:58 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mq_timedsend(r0, &(0x7f0000000340)="546e7c37d177bcfdca190b894a860dc52f5c6edf2e0d85a75abda364647368be563615b70ddb4dc50766d7a42eecbd4cbf824e47ef4c1a6dd461287820ad5a2deb6c7e849e37fe39cb7305b5013ba9947364be723187ffedcf3c7d92310c65b2d38d047950542fa6b993296680d3d609a75e6ded30b85242a6a78760fac59ff087f7a3e66ba1294cb6981d0cb6b12ae1d3770330602b4a540f9ea2d8eae87e0123333489a626c6e9929f286e432ce3696359411458d7f63026ddd2ee4caaf09acdb296c1a38841f3c523af113a59f97ebff4a17b711e905e8d18729089c63aed919486941dd4d7caf4087f6caf6369b324f899dfb2045345eea3beea223d234a8b1dd2f880787b860120b66ead67e6e87117ebb76a1866731b4e6eb715dfdb8de14e1230106210e961c0d3597a4096e6a7c479d5e09230cf59087d5bd3a42a81527a4d8592894444f2b65cdedaa74bbdd90ec7931362bbfcd3b190a13bf6047bcb6560879de32734f6c2939262b96be7defd2317d3fa406f27a268f2ec0c451931a72ef2f6726eda6288669246dbeba7ce90d0fab4800870e84f8386c4f82350801ebbc1cca640823d0a2ae56d0ef156873c0f35fbd73831f069058df38f7dd6520780da7582025f41c18aecc31316971ebd9a933d790293af8c9ff5a7a8b5ce449bd6db8e95e9b6705f25be567daaf73cd2ea5b0a6cc54f45ff1b50deabd7a0bd908caf96692a5bc8b4a3774e2a91e0413114e7a23c3482f38fb3f2cca8c29aa763151c33ffcc48ab3eca90fce2ae6ac11e7a1b94c6e18d0554edbee8250012adbb78c8793a1e8a89b9442f93a09a63f28db9f3d876ab668fb22a9753fdc4a02b5646980ad0608615df3bda2748bb33d83a448f94238b81f19a27f706ca78c21df4b530f320c047d5ff4696deaa58049c80ef1d3f10e0423b8a008640a008d6144c146e31b3b9d3e4ed0584c16d8d97b53f90ed49cb9310beba9c5cf1d3c0c4e38bb560892b7ef1c419d08660ca992435c0f5b192c8c5a907c82285b263049e8ec1a3063467c6b92bcc9856a6d28a884648cc3607d8e9f955123810a6d57ece2b705b9082d15658ef6e6d5f7dc1153bf9ffa4e5868d9951399ba2f0223ec55e93d7f3b86fe42ffaa5a3a1ed4cc626828e49df863ac35e59611dce535636d03ffe48b298f06b90d69584c19d2252d8250a469a2acdcc7f0d2e47a3666db6eb2681c585396c53fdac864521d7fe3ae536b7170eb0b170437bd4849650ba03d69c82ea6a55f2a40dec42c4f3a2389cb1208697ca96c323f01a4f525b193b092bab7fe90682a78355d2f99869db2e8c5de2e5dbdf27d1edaf8d85758e407bc5e959fd16c62ed170ff8ad3514cff165dbb9fc206a3895ac99aa6932d0bbd92a5e4cbcb63b2eb2301a227326d5b69609d0bd22e5ebb57863dd7ae08af525d4eca230aa6020998dc485a260380f8a61e982b050a3aa55768ba0246c1f4fb61effa9768427ad91a6789eddb12c387660339d5e31b2d6a30317277de864599499602956a1e64246d1b247aceb986dc24d0012e0c11e8a3bd04b5bbd5d5b1d59f48faf296b696f63194f82848c1d1bff191ff972d5796ad2876a1d6f13c3938ee80c1d48d9acd3341b07db9eeb99f159333686d97bbfd06ff1cd33112412f83dcc839ae5edbff6043d0e1ae79d39482eebad56d1e3938dddef852e9e485242fbdd9f22c89392b74eaf73273c56cc050b68936f9c19342a55b515cf2f125fb4953c98e1fd894773796aa1b1070a5d9c4ea67ebaa804bbb80f1fc0444deb233f49b096974201e42cded0b4011bc9b0d3414cadc62d84a37f05364705918e1a0dcea79df5c0f91c09b2e82e7abc760917b5b2c891ecd28382b6ce32d33f4a435483ac908d764a5bf349f97f72ba3ab1f9b3f1b208adcb2ea9b2c46051dcfe1f19783fa4fcf597c6d79268e5a0daa44431153605e35ec955a7b7dbf2d4961e363c2e22f565d2b054a4e1d0ca59b7c94de2785b4a64463d67a536e040ed71a0c87f36bc903a76be06e95f66baca9c79702cca52ea05eb8a5762a2d0f4feedcc177faf0a5a6fceee4bf724a32f5ff6f2aa6fc2ef7be29e4a047dc265b3bad484a03110ab95fd37cacfe9897ff5e4935b6189e82ef7baea6705e0dfbba9a3660c300f3fff493972a69523d277551d63d761b0f2227674c59fcfe6a9fdabacd96312a4eafdab33660ee1165c1c364fb2c6a2d9ff347347f1f153549f6f81d8d3ff46c4e0d011054ea30da244f6e85546562009ea9d8d4da05c36017badd6fa63452fe7dea0a3e2b31dfbc837875a02c204fd997b51b2555da9421c4e2e091a1ce9f3fa4004ef8c678676f75e307ac095c246bc9c51b053a79586f7b7f8f838422c12d27be874a1162c8fbe86f927fdd90a1e8acc46cf70fb954842c9aab26827f796da215a02037144f9ba7be263898afae81698bef3cd3548491e7e8eb08e63ca962947cefcc4bc4b1d4888ca3142967e85f96447326f78f79b2fdb46b31708b6439f566bb9ed98aa6d0a1dedc68140af446efadd561b1d0624730367a5e355c62a6d8e81554f1858570e862d14e803a5782e0d7e6d475c9a2946cb61eb6552028b4806981670d13964dcbf311098d3319b857b6f9ab90a0a6b1cc2054b2640699579ba8134cf4f948904e22faee2c4142871247c76d167568cf0fe7e9ceb90dc12cc311957834e79a2f5047ca8c5801601a9bd08a6dc5eeb193db58103aa1ae916da593cef269df388d0f1377bb262f425d6d42de1126c44d64272e75b04fbf82386ba7133c518c26ceaabbf5b9d1c6c28bc00274d60dcc6fca1966ec70997b13706399e24d67d99fd2aef38e87847b1bd1e749223430223e05428d9b7b2f35efdbca5f481b91d7fd0fa9686115f9088e31df23071a567e00d1fdb12ecb44d681ef379454d1509690d591632b7ace5f035ed4d0a73f3891cc6197449d7f97ca3d698c9937b95021c83b2c6c1567eb0b39c63670e4300e7d71a449868e476a51340cb74b4990d5faf2e3d941712af0da22a879c3105fa6f0f7b32f28ddc8855e6c9037edfbfdcd0586ce90d34be4fb243a601f0b4614974a1ce425486458cb4d6eae289ce0de58f6c9d5e349de65a004ae30177e68a8f82c404f47ec821df0792dbf4878810a430580d0dc9ccfa1d19e981aee86cc6916e5adeab18b4c96877006668c0ffb3a4e743be5ae2013f6ccbee6dd367e9e1cc6c0491a523e7713aa46a9428f6e933496f81d2675d40c790bd11e9c9f375757d4e65c29a9548ee394737530477f433e2ea51aa88f24e9c67af257ea7a27d12825d42877be7d6b12b778c298dac49df303ea6555ee3a58c7e77f2ad3ad00bf2e49c9d4c5f0979e86f350452e2cf20ebdbab54d138325eea3515f9723ba8cacfb613841231953a0a7875281fb908f1701e52b61e01501775d02dce04c681dc171c7709af385ae89a00423d8bbc9a17353282e98e7d83752f28be405c5642148707ffea795f537fc426c3a5b4ad82aca5da140bd8f7242daae5f320040070fe59880acd590b8c56b88ae92cb5c2b83ff0150b115fe327b17a498e78aa136167dc029ff08173dbf5bb4a45e2c8c70047108fcfe4d582dc9fa9e42eca416856e80baf8e45c4554ea855b388d0a8943b373a8e3fab406e49e0e5fa956ff3532bb55510a9e70330e7c9483428e63bb845d743901c4a7d76b4d05f08dd249aae1fdf8cd1541f0a8e289b588fdd65bf533f51b510646d87d2e51ad988e81822451340c653cba864bc5b1f1337ad34ecfb80f5efc91f10ed38645ce6f078ab156cb37ce5093b28df824b3800f283f456de69fd712928facc65f9a1675ac3eea0f2cadd182d19ad3e16d677ebc43c0f1bc10adb21d6b71e280d76762ed1d8ee2d50de88a714e99f4edb84f0a5f0dcbc2372d020cb39d077a656403aa66ade9f2ea687298964b6c963a4796d3e3f20696b33d17f5d5b7f2d5eb611c24fbb8528f430ad8ad69353d4e9545b0e7ea1870acec8f0678c3c079b539e2238c56fad1a7f810101c8a8e91e56592313596d0afbd8b452ef6a4c646831f5422726142286b993a22793af94adffa15e360af373615d81875318fc53267657def03c15a1b73fa2c8a4df037637082d2bd34410c03b1c9a495723b0b56621670af786c26d2bec9f6893783d1b968cc50f25785e7ca228b1b682bd23bf9077b337d7b678f5213f36da5ce20dc66559c5efe2009c5f16c16013a6a8b371fad56075c0ad01bdbe4ac49bda91356ad95fbd4780fe93f9e8a736425ea6f9daf7a09ee2fac0d3ced182b55ef73d42437fa0014eea4af8a85a5bb8cdbc5c1c5e4546e7199885fc8f7cbfad4868874d35e88ca235e5e9136149c686ed5364eaaf2ccc0d7205f461d18b0b3fc759ff96f950a6dff4dac3be8c62ed37c0f116c3ca38f18e0a9d6cd7e5b51f4a2c2ef1fa4ce5ec1deafd717c06eb5db9dab2a763947a30cc31081a39cdb4d9b4698302a742277bc50024b3b4e64a5b6ada03331ebec695420e01cde980b39e485f9e77dda7b8a71920532bafa898d42266bc239487990d41955e2e55830740489143640132ba1ea05e906783eea4746e989f7d566b4e483ed0b96af8b4716be4a0e9fa746bd6b7308f88f85a46aaa9cbba7b93a0564801b41a2e71673f0f555aa33767d212aa89fbd6f3fd54c825afeca2c020663d0fd5a9b2b6351ed7495d1685d5d975b98c5c2d5f056cc1fb9b4dca887a3f3e6b6df6032854b7c1f18e9aa51f84784e89ee0840fe2806c12e050deb609293c00eafa6e71a9b45a24dab1964515a65dd9d2ded7aeb48dc8d4140e8e0b9797a61179bac0dd03ab8f694fb1c0b44a1560b387dce8bdabfb991349c8dda2bf5cf0a32a5c59e0dc58460df65db6c7ca2ac1c3d151fc855676ed8e55967e127b9eadc45d9bde94056675e36522c764a0a5bc842773a6b77a051a1b6d088c79bba3fb737b901eda08aa6094b2e473d137792e38d637b640224da2b23c11ba54bd4aaafda8d3db228064b5576234a126f22b8bf46e31d10d9828cee0957c10bed505b17629a5dc1c38d7ce275f75c8a4984dde6db86d5c58bc3529425a8b960bd3e994b609eecd1ee0c172a70365fd99519bfaa07bb1b3d8416e8b1ba98b4ed03b68e43463a8ceb3bcefbc5a2a0ba6ce2add4d74fbea0f5c16583edfca963d710bd66b412d404f70371355bf9f0fe215930b6b049a44dd1e3c94e1a406b72096ea99c0527f48b4091cf119b2c3fcc55241b8cc85ad985ba78d18400c3bcadac6d837676453e932a55b23f448df493841019a427c221f798e6b1c27e39941c0738f16df03273437b7391da1f669094f25aae5181eea37e1202543f9c43a6992140468651ba12b57965d00e5aeeb2097b43b3a2426881a66e0553b5e3fe4a45a0ce82b730485424b27f07d81ff549a0624f41619dc1713aac522b116b86fa65f529b6db392513c5b67ef6bc0715918d5a5ab7b2f52227cf7c5ae6565dc52a021a5538ca05e2197f256c057e27b10ff368246b88a0edc02663ef2913c3fb429d6d2d030401e7255853ac06745b2749bff9acfa2320407f01640c603330f737cb769b887f221e4fa76626ab9b4f98db10818dd6f825f32035797898904f903a2b3ce7b7db9b6801c09045be73c1bbdd10fef6c361039422a97e73223f708566e55d0d8a7acbc36e3fd7c39fb86769559f60b88f0c967e010f1e2b3d330eabe46ab0e829a89427a4417be796c50f021f0305d3fc52b366d9db1ae0c4a8f3b446a331252e8fe82c1", 0x1000, 0x9, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 317.680889] ? rw_verify_area+0xea/0x2b0 [ 317.680904] do_sendfile+0x4db/0xbd0 [ 317.680921] ? do_compat_pwritev64+0x140/0x140 [ 317.688660] ? fput+0xd4/0x150 [ 317.696400] SyS_sendfile64+0x102/0x110 [ 317.700379] ? SyS_sendfile+0x130/0x130 [ 317.704356] ? do_syscall_64+0x53/0x640 [ 317.708336] ? SyS_sendfile+0x130/0x130 [ 317.712317] do_syscall_64+0x1e8/0x640 [ 317.716202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.721049] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.726235] RIP: 0033:0x459879 16:59:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 16:59:58 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=pdma,port=0x0000000000000000,timeout=0x00000000ffe00000,\x00']) [ 317.729418] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 317.737126] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 317.744425] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 317.751697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 317.758963] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 317.766227] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x6, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0xab3}) write$sndseq(r0, &(0x7f0000000040)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:58 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x18080) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x9, 0x1003, 0x4, 0x1, 0x3, 0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 317.834870] 9pnet: Could not find request transport: pdma 16:59:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:58 executing program 2 (fault-call:4 fault-nth:22): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x220002, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000000c0)={0x5, 0x101, 0x0, 0x10001, 0x401, 0x10000}) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) 16:59:58 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0xa00001, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x5}}], [{@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7491616e733d72646d617a78c70a37c6252c706f303030303030302c68696d656f75743d3078303030303030303066666530303030302c000000005cce000000000000000000933895b53780a5303b84af8dc88b8d16887710639e3886375aefbcc056007a63d92e70429d34557e74fba0fbc9f01a1e33cb0d621b15e974318cb845c8df968748fa47410b7331edca27fae48f3af53433767686270693784376fd978309680a47a825d32004"]) 16:59:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/136) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$CAPI_INSTALLED(r0, 0x80024322) 16:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000c00)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000d00)={&(0x7f0000000400), 0xc, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800040028bd7000fcdbdf25020020a2ff04c80b0010000008000400e1cdde1b154a4a8680871a171e351e9fcc7b6f4eaf000dffdf154e5b86ad342fdbb121854e1c5aea2df94f5f576367af8c4084080b94846ebe1e6f6ade6c242cf0e4ff1abd5cea8c1941952899388c2c51359251754de4bc2eb32380a525e50cac2a6bd0e945270c38", @ANYRES32=r2, @ANYBLOB="080015000300000008001500295100000800050000000003080006007b280000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) 16:59:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 318.026115] 9pnet_virtio: no channels available for device 127.0.0.1 [ 318.045333] FAULT_INJECTION: forcing a failure. [ 318.045333] name failslab, interval 1, probability 0, space 0, times 0 16:59:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f0000000100)=""/62}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KDDELIO(r3, 0x4b35, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) read(r3, &(0x7f0000000200)=""/101, 0x65) bind$netlink(r4, &(0x7f0000000140), 0xc) 16:59:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1f, 0x4000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1) [ 318.086400] 9pnet_virtio: no channels available for device 127.0.0.1 [ 318.097373] CPU: 1 PID: 24390 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 318.104499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.113852] Call Trace: [ 318.113871] dump_stack+0x138/0x197 [ 318.113892] should_fail.cold+0x10f/0x159 [ 318.124227] should_failslab+0xdb/0x130 [ 318.128206] kmem_cache_alloc_node+0x287/0x780 [ 318.132791] ? __lock_acquire+0x5f7/0x4620 [ 318.137025] __alloc_skb+0x9c/0x500 [ 318.137036] ? skb_scrub_packet+0x4b0/0x4b0 [ 318.137053] alloc_skb_with_frags+0x86/0x4b0 [ 318.137069] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 318.137083] sock_alloc_send_pskb+0x5db/0x740 [ 318.158795] ? sock_wmalloc+0xf0/0xf0 [ 318.162607] ? _raw_spin_unlock+0x2d/0x50 [ 318.166762] unix_dgram_sendmsg+0x34c/0xf80 [ 318.171085] ? selinux_tun_dev_create+0xc0/0xc0 [ 318.175764] ? unix_stream_connect+0x11f0/0x11f0 [ 318.180541] ? security_socket_sendmsg+0x89/0xb0 [ 318.185299] ? unix_stream_connect+0x11f0/0x11f0 [ 318.190054] sock_sendmsg+0xce/0x110 [ 318.193769] kernel_sendmsg+0x44/0x50 [ 318.197568] sock_no_sendpage+0x107/0x130 [ 318.201714] ? sock_kzfree_s+0x50/0x50 [ 318.205613] kernel_sendpage+0x92/0xf0 [ 318.209495] ? sock_kzfree_s+0x50/0x50 [ 318.213379] sock_sendpage+0x8b/0xc0 [ 318.217085] ? timespec_trunc+0xb5/0x120 [ 318.221144] ? kernel_sendpage+0xf0/0xf0 [ 318.225195] pipe_to_sendpage+0x242/0x340 [ 318.229342] ? direct_splice_actor+0x190/0x190 16:59:58 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) flistxattr(r0, &(0x7f0000000100)=""/104, 0x68) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'eth', 0x3a, 'nr0\x00'}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000081) [ 318.233924] __splice_from_pipe+0x348/0x780 [ 318.238246] ? direct_splice_actor+0x190/0x190 [ 318.242832] ? direct_splice_actor+0x190/0x190 [ 318.247411] splice_from_pipe+0xf0/0x150 [ 318.251483] ? splice_shrink_spd+0xb0/0xb0 [ 318.255742] generic_splice_sendpage+0x3c/0x50 [ 318.260324] ? splice_from_pipe+0x150/0x150 [ 318.264648] direct_splice_actor+0x123/0x190 [ 318.269057] splice_direct_to_actor+0x29e/0x7b0 [ 318.273731] ? generic_pipe_buf_nosteal+0x10/0x10 [ 318.278577] ? do_splice_to+0x170/0x170 [ 318.282551] ? rw_verify_area+0xea/0x2b0 16:59:58 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400180, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 318.282563] do_splice_direct+0x18d/0x230 [ 318.282574] ? splice_direct_to_actor+0x7b0/0x7b0 [ 318.290751] ? rw_verify_area+0xea/0x2b0 [ 318.290765] do_sendfile+0x4db/0xbd0 [ 318.290782] ? do_compat_pwritev64+0x140/0x140 [ 318.290796] ? fput+0xd4/0x150 [ 318.311115] SyS_sendfile64+0x102/0x110 [ 318.315096] ? SyS_sendfile+0x130/0x130 [ 318.319071] ? do_syscall_64+0x53/0x640 [ 318.323044] ? SyS_sendfile+0x130/0x130 [ 318.327008] do_syscall_64+0x1e8/0x640 [ 318.330882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.335717] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.340904] RIP: 0033:0x459879 [ 318.344074] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.351763] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 318.359029] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 318.366286] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.373536] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 16:59:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) fstatfs(r0, &(0x7f0000000000)=""/9) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) socketpair(0x5, 0x2, 0x2, &(0x7f0000000040)) [ 318.380791] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:59 executing program 2 (fault-call:4 fault-nth:23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) socket$rds(0x15, 0x5, 0x0) 16:59:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c04006d656f75743d3078303030303030303066666530303030302c00"]) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80001, 0x4) open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x84) r1 = geteuid() fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x10000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x10000}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r3}}]}}) 16:59:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x3, 0x1, @raw_data=[0x101, 0x2, 0x35800000, 0x7, 0x8, 0xe99, 0x8, 0x81, 0xffff, 0x4, 0x3, 0x5, 0x10000, 0x1, 0x100000000, 0x8]}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x8, 0x18}, 0xc) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='reiserfs\x00', 0x0, 0x0) 16:59:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 16:59:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x42) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x2, {0x0, 0x7530}, {0x4, 0x2, 0xff, 0x0, 0xfffffffffffffffa, 0x4, "7962bda3"}, 0x8, 0x4, @fd=r3, 0x4}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000140), 0xc) 16:59:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x3, 0x9}, {0x4, 0x5}], r0}, 0x18, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x10002, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x10}, 0x2}, {0xa, 0x4e23, 0x7, @mcast1, 0xffffffff80000001}, 0x4, [0x4, 0x9, 0x8, 0x1ff, 0xf980, 0x1, 0x53a, 0x9]}, 0x5c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x1, 0x0, @pic={0x800, 0x3549, 0x0, 0x6, 0xff, 0x7, 0x4, 0x8be, 0x4, 0x6, 0xff, 0xffffffffffff8de5, 0x74743b41, 0x1ff, 0x1f, 0x7fffffff}}) ioctl$VT_DISALLOCATE(r2, 0x5608) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x2, 0x4}, 0x8) [ 318.660775] FAULT_INJECTION: forcing a failure. [ 318.660775] name failslab, interval 1, probability 0, space 0, times 0 [ 318.690237] CPU: 1 PID: 24443 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 318.697362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.706713] Call Trace: [ 318.709287] dump_stack+0x138/0x197 [ 318.712917] should_fail.cold+0x10f/0x159 [ 318.717053] should_failslab+0xdb/0x130 [ 318.721010] kmem_cache_alloc_node_trace+0x280/0x770 [ 318.726096] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 318.731531] __kmalloc_node_track_caller+0x3d/0x80 [ 318.736445] __kmalloc_reserve.isra.0+0x40/0xe0 [ 318.741098] __alloc_skb+0xcf/0x500 [ 318.744705] ? skb_scrub_packet+0x4b0/0x4b0 [ 318.749010] alloc_skb_with_frags+0x86/0x4b0 [ 318.753400] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 318.758317] sock_alloc_send_pskb+0x5db/0x740 [ 318.762801] ? sock_wmalloc+0xf0/0xf0 [ 318.766588] ? _raw_spin_unlock+0x2d/0x50 [ 318.770718] unix_dgram_sendmsg+0x34c/0xf80 [ 318.775020] ? selinux_tun_dev_create+0xc0/0xc0 [ 318.779670] ? __lock_acquire+0x5f7/0x4620 [ 318.783891] ? unix_stream_connect+0x11f0/0x11f0 [ 318.788634] ? security_socket_sendmsg+0x89/0xb0 [ 318.799524] ? unix_stream_connect+0x11f0/0x11f0 [ 318.804261] sock_sendmsg+0xce/0x110 [ 318.807957] kernel_sendmsg+0x44/0x50 [ 318.811741] sock_no_sendpage+0x107/0x130 [ 318.815867] ? sock_kzfree_s+0x50/0x50 [ 318.819731] ? find_held_lock+0x35/0x130 [ 318.823783] kernel_sendpage+0x92/0xf0 [ 318.827651] ? sock_kzfree_s+0x50/0x50 [ 318.831518] sock_sendpage+0x8b/0xc0 [ 318.835211] ? timespec_trunc+0xb5/0x120 [ 318.839252] ? kernel_sendpage+0xf0/0xf0 [ 318.843293] pipe_to_sendpage+0x242/0x340 [ 318.847423] ? direct_splice_actor+0x190/0x190 [ 318.851986] __splice_from_pipe+0x348/0x780 [ 318.856291] ? direct_splice_actor+0x190/0x190 [ 318.860889] ? direct_splice_actor+0x190/0x190 [ 318.865451] splice_from_pipe+0xf0/0x150 [ 318.869495] ? splice_shrink_spd+0xb0/0xb0 [ 318.873716] generic_splice_sendpage+0x3c/0x50 [ 318.878277] ? splice_from_pipe+0x150/0x150 [ 318.882581] direct_splice_actor+0x123/0x190 [ 318.886969] splice_direct_to_actor+0x29e/0x7b0 [ 318.891621] ? generic_pipe_buf_nosteal+0x10/0x10 [ 318.896447] ? do_splice_to+0x170/0x170 [ 318.900404] ? rw_verify_area+0xea/0x2b0 [ 318.904446] do_splice_direct+0x18d/0x230 [ 318.908584] ? splice_direct_to_actor+0x7b0/0x7b0 [ 318.913409] ? rw_verify_area+0xea/0x2b0 [ 318.917455] do_sendfile+0x4db/0xbd0 [ 318.921154] ? do_compat_pwritev64+0x140/0x140 [ 318.925734] ? fput+0xd4/0x150 [ 318.928910] SyS_sendfile64+0x102/0x110 [ 318.932866] ? SyS_sendfile+0x130/0x130 [ 318.936823] ? do_syscall_64+0x53/0x640 [ 318.940880] ? SyS_sendfile+0x130/0x130 [ 318.944834] do_syscall_64+0x1e8/0x640 [ 318.948702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.953530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.958696] RIP: 0033:0x459879 16:59:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) 16:59:59 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x8001, 0x80800) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000001c0)={0x20, 0x0, 0x5, 0x7fff}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 318.961889] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.969578] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 318.976831] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 318.984082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 318.991341] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 318.998590] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 16:59:59 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 16:59:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 16:59:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) fchownat(r0, &(0x7f00000002c0)='./file0\x00', r3, r2, 0x1000) fchownat(r0, &(0x7f0000000100)='./file0\x00', r1, r4, 0x800) 16:59:59 executing program 2 (fault-call:4 fault-nth:24): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 16:59:59 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendto(r0, &(0x7f0000000100)="324289474b831a771733cf543d87d69a7d660cc82ad8a8ef983d3a28152e4862c8239a", 0x23, 0x8001, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x2, @remote, 'ipddp0\x00'}}, 0x80) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x800) 16:59:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x204) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getpeername$llc(r1, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/225, &(0x7f0000000100)=0xe1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001, {0x0, 0x989680}}) 16:59:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) 16:59:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x200106, &(0x7f00000000c0)=ANY=[]) [ 319.286973] 9pnet_virtio: no channels available for device 127.0.0.1 [ 319.295356] FAULT_INJECTION: forcing a failure. [ 319.295356] name failslab, interval 1, probability 0, space 0, times 0 [ 319.307140] CPU: 0 PID: 24484 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 319.314257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.323615] Call Trace: [ 319.326213] dump_stack+0x138/0x197 [ 319.329855] should_fail.cold+0x10f/0x159 [ 319.334012] should_failslab+0xdb/0x130 [ 319.338000] kmem_cache_alloc_node_trace+0x280/0x770 [ 319.343109] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 319.348573] __kmalloc_node_track_caller+0x3d/0x80 [ 319.353510] __kmalloc_reserve.isra.0+0x40/0xe0 [ 319.358187] __alloc_skb+0xcf/0x500 [ 319.361818] ? skb_scrub_packet+0x4b0/0x4b0 [ 319.366141] alloc_skb_with_frags+0x86/0x4b0 [ 319.370548] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 319.375478] sock_alloc_send_pskb+0x5db/0x740 [ 319.379981] ? sock_wmalloc+0xf0/0xf0 16:59:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x80000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) write$capi20_data(r3, &(0x7f00000001c0)={{0x10, 0x6, 0x80, 0x83, 0x3, 0x3}, 0x9e, "535006cc7b31d81404c33ae46b8cfdee1b7a0dee2ad245252d9f9bb57fc9fc1a4e37ca60df4f41b3f35791b71e14254ca22bf1e863c179e60969218e2aefab79593a5524189119d89f42582bd09310698ce27f0bb1b8550520abe4d30707166a98c9d6e7f4d0170b0c69fed12ec52417b4841f0e83c6603570c4866cb8349a7af40124a426e41a9c2716f4ea153df76dc2908551ca7bf15217e0a427ec6c"}, 0xb0) accept4(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80800) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x4fb, 0xfffffffffffffff9}) [ 319.383788] ? _raw_spin_unlock+0x2d/0x50 [ 319.387934] unix_dgram_sendmsg+0x34c/0xf80 [ 319.392251] ? selinux_tun_dev_create+0xc0/0xc0 [ 319.396928] ? unix_stream_connect+0x11f0/0x11f0 [ 319.401686] ? security_socket_sendmsg+0x89/0xb0 [ 319.406442] ? unix_stream_connect+0x11f0/0x11f0 [ 319.411202] sock_sendmsg+0xce/0x110 [ 319.414913] kernel_sendmsg+0x44/0x50 [ 319.418721] sock_no_sendpage+0x107/0x130 [ 319.422872] ? sock_kzfree_s+0x50/0x50 [ 319.426763] ? find_held_lock+0x35/0x130 [ 319.430848] kernel_sendpage+0x92/0xf0 16:59:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x101041) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={{0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x3}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000180)=""/94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x5, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r3, r5, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40040212}, 0xc) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000200)={0xfd, 0x8, [0x0, 0x2]}) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000240)=0x2) [ 319.434747] ? sock_kzfree_s+0x50/0x50 [ 319.438637] sock_sendpage+0x8b/0xc0 [ 319.442347] ? timespec_trunc+0xb5/0x120 [ 319.446406] ? kernel_sendpage+0xf0/0xf0 [ 319.450467] pipe_to_sendpage+0x242/0x340 [ 319.454620] ? direct_splice_actor+0x190/0x190 [ 319.459206] __splice_from_pipe+0x348/0x780 [ 319.463524] ? direct_splice_actor+0x190/0x190 [ 319.468116] ? direct_splice_actor+0x190/0x190 [ 319.472699] splice_from_pipe+0xf0/0x150 [ 319.476765] ? splice_shrink_spd+0xb0/0xb0 [ 319.481188] generic_splice_sendpage+0x3c/0x50 16:59:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) bind$netlink(r2, &(0x7f0000000140), 0xc) 16:59:59 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1e, 0x0, 0x100000001}], 0x30) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 319.485777] ? splice_from_pipe+0x150/0x150 [ 319.490106] direct_splice_actor+0x123/0x190 [ 319.494555] splice_direct_to_actor+0x29e/0x7b0 [ 319.499230] ? generic_pipe_buf_nosteal+0x10/0x10 [ 319.504076] ? do_splice_to+0x170/0x170 [ 319.508044] ? rw_verify_area+0xea/0x2b0 [ 319.512097] do_splice_direct+0x18d/0x230 [ 319.512108] ? splice_direct_to_actor+0x7b0/0x7b0 [ 319.512122] ? rw_verify_area+0xea/0x2b0 [ 319.512134] do_sendfile+0x4db/0xbd0 [ 319.512152] ? do_compat_pwritev64+0x140/0x140 [ 319.512165] ? fput+0xd4/0x150 17:00:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 319.512176] SyS_sendfile64+0x102/0x110 [ 319.512187] ? SyS_sendfile+0x130/0x130 [ 319.512197] ? do_syscall_64+0x53/0x640 [ 319.512209] ? SyS_sendfile+0x130/0x130 [ 319.512220] do_syscall_64+0x1e8/0x640 [ 319.512229] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.561333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 319.566522] RIP: 0033:0x459879 [ 319.569708] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.577434] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 17:00:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r3, 0x300, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x1, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 319.584704] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 319.591970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 319.599241] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 319.606514] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:00 executing program 2 (fault-call:4 fault-nth:25): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:00 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 17:00:00 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000014c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001680)=0x14, 0x80000) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000001700)='/dev/usbmon0\x00', 0x100, 0x0) r8 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x2000) r9 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002a00)={0x0, 0x0}, &(0x7f0000002a40)=0xc) fstat(r4, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002b00)=0x0) getresuid(&(0x7f0000002b40)=0x0, &(0x7f0000002b80), &(0x7f0000002bc0)) fstat(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() stat(&(0x7f0000002c80)='./file0\x00', &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() r18 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/rtc0\x00', 0x800, 0x0) r19 = socket$bt_bnep(0x1f, 0x3, 0x4) r20 = syz_open_dev$cec(&(0x7f0000002d80)='/dev/cec#\x00', 0x0, 0x2) r21 = syz_open_dev$rtc(&(0x7f0000002dc0)='/dev/rtc#\x00', 0x5, 0x200000) r22 = gettid() r23 = getuid() getresgid(&(0x7f0000002e00), &(0x7f0000002e40)=0x0, &(0x7f0000002e80)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002ec0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002f00)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000003000)=0xe8) r27 = getgid() r28 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000003140)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="dac94ab39c13f8", 0x7}, {&(0x7f0000000180)="f2cc25a81f01ce64628c08a043e28f2cd77967fd5fa588e489f8d31565266a21dd6ca986f32974a2acb77c5a021d85dab0f5ee3a795ebb80936b8953296e107845fec7ad0816808314a1a6e7ec77e466edb2200290d2c709590b1625470337a9cc1aca142d978ce3846fd24af8dfcd74b626c87e695749144dc6ba9d91f34eea2c2a1d067d55405b6eb0d63d6849cfe987927085e4b7475e80e588a34ee490266f309d1b5a6855156b7e36fb9df99ed1cd2d93ebb9eefbe33eb07c3fa2df936e4d01e1420116a83dfcd3ac8055668777595e73", 0xd3}, {&(0x7f0000000340)="afc2786d1360a5af4787eac5c03eccfc068dda2d8ebe36c8b3a2aad93611e9d2a458b2966a76f1c59d33f82f19e4c82674cd8e5fe0da4ac6ce2dfb9a4272af4da4663d28169f3b96f6faacdc1abbe23aec13f75e2e31df504aa9c6bdd8523e7aa0a46bb6a05a3450a161340191f3da318ecf8f78ae9a50571799533f88b06d99ac8797cd60ef8b52003d96103cd9e69da24751b5758686d43a79d4336daf7cfd42b0f059f3459a25fa5e414e643120617c07e69bcd09", 0xb6}, {&(0x7f0000000400)="a3da0b854f521d9be1fe5e45456328557395bdd3ec3af7a60cf474fc945ef980c4a9ce3b95cebe5385df985c4d20449a4898590a0c411bb31efc6fd66ede4dc8db8502a31dee5384ca86273db19d1d4c46a217e3abfb2c0c1b22d8a72987ef4b3734d038f3f6343829c01db6d609bae22ab9dea98a4f71a83fd619a232a0c96d8dcb356941f9f66fd695b1f9e99ac6145c20084ab977cb018de144f249a6b494d456e1814c88e7", 0xa7}, {&(0x7f00000004c0)="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", 0x1000}], 0x5, &(0x7f00000031c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000254282fe3ef9b5ef2d3065be579395a8ad69206aadb3bb7ee58fc582710cef9290aa9f3e075128d1d835dff123e53f4403d20297ae3cdacc4a2d1740a2414da53310623de8885c8212e2484e2b10909af389c5521ea64143957253b6283fc29ef742ee7a260332184cb763cd7dfb27ebeb3b4a6246c2aa7ee91bb377f13424460cf73d5d1fb46dfd66ba082fa05219d66f9dc9430a1b8b1527adc40c41ab43fe39f0ca2f8aa11aedcc08b524f4c5b5d26ee129ce980cbb2203ce95", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x1}, {&(0x7f0000001800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="8c7601313025ddfde6de6e0aaaff473cebc307b6b5fae6b6e811aa2e2e6248093f1966ac51e4c717c1223efa48ae9d", 0x2f}, {&(0x7f00000028c0)="c24692eab7c069c66d6c02311c407d065128b150101d1313096de325900a23bf16559053b97c58b152d24dc347a8f4b1e68e41a692876aa84eaf487e63a5db0342a98fc000d791f6c28c94bd180d48aed3b229795cc321cde44d867a2fd2e9ec44476d139a1f9f3e8e794dfdf1234f963f936c431716dbfdcc9adc2ae89f2d2d915aa91dc53d6a8f8194c307d4a679759e6a884f426e7a5dfdea4fcd2346c2888c04c488c31cc09d4efe03de427cc19540211d0437d0dde9a894a26977fa24f63e261a3cd076c129e2884681ac0082bc3328f97f79415be2afcf65", 0xdb}], 0x3, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x20, 0x1, 0x1, [r18, r19, r20, r21]}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}, @rights={{0x14, 0x1, 0x1, [r28]}}], 0xd8, 0x20000000}], 0x2, 0x48000) 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) exit_group(0x74a400) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000080)=[{0xfffffffffffffffe, 0x0, 0xffff, 0x907, @time={r2, r3+30000000}, {0x1a6, 0x3428}, {0x9, 0x4}, @raw8={"864bc7199c51c3d4ca39ab52"}}, {0x0, 0x7fffffff, 0x1, 0x4467, @time={r4, r5+10000000}, {0x7}, {0x2, 0xfff}, @raw32={[0x2, 0x4, 0x3]}}], 0x60) 17:00:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x7f, 0x4, 0x8, &(0x7f0000fff000/0x1000)=nil, 0x100000001}) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x0, 0xd7f785a29a01e91) bind$netlink(r1, &(0x7f0000000140), 0xc) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "5029194d7050614edcd1c41479220812ec39e6"}, 0x23) socket$caif_seqpacket(0x25, 0x5, 0x5) 17:00:00 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x42180, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x8000, 0x100, [], &(0x7f0000000100)=0x91}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) syz_emit_ethernet(0xe9, &(0x7f0000000000)={@random="93d9041e433d", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [{[{0x9100, 0x81, 0x98, 0x4}], {0x8100, 0x777b, 0x4}}], {@generic={0x9a47, "5f5954c7e16d9845fd9101f892c7439ace621cdcfb44295467e99c422413ccc9e04b5dee55052dad732336289934e79033ee107b089988881ee4784f46d79d2f926d6b7e3799d6419983c6737ced82522ea1b648060932b0811e5368675fc0d89a89d1b2317bc53cadc6f9b56c22d1f0b4fd472440694f00835e9f3e3f0318b8a179a2d3e3fd322d43b2fcc2f48f177e3cb97966817e79604a2719887995cc9b6251321b2f64ef2c6e77286b4a8c31e9077c42ab97102ba15c415c7889abf276a8ec77b9af70e2099c4eca532c87c06f1eea93"}}}, &(0x7f0000000100)={0x1, 0x4, [0xf16, 0x58, 0x6b2, 0xffffffffffffff3a]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 319.761367] FAULT_INJECTION: forcing a failure. [ 319.761367] name failslab, interval 1, probability 0, space 0, times 0 17:00:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250106000000067564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) [ 319.844640] CPU: 1 PID: 24528 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 319.851792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.862061] Call Trace: [ 319.864662] dump_stack+0x138/0x197 [ 319.868300] should_fail.cold+0x10f/0x159 [ 319.872458] should_failslab+0xdb/0x130 [ 319.876442] kmem_cache_alloc_node_trace+0x280/0x770 [ 319.881536] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 319.881551] __kmalloc_node_track_caller+0x3d/0x80 [ 319.881564] __kmalloc_reserve.isra.0+0x40/0xe0 [ 319.881575] __alloc_skb+0xcf/0x500 [ 319.881585] ? skb_scrub_packet+0x4b0/0x4b0 [ 319.904514] alloc_skb_with_frags+0x86/0x4b0 [ 319.904533] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 319.904550] sock_alloc_send_pskb+0x5db/0x740 [ 319.913884] ? sock_wmalloc+0xf0/0xf0 [ 319.922151] ? _raw_spin_unlock+0x2d/0x50 [ 319.926309] unix_dgram_sendmsg+0x34c/0xf80 [ 319.930639] ? selinux_tun_dev_create+0xc0/0xc0 [ 319.935325] ? unix_stream_connect+0x11f0/0x11f0 [ 319.940093] ? security_socket_sendmsg+0x89/0xb0 [ 319.944860] ? unix_stream_connect+0x11f0/0x11f0 [ 319.949625] sock_sendmsg+0xce/0x110 [ 319.953349] kernel_sendmsg+0x44/0x50 [ 319.957158] sock_no_sendpage+0x107/0x130 [ 319.961307] ? sock_kzfree_s+0x50/0x50 [ 319.965198] ? find_held_lock+0x35/0x130 [ 319.969282] kernel_sendpage+0x92/0xf0 [ 319.973169] ? sock_kzfree_s+0x50/0x50 [ 319.977058] sock_sendpage+0x8b/0xc0 [ 319.980790] ? timespec_trunc+0xb5/0x120 [ 319.984857] ? kernel_sendpage+0xf0/0xf0 [ 319.988922] pipe_to_sendpage+0x242/0x340 [ 319.993076] ? direct_splice_actor+0x190/0x190 [ 319.997660] __splice_from_pipe+0x348/0x780 [ 320.001971] ? direct_splice_actor+0x190/0x190 [ 320.001985] ? direct_splice_actor+0x190/0x190 [ 320.001994] splice_from_pipe+0xf0/0x150 [ 320.002005] ? splice_shrink_spd+0xb0/0xb0 [ 320.002024] generic_splice_sendpage+0x3c/0x50 [ 320.002033] ? splice_from_pipe+0x150/0x150 [ 320.028327] direct_splice_actor+0x123/0x190 [ 320.032746] splice_direct_to_actor+0x29e/0x7b0 [ 320.037423] ? generic_pipe_buf_nosteal+0x10/0x10 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x8, 0x40) bind$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x7}, [@default, @default, @null, @bcast, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:00 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x600000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180)=0x8, 0xfffffffffffffdba) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='trans=rdma,') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 320.042276] ? do_splice_to+0x170/0x170 [ 320.046257] ? rw_verify_area+0xea/0x2b0 [ 320.050318] do_splice_direct+0x18d/0x230 [ 320.054470] ? splice_direct_to_actor+0x7b0/0x7b0 [ 320.054487] ? rw_verify_area+0xea/0x2b0 [ 320.063361] do_sendfile+0x4db/0xbd0 [ 320.063380] ? do_compat_pwritev64+0x140/0x140 [ 320.063394] ? fput+0xd4/0x150 [ 320.063407] SyS_sendfile64+0x102/0x110 [ 320.063417] ? SyS_sendfile+0x130/0x130 [ 320.063428] ? do_syscall_64+0x53/0x640 [ 320.063439] ? SyS_sendfile+0x130/0x130 [ 320.090715] do_syscall_64+0x1e8/0x640 [ 320.094601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.099458] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.104643] RIP: 0033:0x459879 [ 320.107823] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.115532] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 320.122801] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 320.130067] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.137330] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 320.144580] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) 17:00:00 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x9002, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}]}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200800, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000220) 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) accept4$netrom(r1, &(0x7f0000000040)={{0x3, @rose}, [@default, @null, @null, @bcast, @null, @null, @remote, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) 17:00:00 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) getgroups(0x1, &(0x7f0000000740)=[0xffffffffffffffff]) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000980)={0x348, 0x0, 0x3, [{{0x2, 0x3, 0x0, 0x0, 0x4, 0x7, {0x1, 0x8, 0x30, 0x5, 0xfffffffffffffff8, 0x400, 0x8, 0x5, 0x3f, 0x2, 0x200, r2, r3, 0x3, 0xff}}, {0x2, 0x70, 0x12, 0x1000, '/dev/snd/pcmC#D#p\x00'}}, {{0x2, 0x2, 0x9, 0xd295, 0x6, 0x4, {0x0, 0x100, 0xd3, 0x0, 0x4, 0x4, 0x81, 0x80000001, 0x1000, 0x8, 0xfffffffffffffffc, r4, r5, 0x9, 0x3965c2f7}}, {0x3, 0x9, 0x4, 0x7ff, 'dax\x00'}}, {{0x4, 0x1, 0x2, 0xfffffffffffffbff, 0xaef4, 0x0, {0x0, 0x1cd2, 0x5, 0x7, 0x6, 0xfffffffffffffff7, 0x6, 0xc542, 0x6, 0x6, 0xffffffff00000000, r6, r7, 0x2, 0x445}}, {0x3, 0x4, 0x4, 0xfffffffffffffffd, 'dax\x00'}}, {{0x3, 0x0, 0x9, 0xffffffffffffffe1, 0x5, 0x7, {0x1, 0x3, 0xeff4, 0x8, 0x5, 0x9e, 0x7fffffff, 0xfffffffffffffff7, 0x100000001, 0x6, 0x1, r8, r9, 0x8, 0x3cd2}}, {0x1, 0x5, 0x6, 0x9, ':!user'}}, {{0x2, 0x0, 0x7, 0x6, 0x4, 0x6a337ae0, {0x3, 0x7f, 0x10001, 0x8, 0x8, 0x101, 0x8, 0x3, 0x7, 0x3ff, 0xe2, r10, r11, 0x0, 0x8000}}, {0x2, 0x2, 0xf, 0x80000000, '6$userprocproc$'}}]}, 0x348) setsockopt(r0, 0x1, 0x5, &(0x7f0000000200)="0cd1848b71e59cb74e7b6946972b0863f1d78c389f547953c485291def0c31ee583e21f59da68a8f8936c2d85979275ca1b46109809231e9a16130039c8487143f84b3efafc40e7e075ff87cecf9f5f3b3ca65682afc742efc9d169108248029c44857fc8ad999bacb456e9d6d2f700cc367772632704470e683c9bd3199d63a0c5250f2c9255d19046771e25513851ce32d7bc1879a6c33b99a9eddd7c1e8fe79f1da66e9e70b065c281d7bc886775329b476a0d3ffb9ee5383cb93ea9fb5fdf45ac9", 0xc3) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x62410000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="31fd192f", @ANYRES16=r1, @ANYBLOB="020029bd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendto$rose(r0, &(0x7f0000000d00)="83f0ab970c8ff8bf3b44134144791497465bbe507f7c74960af485013b71713e14beb9b7423e19d6a25210b9a2c026f70734b16a0aba99287f4e19b36392b5fa8e771c3c2f7ddd1cee34363ae2ec7e3421bfcac4225fb71b8aee8064eef5af309c9c9dd69200ddf26c0a0e691bd69cfc37cd8e36074ea85294edd1fbfcc5da2b", 0x80, 0x40, &(0x7f0000000d80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:00 executing program 2 (fault-call:4 fault-nth:26): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 320.259659] FAULT_INJECTION: forcing a failure. [ 320.259659] name failslab, interval 1, probability 0, space 0, times 0 [ 320.290095] CPU: 1 PID: 24561 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 320.297235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.306592] Call Trace: [ 320.309186] dump_stack+0x138/0x197 [ 320.312858] should_fail.cold+0x10f/0x159 [ 320.317028] should_failslab+0xdb/0x130 [ 320.321007] kmem_cache_alloc_node+0x287/0x780 [ 320.325594] ? __lock_acquire+0x5f7/0x4620 [ 320.329837] __alloc_skb+0x9c/0x500 [ 320.333464] ? skb_scrub_packet+0x4b0/0x4b0 [ 320.337787] alloc_skb_with_frags+0x86/0x4b0 [ 320.342202] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 320.347133] sock_alloc_send_pskb+0x5db/0x740 [ 320.351644] ? sock_wmalloc+0xf0/0xf0 [ 320.355443] ? _raw_spin_unlock+0x2d/0x50 [ 320.359588] unix_dgram_sendmsg+0x34c/0xf80 [ 320.363912] ? selinux_tun_dev_create+0xc0/0xc0 [ 320.368590] ? unix_stream_connect+0x11f0/0x11f0 [ 320.373350] ? security_socket_sendmsg+0x89/0xb0 [ 320.378108] ? unix_stream_connect+0x11f0/0x11f0 [ 320.382864] sock_sendmsg+0xce/0x110 [ 320.386582] kernel_sendmsg+0x44/0x50 [ 320.390385] sock_no_sendpage+0x107/0x130 [ 320.394533] ? sock_kzfree_s+0x50/0x50 [ 320.398447] kernel_sendpage+0x92/0xf0 [ 320.402330] ? sock_kzfree_s+0x50/0x50 [ 320.406222] sock_sendpage+0x8b/0xc0 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x41, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000100)={0x20, 0x54, &(0x7f0000000040)="efc6391bd8de2ecf719f241057bc7e3852e72a6bce6cf338b9651ac9e84578d0a527674facf114c743b8fbcc7b09beb320a2cf0f734ec0c4005bde1ce986cae77448bdc816addcfabd0cfde9b9dacafdfcd2683bb4aad367160fe305e4b4d0aa2ccd597a6544000556e4b06a2a54801bbf97d55875aad4372b1b7c46de0f145b3157244fe35563745508286ab3f693da601bf0c29ad447bad7c2bc091953f207065125215f4d86ac", {0xfe00000000000000, 0x0, 0x8959e7c5b0dd830a, 0x7, 0x5, 0xffffffff00000000, 0xa, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0xa7, {}, 0xca3}) [ 320.409929] ? timespec_trunc+0xb5/0x120 [ 320.409941] ? kernel_sendpage+0xf0/0xf0 [ 320.409951] pipe_to_sendpage+0x242/0x340 [ 320.409962] ? direct_splice_actor+0x190/0x190 [ 320.426757] __splice_from_pipe+0x348/0x780 [ 320.426769] ? direct_splice_actor+0x190/0x190 [ 320.426786] ? direct_splice_actor+0x190/0x190 [ 320.426795] splice_from_pipe+0xf0/0x150 [ 320.426807] ? splice_shrink_spd+0xb0/0xb0 [ 320.448517] generic_splice_sendpage+0x3c/0x50 [ 320.453100] ? splice_from_pipe+0x150/0x150 [ 320.457426] direct_splice_actor+0x123/0x190 [ 320.461844] splice_direct_to_actor+0x29e/0x7b0 [ 320.466516] ? generic_pipe_buf_nosteal+0x10/0x10 [ 320.471366] ? do_splice_to+0x170/0x170 [ 320.475345] ? rw_verify_area+0xea/0x2b0 [ 320.479408] do_splice_direct+0x18d/0x230 [ 320.483555] ? splice_direct_to_actor+0x7b0/0x7b0 [ 320.488396] ? rw_verify_area+0xea/0x2b0 [ 320.492461] do_sendfile+0x4db/0xbd0 [ 320.496194] ? do_compat_pwritev64+0x140/0x140 [ 320.500787] ? fput+0xd4/0x150 [ 320.503983] SyS_sendfile64+0x102/0x110 17:00:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000280)) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0x0, 0x10001, 0x80}, 0x10) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 320.507955] ? SyS_sendfile+0x130/0x130 [ 320.511925] ? do_syscall_64+0x53/0x640 [ 320.515897] ? SyS_sendfile+0x130/0x130 [ 320.519874] do_syscall_64+0x1e8/0x640 [ 320.523754] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.523772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.523782] RIP: 0033:0x459879 [ 320.533783] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.533796] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 320.533801] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 17:00:01 executing program 2 (fault-call:4 fault-nth:27): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:01 executing program 5: mkdir(&(0x7f00000006c0)='./file0\x00', 0x88) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) execveat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000200)='9p\x00', &(0x7f0000000240)='procuser%-\x00', &(0x7f0000000280)='trans=rdma,', &(0x7f00000002c0)='^\x00', &(0x7f0000000340)='system\x00', &(0x7f0000000380)='}trusted\x00', &(0x7f00000003c0)='GPL[wlan0security+*cgroup)\xb6[\xc1\x00', &(0x7f0000000400)='-security}trusted\x1d#vmnet1trusted/\x00'], &(0x7f0000000680)=[&(0x7f0000000480)='self%}GPLeth0\x00', &(0x7f00000004c0)='port', &(0x7f0000000500)='bdevcpuset\x00', &(0x7f0000000540)='4\x00', &(0x7f0000000580)='wlan1)posix_acl_access\x1bsecurity[\x00', &(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00', &(0x7f0000000600)='port', &(0x7f0000000640)='security/\x00'], 0x100) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f7274c3ba37008096da8930303030302c00000000000000"]) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x100, 0x40) write$rfkill(r1, &(0x7f0000000140)={0xad, 0x3, 0x2, 0x1}, 0x8) 17:00:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xaf, 0x6, 0x7, "564eba0a07983777640605e453275a2c", "ebcf6dc2a24cc8c795310129f75e2cdd50f508cc77bb90d6f99a8f16c24045e16431803ba9221d4dc3a7e890b513715e7e6afb40b9a0fd466c5badf9926a75bbcb9af5a0bb9e5717010d8a8a01f9c454a343d0580a870552766310583772a1e2e9ddd6ab03f376ecf026669ddf776ce5bf91f64c1a026f736c32dc658a1aa694f8aeacc1c4b3492f13f55a84bea989e2723a24751dc94fa182aa"}, 0xaf, 0x1) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 320.533807] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.533812] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 320.533818] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 320.576671] FAULT_INJECTION: forcing a failure. [ 320.576671] name failslab, interval 1, probability 0, space 0, times 0 [ 320.627080] CPU: 1 PID: 24584 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 320.634207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.643564] Call Trace: [ 320.646164] dump_stack+0x138/0x197 [ 320.649806] should_fail.cold+0x10f/0x159 [ 320.653967] should_failslab+0xdb/0x130 [ 320.657948] kmem_cache_alloc_node_trace+0x280/0x770 [ 320.663056] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 320.668509] __kmalloc_node_track_caller+0x3d/0x80 [ 320.673436] __kmalloc_reserve.isra.0+0x40/0xe0 [ 320.678107] __alloc_skb+0xcf/0x500 [ 320.681739] ? skb_scrub_packet+0x4b0/0x4b0 [ 320.686066] alloc_skb_with_frags+0x86/0x4b0 [ 320.690479] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 320.695411] sock_alloc_send_pskb+0x5db/0x740 [ 320.699921] ? sock_wmalloc+0xf0/0xf0 [ 320.703732] ? _raw_spin_unlock+0x2d/0x50 [ 320.707882] unix_dgram_sendmsg+0x34c/0xf80 [ 320.712209] ? selinux_tun_dev_create+0xc0/0xc0 [ 320.716886] ? unix_stream_connect+0x11f0/0x11f0 [ 320.721650] ? security_socket_sendmsg+0x89/0xb0 [ 320.726403] ? unix_stream_connect+0x11f0/0x11f0 [ 320.731159] sock_sendmsg+0xce/0x110 [ 320.734873] kernel_sendmsg+0x44/0x50 [ 320.734888] sock_no_sendpage+0x107/0x130 [ 320.734899] ? sock_kzfree_s+0x50/0x50 [ 320.742834] kernel_sendpage+0x92/0xf0 [ 320.742842] ? sock_kzfree_s+0x50/0x50 [ 320.742853] sock_sendpage+0x8b/0xc0 [ 320.742863] ? timespec_trunc+0xb5/0x120 [ 320.742872] ? kernel_sendpage+0xf0/0xf0 [ 320.742882] pipe_to_sendpage+0x242/0x340 [ 320.742894] ? direct_splice_actor+0x190/0x190 [ 320.742910] __splice_from_pipe+0x348/0x780 [ 320.742919] ? direct_splice_actor+0x190/0x190 [ 320.742934] ? direct_splice_actor+0x190/0x190 [ 320.758238] splice_from_pipe+0xf0/0x150 [ 320.758253] ? splice_shrink_spd+0xb0/0xb0 [ 320.758272] generic_splice_sendpage+0x3c/0x50 [ 320.775064] ? splice_from_pipe+0x150/0x150 [ 320.775077] direct_splice_actor+0x123/0x190 [ 320.775091] splice_direct_to_actor+0x29e/0x7b0 [ 320.788531] ? generic_pipe_buf_nosteal+0x10/0x10 [ 320.788545] ? do_splice_to+0x170/0x170 [ 320.788557] ? rw_verify_area+0xea/0x2b0 [ 320.805697] do_splice_direct+0x18d/0x230 [ 320.805710] ? splice_direct_to_actor+0x7b0/0x7b0 [ 320.805726] ? rw_verify_area+0xea/0x2b0 [ 320.827606] do_sendfile+0x4db/0xbd0 [ 320.827624] ? do_compat_pwritev64+0x140/0x140 [ 320.840623] ? fput+0xd4/0x150 [ 320.840637] SyS_sendfile64+0x102/0x110 [ 320.840647] ? SyS_sendfile+0x130/0x130 [ 320.840659] ? do_syscall_64+0x53/0x640 [ 320.840670] ? SyS_sendfile+0x130/0x130 [ 320.840682] do_syscall_64+0x1e8/0x640 [ 320.840691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.840707] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.840715] RIP: 0033:0x459879 [ 320.840721] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.840733] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 320.900001] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 320.907270] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.914543] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 17:00:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ax\x00', 0x2000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002480)='/dev/btrfs-control\x00', 0x501040, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000024c0)="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", 0x1000) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xe94b, 0x0) 17:00:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="a110799e49232ec1244a95263d44e42585634fa666604e04836b1899ffd68d384e5070e5bab1a91004117570a262974129f4d547f7c3ab0e8e07e58cddd37ae6d07265cf847a1beaf6740ec31ca860723b338d873bb8e40d") write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:01 executing program 5: syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="48af58009ad94c815b604675fba00595bea760f81f4857257f2df5142bc6ee1435cbec0b2315f8d2fae7e746da60e561f1fc4832c897bf0182e0da358fed2f3d0edabf18757353cca3dd12d64e1a034ec0d4b813f5826a326acb2fcfb30e666749f5833f853b2d906cc17634a6684ebdf4637d0f1376f5fe7fddebf760c36f3c68e4460db61bee3191d48faae93382eb4e616e6be749aee2471e37fb742f112317769783aa72ace9eaa8b52c1fac0c0ab94599f21ac4bb2d7748476d75376c", 0xbf, 0x2}, {&(0x7f0000000340)="f62fdc8b6a9e14294771ab1005201e1a15854febc798ee6efb7195db0a448e691e633a51cd568d084a30521102e49f7024319cec96bfb4f3880120788021e871bb219afeb55a728cbaf65a0e7934888f6971820b7c64ed8e77ae1eb68b639e91428b95503acbc1ac03113d0f0f0e6de08796bf6459fbb43dc0c62d82ffc707ae19594945c4d35f21ec2e86a9eea88920", 0x90, 0x6}, {&(0x7f0000000200)="677495ed03234d709ba7d7de3c3fa704db0d504dc9d81a9aa4c39d19870fb0225d205d4eb47d3282d57dad27c52e6f74882c97b4e9c2b440cbf6de8e7494adbf27bf0d41d87a107dbcdb9aace3d5d41eb8bd9adfe5ed052c1fa35e8ee94e", 0x5e, 0xc3e}, {&(0x7f00000002c0)="1ebc6c2e7c4521d6941e863ba3aa18138b53d972cc", 0x15, 0x20}, {&(0x7f0000000400)="849513da315bc52a719a1a046e3df5756fb2753def64dd58edad6f4bb42055afb5e10fde00b973aef70676fa62779c9818fa2bd7e16b15fb748ed3462b523eaad9b5f507768d522ec3006bf22bca4ad4d92ed364f0ec5a0b86a8f478c18d6c1ffb6030ad98c6bc74cb9046d518cee6db3a9bab491c59629e780386e035dedfa98981d5a2075a6db333bb64fd333c4efc4296c7c02705d4506b6df2f0421b3ad5fc2f9277be8400cde91007be115996e746ca41d6008e02fabd5da4c53b727301372893989abba14be2c7c27680e2f9ec7092e8ee4666dbb389e2852006906225724159af1020041ef5c4b7463d9dff8d022d0a1c3c", 0xf5, 0xffffffff}, {&(0x7f0000000500)="81b1603402bde4ae0276d1204e4a5bc62a4bddce43f6214f92c19fa0ab3d1be5d57920e25f5f28981a0a789aba7905f9b947c9799d3d564801e1242e72413ad09b9defa8f05bb46dd5b40f9ed545f13b585ec9f3ca7b576254eb1c32fcdd8807d58f63434d379f41b9b1", 0x6a, 0x4f0}], 0x1000, &(0x7f0000000640)='127.0.0.1\x00') r0 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x3, 0xdec00) r1 = syz_open_dev$mice(&(0x7f0000000700)='/dev/input/mice\x00', 0x0, 0x100) linkat(r0, &(0x7f00000006c0)='./file0\x00', r1, &(0x7f0000000740)='./file0\x00', 0x1400) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) syz_open_dev$vcsn(&(0x7f00000007c0)='/dev/vcs#\x00', 0x80, 0x1) timerfd_gettime(r0, &(0x7f0000000780)) [ 320.921809] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:01 executing program 2 (fault-call:4 fault-nth:28): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x5, @mcast1, 0x100}}}, &(0x7f00000000c0)=0x84) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x6000, 0x100000}) bind$netlink(r1, &(0x7f0000000140), 0xc) 17:00:01 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x10000, 0xffffffff, 0x1, 0x2, 0x5, 0x7fffffff, 0x32, 0x9, r1}, 0x20) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 321.049005] FAULT_INJECTION: forcing a failure. [ 321.049005] name failslab, interval 1, probability 0, space 0, times 0 [ 321.086336] CPU: 1 PID: 24618 Comm: syz-executor.2 Not tainted 4.14.141 #37 17:00:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000340)=""/4096, &(0x7f0000000000)=0x1000) [ 321.093474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.102838] Call Trace: [ 321.105441] dump_stack+0x138/0x197 [ 321.109084] should_fail.cold+0x10f/0x159 [ 321.113240] should_failslab+0xdb/0x130 [ 321.117233] kmem_cache_alloc_node+0x287/0x780 [ 321.121824] ? __lock_acquire+0x5f7/0x4620 [ 321.126074] __alloc_skb+0x9c/0x500 [ 321.129964] ? skb_scrub_packet+0x4b0/0x4b0 [ 321.134298] alloc_skb_with_frags+0x86/0x4b0 [ 321.134314] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 321.134328] sock_alloc_send_pskb+0x5db/0x740 [ 321.143641] ? sock_wmalloc+0xf0/0xf0 [ 321.143657] ? _raw_spin_unlock+0x2d/0x50 [ 321.143670] unix_dgram_sendmsg+0x34c/0xf80 [ 321.143682] ? selinux_tun_dev_create+0xc0/0xc0 [ 321.143701] ? unix_stream_connect+0x11f0/0x11f0 [ 321.143718] ? security_socket_sendmsg+0x89/0xb0 [ 321.143727] ? unix_stream_connect+0x11f0/0x11f0 [ 321.143737] sock_sendmsg+0xce/0x110 [ 321.143747] kernel_sendmsg+0x44/0x50 [ 321.143758] sock_no_sendpage+0x107/0x130 [ 321.143768] ? sock_kzfree_s+0x50/0x50 [ 321.194882] kernel_sendpage+0x92/0xf0 17:00:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x410000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) [ 321.198783] ? sock_kzfree_s+0x50/0x50 [ 321.202677] sock_sendpage+0x8b/0xc0 [ 321.206396] ? timespec_trunc+0xb5/0x120 [ 321.210459] ? kernel_sendpage+0xf0/0xf0 [ 321.214525] pipe_to_sendpage+0x242/0x340 [ 321.218725] ? direct_splice_actor+0x190/0x190 [ 321.223316] __splice_from_pipe+0x348/0x780 [ 321.227642] ? direct_splice_actor+0x190/0x190 [ 321.232235] ? direct_splice_actor+0x190/0x190 [ 321.236825] splice_from_pipe+0xf0/0x150 [ 321.240982] ? splice_shrink_spd+0xb0/0xb0 [ 321.245235] generic_splice_sendpage+0x3c/0x50 17:00:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = getuid() ioctl$RTC_AIE_OFF(r1, 0x7002) getgroups(0x8, &(0x7f0000000040)=[0xee00, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @initdev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="60010000feffffff050000000000000005000000000000000000000000000000feffffffffffffff3700000000f2fffffeffffffff0700000300000000000000ffff0000000000003f000000000000009d0700000000000001000080000000010000008000000000050000007f000000600000000000000008000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="7900000008000000000000000000000000000000000080020000000008000000000000006b657972696e677b020000000000000001000000000000000500000000000000000100000000000035050000000000000400000000000000ff0300000000000003000000000000000104000000000000f7ffffffffffffff0101000000000000750d000006000000b237f80f170d000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="62040000ba000000000000000100000000000000a2b200000000000018000000090000006370757365746e6f64657676626f786e6574312562646576"], 0x160) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 321.249813] ? splice_from_pipe+0x150/0x150 [ 321.249825] direct_splice_actor+0x123/0x190 [ 321.249840] splice_direct_to_actor+0x29e/0x7b0 [ 321.263210] ? generic_pipe_buf_nosteal+0x10/0x10 [ 321.268052] ? do_splice_to+0x170/0x170 [ 321.268066] ? rw_verify_area+0xea/0x2b0 [ 321.268077] do_splice_direct+0x18d/0x230 [ 321.268088] ? splice_direct_to_actor+0x7b0/0x7b0 [ 321.285068] ? rw_verify_area+0xea/0x2b0 [ 321.289146] do_sendfile+0x4db/0xbd0 [ 321.292893] ? do_compat_pwritev64+0x140/0x140 [ 321.297478] ? fput+0xd4/0x150 [ 321.300675] SyS_sendfile64+0x102/0x110 [ 321.304652] ? SyS_sendfile+0x130/0x130 [ 321.308629] ? do_syscall_64+0x53/0x640 [ 321.312608] ? SyS_sendfile+0x130/0x130 [ 321.316594] do_syscall_64+0x1e8/0x640 [ 321.320491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.325338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.330526] RIP: 0033:0x459879 [ 321.333713] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.341427] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 17:00:01 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000240)={r1, &(0x7f00000001c0)=""/75}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x426241, 0xdb8466171fc7db1a) ioctl$TIOCSCTTY(r2, 0x540e, 0x5) 17:00:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x600, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 321.348699] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 321.355965] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.363222] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 321.370472] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x4, 0x10001, 0x200, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x1, 0x0, 0x1000000000000}], 0x30) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x80, 0x8a90, 0x1900, {r1, r2+30000000}, 0x4, 0xfff}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:01 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:01 executing program 2 (fault-call:4 fault-nth:29): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x3, 0x7, 0x8, 0x7}, {0x8001, 0xf112, 0x80000000, 0x5}, {0x2, 0x81, 0x1ff, 0x6}, {0xffffffffffffff80, 0x100000000, 0x2, 0x200}, {0x1d00000000000, 0xfa43, 0x3, 0x7}, {0x5b4, 0x5, 0xc2, 0xc4}, {0x7, 0x8000, 0x7, 0x8}]}, 0x10) bind$netlink(r2, &(0x7f0000000140), 0xc) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x11, r2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x80, 0x4) 17:00:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x7, 0x5, 0x6c52, 0x3, 0x0, 0x0, 0xeba874acfc6c1586, 0x8, 0x0, 0x7, 0x4, 0x6d69, 0x2, 0x885, 0x4, 0x100000001, 0x100000000000, 0x401, 0xfffffffffffffe01, 0x8001, 0xa2f, 0x9, 0xfde5, 0x8, 0x400, 0x800, 0x6c4b, 0x4, 0x2, 0x6, 0xfff, 0x8, 0x6a3, 0x3be, 0x0, 0x200, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0xf6941ffd87532ce3, 0x1, 0x7, 0x8, 0x0, 0x5, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x9, 0x5, 0x4, 0x0, 0x1000, 0x80, 0x9, 0x3, 0xfffffffffffffff7, 0x1, 0x3ff, 0x8, 0x40, 0x5d, 0x3, 0x7f, 0x3, 0xfffffffffffffffa, 0x7, 0x69, 0x1, 0x5, 0x9, 0xdc5, 0x81, 0x40, 0x4, 0x7, 0x90ae, 0x80, 0xffff, 0x6, 0x87b, 0x2, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x5538efe627cec0d7}, 0x20, 0x7, 0x6, 0x6, 0x2, 0x9, 0x5}, r1, 0x6, r2, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 321.524437] kauditd_printk_skb: 4 callbacks suppressed [ 321.524447] audit: type=1400 audit(1567184401.988:115): avc: denied { map } for pid=24648 comm="syz-executor.0" path="socket:[84461]" dev="sockfs" ino=84461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 [ 321.561479] FAULT_INJECTION: forcing a failure. [ 321.561479] name failslab, interval 1, probability 0, space 0, times 0 [ 321.577891] CPU: 0 PID: 24653 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 321.585021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.594389] Call Trace: [ 321.594411] dump_stack+0x138/0x197 [ 321.594431] should_fail.cold+0x10f/0x159 [ 321.594446] should_failslab+0xdb/0x130 [ 321.594463] kmem_cache_alloc_node_trace+0x280/0x770 [ 321.594479] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 321.619513] __kmalloc_node_track_caller+0x3d/0x80 [ 321.624457] __kmalloc_reserve.isra.0+0x40/0xe0 [ 321.629139] __alloc_skb+0xcf/0x500 [ 321.632777] ? skb_scrub_packet+0x4b0/0x4b0 [ 321.637295] alloc_skb_with_frags+0x86/0x4b0 [ 321.641714] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 321.647100] sock_alloc_send_pskb+0x5db/0x740 [ 321.651620] ? sock_wmalloc+0xf0/0xf0 [ 321.655431] ? _raw_spin_unlock+0x2d/0x50 [ 321.659587] unix_dgram_sendmsg+0x34c/0xf80 [ 321.663917] ? selinux_tun_dev_create+0xc0/0xc0 [ 321.668600] ? unix_stream_connect+0x11f0/0x11f0 [ 321.673372] ? security_socket_sendmsg+0x89/0xb0 [ 321.678133] ? unix_stream_connect+0x11f0/0x11f0 [ 321.682891] sock_sendmsg+0xce/0x110 [ 321.686612] kernel_sendmsg+0x44/0x50 [ 321.690417] sock_no_sendpage+0x107/0x130 [ 321.694564] ? sock_kzfree_s+0x50/0x50 [ 321.698466] kernel_sendpage+0x92/0xf0 [ 321.702351] ? sock_kzfree_s+0x50/0x50 [ 321.706227] sock_sendpage+0x8b/0xc0 [ 321.709942] ? timespec_trunc+0xb5/0x120 [ 321.714007] ? kernel_sendpage+0xf0/0xf0 [ 321.718063] pipe_to_sendpage+0x242/0x340 [ 321.722213] ? direct_splice_actor+0x190/0x190 [ 321.726806] __splice_from_pipe+0x348/0x780 [ 321.731128] ? direct_splice_actor+0x190/0x190 [ 321.735720] ? direct_splice_actor+0x190/0x190 [ 321.740408] splice_from_pipe+0xf0/0x150 [ 321.744473] ? splice_shrink_spd+0xb0/0xb0 [ 321.748717] generic_splice_sendpage+0x3c/0x50 [ 321.753295] ? splice_from_pipe+0x150/0x150 [ 321.757622] direct_splice_actor+0x123/0x190 [ 321.762026] splice_direct_to_actor+0x29e/0x7b0 [ 321.762040] ? generic_pipe_buf_nosteal+0x10/0x10 [ 321.762053] ? do_splice_to+0x170/0x170 [ 321.762066] ? rw_verify_area+0xea/0x2b0 [ 321.779553] do_splice_direct+0x18d/0x230 [ 321.783704] ? splice_direct_to_actor+0x7b0/0x7b0 [ 321.788555] ? rw_verify_area+0xea/0x2b0 [ 321.792618] do_sendfile+0x4db/0xbd0 [ 321.792640] ? do_compat_pwritev64+0x140/0x140 [ 321.792653] ? fput+0xd4/0x150 [ 321.807163] SyS_sendfile64+0x102/0x110 [ 321.807176] ? SyS_sendfile+0x130/0x130 [ 321.807187] ? do_syscall_64+0x53/0x640 [ 321.807199] ? SyS_sendfile+0x130/0x130 [ 321.807212] do_syscall_64+0x1e8/0x640 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x1, 0x8}, 'port1\x00', 0x4, 0x101400, 0x6, 0x3, 0x802, 0x1, 0x1ff, 0x0, 0x4, 0x3}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='psto\x05\x00\x00\x00l\x83\xd2\x01D\xa8\xe5\x1cA\x00\x00\x00\x00-\xc3e\x88\x00\xc6\x85=\xd6?\'\xff\x1e8#\x90S\xd7\xe6\xdch\x85[_\t\xb1', 0x404, 0x0) 17:00:02 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:02 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:02 executing program 5: iopl(0x401) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000000c0)=""/112) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xd01e) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 321.826950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.831805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.831815] RIP: 0033:0x459879 [ 321.831821] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.831833] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 321.831838] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 321.831843] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.831849] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 17:00:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 321.831854] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x149002) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=""/107, 0x6b) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:02 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c74696d656f75743d3078303030303030303066666530303030302c00cace8055c2806eab3a01d031dcf4ddcdfbd61d8dc58637376b1a7d7d4541d9813d9c7d9aa75f07daa6461f824532ce4b841bbe335381a0b97bbf92296802f0833837fa16834be44be8cf79ee31c9272061d477419ad30db55fdd66bea1e06e38c83fb183c64807903390997127a9748b4eeff297a98cc9fcea9dd36f93f99a3e00f482e4ccd9e0be7fb12b8ee99d61fadce72c8d"]) 17:00:02 executing program 2 (fault-call:4 fault-nth:30): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18}, 0x11) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x0) splice(r2, 0x0, r4, 0x0, 0x18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000001c0)={'ah\x00'}, &(0x7f00000003c0)=0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000000)=""/191, 0xbf, 0x35) bind$netlink(r5, &(0x7f00000000c0), 0xc) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000340)={0x77359400}, 0x10) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x2101070, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB=',allow_other,default_permissions,max_read=0xff,blksize=0x0000000000000400,default_permissions,allow_other,blksize=0x0000000000001a00,smackfsdef=GPL@keyring]*,fowner<', @ANYRESDEC=r9, @ANYBLOB=',dont_appraise,\x00']) fcntl$dupfd(r0, 0x0, r0) 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:02 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 322.172341] FAULT_INJECTION: forcing a failure. [ 322.172341] name failslab, interval 1, probability 0, space 0, times 0 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x202000, 0x0) [ 322.226469] CPU: 0 PID: 24712 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 322.233642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.242993] Call Trace: [ 322.243011] dump_stack+0x138/0x197 [ 322.243030] should_fail.cold+0x10f/0x159 [ 322.243046] should_failslab+0xdb/0x130 [ 322.243063] kmem_cache_alloc_node_trace+0x280/0x770 [ 322.249283] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 322.249305] __kmalloc_node_track_caller+0x3d/0x80 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 322.249318] __kmalloc_reserve.isra.0+0x40/0xe0 [ 322.277516] __alloc_skb+0xcf/0x500 [ 322.281152] ? skb_scrub_packet+0x4b0/0x4b0 [ 322.285484] alloc_skb_with_frags+0x86/0x4b0 [ 322.289904] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 322.294839] sock_alloc_send_pskb+0x5db/0x740 [ 322.299347] ? sock_wmalloc+0xf0/0xf0 [ 322.303152] ? _raw_spin_unlock+0x2d/0x50 [ 322.307306] unix_dgram_sendmsg+0x34c/0xf80 [ 322.311626] ? selinux_tun_dev_create+0xc0/0xc0 [ 322.316297] ? unix_stream_connect+0x11f0/0x11f0 [ 322.316315] ? security_socket_sendmsg+0x89/0xb0 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @loopback, 0x4e20, 0x4, 'nq\x00', 0x1c, 0x649, 0x8}, 0x2c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x1, 0x0, 0x3f, 0x0, 0xe}) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200000, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30) [ 322.325799] ? unix_stream_connect+0x11f0/0x11f0 [ 322.330555] sock_sendmsg+0xce/0x110 [ 322.334275] kernel_sendmsg+0x44/0x50 [ 322.338081] sock_no_sendpage+0x107/0x130 [ 322.342235] ? sock_kzfree_s+0x50/0x50 [ 322.346140] kernel_sendpage+0x92/0xf0 [ 322.350025] ? sock_kzfree_s+0x50/0x50 [ 322.353909] sock_sendpage+0x8b/0xc0 [ 322.357627] ? timespec_trunc+0xb5/0x120 [ 322.361695] ? kernel_sendpage+0xf0/0xf0 [ 322.365761] pipe_to_sendpage+0x242/0x340 [ 322.369915] ? direct_splice_actor+0x190/0x190 17:00:02 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VT_WAITACTIVE(r0, 0x5607) [ 322.374504] __splice_from_pipe+0x348/0x780 [ 322.378825] ? direct_splice_actor+0x190/0x190 [ 322.383049] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 322.383405] ? direct_splice_actor+0x190/0x190 [ 322.383416] splice_from_pipe+0xf0/0x150 [ 322.383428] ? splice_shrink_spd+0xb0/0xb0 [ 322.392749] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 322.394191] generic_splice_sendpage+0x3c/0x50 [ 322.394200] ? splice_from_pipe+0x150/0x150 [ 322.394212] direct_splice_actor+0x123/0x190 [ 322.394225] splice_direct_to_actor+0x29e/0x7b0 [ 322.394241] ? generic_pipe_buf_nosteal+0x10/0x10 [ 322.421742] ? do_splice_to+0x170/0x170 [ 322.421757] ? rw_verify_area+0xea/0x2b0 [ 322.421768] do_splice_direct+0x18d/0x230 [ 322.421779] ? splice_direct_to_actor+0x7b0/0x7b0 [ 322.421794] ? rw_verify_area+0xea/0x2b0 [ 322.421806] do_sendfile+0x4db/0xbd0 [ 322.431312] ? do_compat_pwritev64+0x140/0x140 [ 322.431329] ? fput+0xd4/0x150 [ 322.431341] SyS_sendfile64+0x102/0x110 [ 322.431351] ? SyS_sendfile+0x130/0x130 [ 322.431361] ? do_syscall_64+0x53/0x640 [ 322.431372] ? SyS_sendfile+0x130/0x130 [ 322.431384] do_syscall_64+0x1e8/0x640 [ 322.483629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.488481] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.493661] RIP: 0033:0x459879 [ 322.496851] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.504587] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 322.511856] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 322.519118] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.526386] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 322.533649] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:03 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) setns(r0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0x3be) 17:00:03 executing program 2 (fault-call:4 fault-nth:31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:03 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x280, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={r0, 0x10, &(0x7f0000001340)={&(0x7f0000000200)=""/58, 0x3a, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={r0, 0x10, &(0x7f00000013c0)={&(0x7f0000000340)=""/4096, 0x1000, r1}}, 0x10) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000001500)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x6c) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000002c0)={0x10, 0x1e, 0xfa00, {&(0x7f0000000240), 0x3, {0xa, 0xce25, 0xd5, @loopback, 0xa5d}, r2}}, 0xffffffffffffffab) 17:00:03 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0xc400) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x1, 0x8, 0x5}) 17:00:03 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1a080, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) socket$netlink(0x10, 0x3, 0x9) 17:00:03 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0xa0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x5000, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x100}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize'}}], [{@appraise_type='appraise_type=imasig'}, {@fsname={'fsname', 0x3d, '\\'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 322.693885] FAULT_INJECTION: forcing a failure. [ 322.693885] name failslab, interval 1, probability 0, space 0, times 0 17:00:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002b40)={0x2, 0x0, 0x15ce, {0x0, 0x4, 0x1}, [], "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", "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"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x401, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r3, 0x0, 0x7}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000400)) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x8, 0x6, 0x0, @time={0x0, 0x989680}, {}, {0x100000000, 0x271e}}], 0x30) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) bind$isdn(r2, &(0x7f0000000340)={0x22, 0xff39, 0x4, 0x1, 0x3}, 0x6) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000200)={[0x4, 0x5000, 0x0, 0x3000], 0x7fffffff, 0x0, 0x800}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x1}) [ 322.747278] CPU: 0 PID: 24755 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 322.754422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.763779] Call Trace: [ 322.766385] dump_stack+0x138/0x197 [ 322.770027] should_fail.cold+0x10f/0x159 [ 322.774192] should_failslab+0xdb/0x130 [ 322.778178] kmem_cache_alloc_node_trace+0x280/0x770 [ 322.783297] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 322.789047] __kmalloc_node_track_caller+0x3d/0x80 17:00:03 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={0xffffffffffffffff}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0/file0\x00', 0x0, 0x18}, 0x10) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.type\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x20000, 0x0) r6 = getpgrp(0x0) r7 = getuid() stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgid(r6) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="7a74246bad0b91b956d97ca8b4dec74516d2053685f90fbd71b8f45f64aa396ee68f4bc79d0ed6c173b866a69519238ef0f9a94df5f5b62226aa015e1ff7e1d52e156d0b7f3800371b63a24adea92c374fb8e8a7a9c1f556934d5b1cd2c3b44c1f1e3217ea9c66a5aad091b1daacc00b17313f56b3da76b16625c0422987a8", 0x7f}, {&(0x7f00000001c0)="a33c983d33aeda722630682fca65c2308f6655a50ff338781138d9b19320dba0fd9b6615b431610e2d8afc6a219ede0152ac87e8c410fc1125555a021cede3805bddc98df975a3e555527d852ca89f86d82c88d285a282e3d08960b9496bcd96f8cc5b1fec01947569d21a524023237d1727df465608970bdc26b5e6a62e34ed63dd98673d2cdcdb9834441a6ead9168b6d7d4059d155e59fb4e5916b73e219bc56634b681b23d0c5fb896fc1ad3c5dc231c0be1d9de3faa554581ab477453a682e38a6cc36687f68e52391436832a128d0d7ca3facff2af7c11f85b58e4bb87d72f345ae0f17bca3a5b", 0xea}, {&(0x7f0000000340)="35f6ad2c590f1e52dabc777997171c89fec8b3f0fd99b3c3c01d06e95f364cb664246e73d6d63b2fc3b3c777c1d4f26eeb0c8335b05510375ced0d783111eba730c8003bbd17552e2bfaa40849aa8ea25ba482ae52b952a46ce0d484b6fb11a9f2e9bdbca89ec5b469e93e090f154ae77175dfb933c91f480ddbea117a5219a41d47d2d2ac09e02f982b13a2e374bd7ec9cca9bd5768b0a4ba28c3baa4c9", 0x9e}, {&(0x7f0000000400)="0fef91799c5bda758aa415e0575fba8a0dabffe3f7c12eb5deaa423962e85ab3052be31d5032ae8f9393e62c7ceccbaefd70aa87c9b7ab0046c7943c83db029782db2fec7dde4837d5ccb1ce50ef94b0f84f7e3b190d5d51a96f5730f0c0a06fb7c0be5d28431751aa6f299f05ef3485c54274ca67e5e0c592221d0fb03aab79f87101e5f34fd5ea6a1e6408561821e57a9179f30fd6724a265611556a012abea3f52adf724a66cba9492a4af4c638c74efa1725597dfbd9fc8c56e2f66a99b98de4d8622d2f040b92a016ae3ea47517dc8cf954e5d1738edc106f713edfafaaa104450fd9d9138185ec23ea2ce63a7fbd456e38c2bd1190a7", 0xf9}], 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00}\a\x00'], 0x68, 0x20004004}, 0x40084) [ 322.793982] __kmalloc_reserve.isra.0+0x40/0xe0 [ 322.798656] __alloc_skb+0xcf/0x500 [ 322.802289] ? skb_scrub_packet+0x4b0/0x4b0 [ 322.806700] alloc_skb_with_frags+0x86/0x4b0 [ 322.811106] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 322.811121] sock_alloc_send_pskb+0x5db/0x740 [ 322.811141] ? sock_wmalloc+0xf0/0xf0 [ 322.824779] ? _raw_spin_unlock+0x2d/0x50 [ 322.828943] unix_dgram_sendmsg+0x34c/0xf80 [ 322.833268] ? selinux_tun_dev_create+0xc0/0xc0 [ 322.837956] ? unix_stream_connect+0x11f0/0x11f0 [ 322.842723] ? security_socket_sendmsg+0x89/0xb0 17:00:03 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = geteuid() mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}], [{@subj_user={'subj_user', 0x3d, 'port'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_gt={'fowner>', r0}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@obj_role={'obj_role', 0x3d, 'user{-#selinux\xa0bdevself-\x89%procmd5sum)wlan1ppp0['}}, {@measure='measure'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfsfloor={'smackfsfloor'}}, {@dont_measure='dont_measure'}]}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x802, 0x0) execveat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='mime_type\x00', &(0x7f0000000340)='trusteduser,\x90@\awlan0\\\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000600)=[&(0x7f0000000400)='timeout', &(0x7f0000000440)='\x00', &(0x7f0000000480)='mask', &(0x7f00000004c0)='em0\x00', &(0x7f0000000500)='fowner>', &(0x7f0000000540)='mime_typeppp0.', &(0x7f0000000580)='-vmnet1\x00', &(0x7f00000005c0)='127.0.0.1\x00'], 0x1000) [ 322.847483] ? unix_stream_connect+0x11f0/0x11f0 [ 322.852243] sock_sendmsg+0xce/0x110 [ 322.855968] kernel_sendmsg+0x44/0x50 [ 322.859772] sock_no_sendpage+0x107/0x130 [ 322.863934] ? sock_kzfree_s+0x50/0x50 [ 322.863946] ? find_held_lock+0x35/0x130 17:00:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10001, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x2000}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 322.863972] kernel_sendpage+0x92/0xf0 [ 322.863980] ? sock_kzfree_s+0x50/0x50 [ 322.863992] sock_sendpage+0x8b/0xc0 [ 322.864002] ? timespec_trunc+0xb5/0x120 [ 322.864012] ? kernel_sendpage+0xf0/0xf0 [ 322.864022] pipe_to_sendpage+0x242/0x340 [ 322.864033] ? direct_splice_actor+0x190/0x190 17:00:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:03 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101000) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000000c0)={[0x2, 0x4, 0x3000, 0x4], 0x11e2, 0x42, 0x4}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0xd38e, 0x0, 0x2}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080)) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:03 executing program 2 (fault-call:4 fault-nth:32): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:03 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0xfefd7e0ebb078c4e) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000100)='\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], 0x400) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, 0xbc74, 0x4, 0x40, &(0x7f0000ffc000/0x4000)=nil, 0x8}) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 322.864049] __splice_from_pipe+0x348/0x780 [ 322.864059] ? direct_splice_actor+0x190/0x190 [ 322.864074] ? direct_splice_actor+0x190/0x190 [ 322.864083] splice_from_pipe+0xf0/0x150 [ 322.864093] ? splice_shrink_spd+0xb0/0xb0 [ 322.864109] generic_splice_sendpage+0x3c/0x50 [ 322.864116] ? splice_from_pipe+0x150/0x150 [ 322.864127] direct_splice_actor+0x123/0x190 [ 322.864139] splice_direct_to_actor+0x29e/0x7b0 [ 322.864153] ? generic_pipe_buf_nosteal+0x10/0x10 [ 322.864166] ? do_splice_to+0x170/0x170 [ 322.864178] ? rw_verify_area+0xea/0x2b0 [ 322.864190] do_splice_direct+0x18d/0x230 [ 322.864200] ? splice_direct_to_actor+0x7b0/0x7b0 [ 322.864215] ? rw_verify_area+0xea/0x2b0 [ 322.864228] do_sendfile+0x4db/0xbd0 [ 322.864247] ? do_compat_pwritev64+0x140/0x140 [ 322.864261] ? fput+0xd4/0x150 [ 322.864274] SyS_sendfile64+0x102/0x110 [ 322.864285] ? SyS_sendfile+0x130/0x130 [ 322.864294] ? do_syscall_64+0x53/0x640 [ 322.864305] ? SyS_sendfile+0x130/0x130 [ 322.864316] do_syscall_64+0x1e8/0x640 [ 322.864324] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.864340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.864348] RIP: 0033:0x459879 [ 322.864354] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.864365] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 322.864371] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 322.864376] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.864382] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 322.864388] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r0, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x3, 0x1, 0xffffffff, 0x5fb}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000000), 0xc) 17:00:03 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x6108b62788351f11) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 323.199121] FAULT_INJECTION: forcing a failure. [ 323.199121] name failslab, interval 1, probability 0, space 0, times 0 [ 323.213767] CPU: 0 PID: 24801 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 323.220884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.230236] Call Trace: [ 323.232833] dump_stack+0x138/0x197 [ 323.236483] should_fail.cold+0x10f/0x159 [ 323.240654] should_failslab+0xdb/0x130 17:00:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x7ff, 0x8, 0x200, 'queue1\x00', 0x7}) [ 323.244652] kmem_cache_alloc_node_trace+0x280/0x770 [ 323.249764] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 323.255225] __kmalloc_node_track_caller+0x3d/0x80 [ 323.260166] __kmalloc_reserve.isra.0+0x40/0xe0 [ 323.264841] __alloc_skb+0xcf/0x500 [ 323.268474] ? skb_scrub_packet+0x4b0/0x4b0 [ 323.272807] alloc_skb_with_frags+0x86/0x4b0 [ 323.277239] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 323.282178] sock_alloc_send_pskb+0x5db/0x740 [ 323.286690] ? sock_wmalloc+0xf0/0xf0 [ 323.290509] ? _raw_spin_unlock+0x2d/0x50 [ 323.294665] unix_dgram_sendmsg+0x34c/0xf80 17:00:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x189000) syz_read_part_table(0x5, 0x2, &(0x7f0000000100)=[{&(0x7f0000000080)="034919a5850206a34c6fcc513e74d6518f6c0d00752aafb11a6031c75396d83433da4811d0880e140ec6952e58e29352980c8824934a77e377be8e0bf68dbf4c2db75561839cc8dac6", 0x49, 0x8000}, {&(0x7f0000000200)="dad6ca2fedf3d724643f573364e91cc287434c2e353e9bf808cd9b134815d627c76393ea4e06ea0c44292732d4b06e438cfcbedccba9697ea229c445a175b101b43988fd5c42efb6eeea34425485bef438a61e6f48965f9ef3cfab16e93d6b85b7f13ae6c816943e1a76ac1d6a5048d9f3641340097d885289a7831a9a0ccab55a42d98a7f5010f21981c123be4b0131fcb9db466713657734fee33b08b3248a", 0xa0, 0x4}]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)=0x0) syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x4, 0x400001) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000400)={[], 0x80000001, 0x29, 0x10000, 0x3abb, 0x1f, r2}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x2, 0x7ffe}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0xd6de}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r3, 0x9, 0x1, 0x3}, 0x10) [ 323.298992] ? selinux_tun_dev_create+0xc0/0xc0 [ 323.303672] ? unix_stream_connect+0x11f0/0x11f0 [ 323.308434] ? security_socket_sendmsg+0x89/0xb0 [ 323.313191] ? unix_stream_connect+0x11f0/0x11f0 [ 323.317950] sock_sendmsg+0xce/0x110 [ 323.321666] kernel_sendmsg+0x44/0x50 [ 323.325472] sock_no_sendpage+0x107/0x130 [ 323.329628] ? sock_kzfree_s+0x50/0x50 [ 323.333538] kernel_sendpage+0x92/0xf0 [ 323.337424] ? sock_kzfree_s+0x50/0x50 [ 323.341318] sock_sendpage+0x8b/0xc0 [ 323.345027] ? timespec_trunc+0xb5/0x120 17:00:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 323.349086] ? kernel_sendpage+0xf0/0xf0 [ 323.353141] pipe_to_sendpage+0x242/0x340 [ 323.357284] ? direct_splice_actor+0x190/0x190 [ 323.361864] __splice_from_pipe+0x348/0x780 [ 323.366184] ? direct_splice_actor+0x190/0x190 [ 323.370767] ? direct_splice_actor+0x190/0x190 [ 323.370779] splice_from_pipe+0xf0/0x150 [ 323.370792] ? splice_shrink_spd+0xb0/0xb0 [ 323.370813] generic_splice_sendpage+0x3c/0x50 [ 323.370821] ? splice_from_pipe+0x150/0x150 [ 323.370831] direct_splice_actor+0x123/0x190 [ 323.370843] splice_direct_to_actor+0x29e/0x7b0 [ 323.383687] ? generic_pipe_buf_nosteal+0x10/0x10 [ 323.383703] ? do_splice_to+0x170/0x170 [ 323.383713] ? rw_verify_area+0xea/0x2b0 [ 323.383725] do_splice_direct+0x18d/0x230 [ 323.383735] ? splice_direct_to_actor+0x7b0/0x7b0 [ 323.383750] ? rw_verify_area+0xea/0x2b0 [ 323.383762] do_sendfile+0x4db/0xbd0 [ 323.383779] ? do_compat_pwritev64+0x140/0x140 [ 323.383791] ? fput+0xd4/0x150 [ 323.383803] SyS_sendfile64+0x102/0x110 [ 323.383812] ? SyS_sendfile+0x130/0x130 [ 323.383824] ? do_syscall_64+0x53/0x640 [ 323.450867] ? SyS_sendfile+0x130/0x130 [ 323.454842] do_syscall_64+0x1e8/0x640 [ 323.458728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.463572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.468753] RIP: 0033:0x459879 [ 323.471935] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.479639] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 323.486900] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 17:00:03 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000440)=""/145, 0x91) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100)="c12ffea1ab2e99d4c9b7fee592ca378e94cd721aaa7f9d3a07d701b8af5ba4cb7d1b7d45ea81a76018ad443b382e2658c8ecf24881c3e70bb5afc9c744796706d23ca37593b6640b5c41e601aec718261a9597dd1bb3b2ca184d7ac0182e51ab796407ad97d9af3e0685b945f91d33525ce55c8f0f63c5068e826e4bc160c68c6638594aa48f37584d83dbfc0be8f26034aae5e194e2a80d274e29f269dd42752992119ebe0e0b041ae0d74cb1320219949caaafbe4d5dcc375cccfd26d8cc06e822700ae4a70a19c782f4dc4f8e70f1d1a2e8333b9651748e88b3287afaec76092d68f95917fe502c0331fe94e42428de2b9954aaf6", &(0x7f0000000340)=""/223}, 0x18) [ 323.494166] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 323.501429] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 323.508695] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:04 executing program 1: lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="00fbeb07ff4464adcbbc2dd6b49b1f1135008efd1dd4160280f902858ef1e90c35afa2482ef0f100df79720f97e499a275510414264fd9241436126a21bcffbbbc63ef0ddd4df57d3aca19a1a7ff893f9baa2987bc96c99cfa1baa011f6cd55f55a8e0dabefd86dc98e96d003972dae805c6c7b69797221926175f55242f3095c9294e5855a348aad118921d136f6d0266edde2099a05b04ecee9b7625c23a89e94435a5ac67cec16a0b70273756410be70524eb7abc8f32da5067d26a99ee8b2892c8c08db13d949b7643b903f45b4fd452d3aacf4719c171e844"], 0xeb, 0x2) mkdir(&(0x7f0000000200)='./file0\x00', 0x102) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80, 0x0) write$P9_RREAD(r0, &(0x7f0000000340)={0x25, 0x75, 0x2, {0x1a, "5b50fbef2ead2dfb13a7361edb6e9dd2ee9c83f27267eaf5ac8a"}}, 0x25) r1 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x6, 0x10000) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000280)={0x40000, 0x0, [0x9, 0xa652, 0x9, 0x7, 0x1, 0x7f, 0x400, 0xfffffffeffffffff]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)="858054fc14c13d1244b6c8b44076bf577280d41ae162ba3d707d1fb59693094a3acc35f8d9bfde2b13b89a6fd1e7489d14102f16f0f82ba116ef74e3cfde1f62836c54e1e687c76c277e9433f4a7b9cd1a7744d0c1a0c6d25e3e", 0x5a) 17:00:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x9, 0x7a120, 0x8001}) 17:00:04 executing program 2 (fault-call:4 fault-nth:33): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:04 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030306669653030300b5938ab88332c0600"/63]) 17:00:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x8000, 0x8, &(0x7f0000000640)=[{&(0x7f0000000080)="8c5da039c0f79a3430ad48f27c7892e155b2478c5cce6af27b06b506a4bf5356ca29604ddc381b1c914430e8744cfba07548d26582021e4efc153c50b47b1e8ee64b0fcd62f647a830e4ced259a0a07c2038f0317db64a1de265bb56ff60090d382390", 0x63, 0x7}, {&(0x7f0000000200)="ec92cde05482755dac9288e6ebf39fa1a4b15a3aca795926c514ae1fdaaaf1605f88778c7cdf9d2b20f1caa4f24a6ddc1ea2edad4100de0dcda3a3103bf56240cc32d09d2cb41978b52475223eda7eb5e1699508227a0ea54e9e727586a81090cf61fd2eda8ca1258525bda5fb1373798f6d946b9b8d27ab0623e6305dda34", 0x7f, 0x100000001}, {&(0x7f0000000100)="7a3016e0133ed00c063bd3236023a9e4aed28dbddaabd258be6159795e41705713fb7c9a821a8540a062743d9c502c57e443463814d106e17e", 0x39, 0x1}, {&(0x7f0000000280)="a1a54b507457c0c8043e50769a1ad29ffa643e2e56704ef8be687c50fb1fd1fc0d54ac726f5250108f91dfcfbc8e9bdcd8a683a6550aed41a437f8d67ae6cd418d94af0277ac2d0f5781b4d0d494fbb973", 0x51, 0x4}, {&(0x7f0000000300)="2ce8d7123f0de2365951ac7108f768c1b41e5b2563c2a9611238d43da491142b1622b132b637dd247825a7ac1b5ede55a4bec1f05422dd09c6f0dd69bfa10525a54f151b88cef3ebdc548c20ccc6bb14ba7adff80db8195fe81a1e000db128e47b30608c97420bc930a65301ae5e9a9ed92be93329414a0985a258de13f477e72b7981972ebb5a657c6a2301fd902b28f744a4d2c6e1dc30f933ca0cf304eb", 0x9f, 0x81}, {&(0x7f0000000400)="30d7d64dcfd3d1b864b72dc85182145a7e175fc21896b3370bbd96ec4b79427b389cba0d9a2e22433c65cc09ae9c5992f3a789dc20b745cd8921733481031af7aa4298ffac0a119100f88ec3ffdb33a979a9b04147a795a25c53222918a6f97dbc92f010ebbe624b1b4a77bd5d4fdb442da1f9dd55d7c9c261549a7c5e53f427185c56b7a35fe8138c1f30e95547d8bf4cd6b4542c08f0ab36f840374d00b465f0b2e37d0b63535f6070c96e414de3a20bb6fe7d812c4f33a137597c242eaae303db648bdc2b541692bd303f9964e5afda6b9bb6417b906b3c05df02acde65c02bc47cd794f55e0cef4ef3903d7d59cddb03123391", 0xf5, 0x1ff9aa5b}, {&(0x7f0000000500)="d6f5463e8682727f44553b0733673a7e268db20ae56b94909df6531001ccb32a3a92562fcf1ed2875b6be040d1f94bd03813478c66588f7bbc9ba63c61c297d52c76c10e1dc119b90a25729f8c6646612fbf139ee02bf31619fb5497b3b32dd54ec4f92498076f99e0adcabc43ea45f3e2fac046803ab721b3979b72dc2e4be899d914692fa6e759544124560af92fcccd9c03abc190a08d4b", 0x99, 0x8}, {&(0x7f00000005c0)="53fbd92c005918482deac914cb49ba270604896690a1027f483782087c24843cf3b7280774eaee0351fd5cbd3ecd8fbc1cd819091df0576a3943efe77677895ed48218b61420d03529fdf6332489e82cb0092d3b79991a035b04697b5f306836216724dffa4c", 0x66, 0x6}], 0x200000, &(0x7f0000000900)={[{@fat=@umask={'umask', 0x3d, 0x83}}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}], [{@uid_lt={'uid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r2}}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) prctl$PR_GET_DUMPABLE(0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x80800) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$sndmidi(&(0x7f0000002f80)='/dev/snd/midiC#D#\x00', 0x9, 0x400) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002fc0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000003000)='/dev/userio\x00', 0x800, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003040)='/dev/vhost-vsock\x00', 0x2, 0x0) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003380)={{{@in=@dev, @in=@dev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000003480)=0xe8) getgid() openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000034c0)='/dev/dlm-monitor\x00', 0x200, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003500)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000003540)='/dev/input/mice\x00', 0x0, 0x101000) getpgid(0x0) getuid() lstat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)) getpgrp(0xffffffffffffffff) getgroups(0x3, &(0x7f0000003780)=[0xee00, 0xee01, 0xee01]) getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000037c0)={{{@in6=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f00000038c0)=0xe8) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) lstat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)) socket$inet(0x2, 0x6, 0xfffffffffffffff8) accept4$inet6(0xffffffffffffffff, &(0x7f00000039c0), &(0x7f0000003a00)=0x1c, 0x80000) 17:00:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000480)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003e40)=0x0) r7 = getuid() r8 = getegid() r9 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003e80)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000003f80)=0xe8) lstat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004080)={{{@in6=@ipv4={[], [], @local}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004180)=0xe8) fstat(r0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000004240)=0x0) lstat(&(0x7f0000004280)='./file0\x00', &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000004400)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004440)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004540)=0xe8) r20 = getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000004580)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000045c0)={0x0, 0x0}, &(0x7f0000004600)=0xc) lstat(&(0x7f0000004640)='.\x00', &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004740)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000004700)='\\\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f0000004780)=0x0, &(0x7f00000047c0), &(0x7f0000004800)) lstat(&(0x7f0000004840)='./file0\x00', &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = fcntl$getown(r1, 0x9) stat(&(0x7f0000004900)='./file0\x00', &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004c00)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)="7d758b732b8b3a44717d4ee799a5ca55e50d3894a04ae75ff71889177bf886", 0x1f}, {&(0x7f0000000180)="4203cb76ff325a7e2fd31dd3b0e73ae01f47d9f54d2a7c3148aa975de4ee949b726ca120e5c71d73e6dce17ec3a1ffaf64abf0d9f6b7c286207df5834cdcef065bd462507fdb72ab4fe153e827a3ed04e10cbba9bdad5d33d9cfc4bb8c5634b83ebbd4f06ecca7276233fd7adab37a22280c8b5c2ee45448e2587cfd6a2efbf56b3f3d3a79e3b08e7b363465bf78f8f3849b247be4837f6fc21ade92f2a644fbfb96a5d517afa8162dd6e0f0feda39166b1417ffbfc4", 0xb6}, {&(0x7f00000000c0)="9de3858bc3c00ff708476ff87d754cb6ea846a2e03225ca295f8093363de4e99fbce12b39a4d35b4fa5a9d6e0089a858d003085a0e7bbd25c4a4f7d71a0b4a1c5022d9dc6351c192915d7c5a3d5a08eb0d95c3eedd93960db2842456a651645a1e8e", 0x62}], 0x3, 0x0, 0x0, 0xd239398f61a33733}, {&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000300)="337677573c3aba3b5e61cbfa51a3cfd5816d37fc3eef16050ace0fe4b868c77f83e6a97e90d50e44bb090edf5d7590e65f96e8025c94f1aa68a60b76880d3942fe86484ea647ebf327af0d2acbbde4f4d4a4cbb3384573413b582998dd0cec8d80967d07b4ae3fa6e0830131c7965af1a4f1ec916b5956f9652e71a815ffb4ac5495ad8678ee9b7fe57e2cabbbc4b67decf22db45f0a1949f16c5eb2a4c29e0877d8ab48bd2e50f0f521d1cbe7", 0xad}, {&(0x7f00000003c0)="9f7b582c8b137e9eaa8391d48ef0dfae05d024cc41e50c1499d86fc0fb34fb256a31089382173a9d779efe36a9a1488bd055c68505352858d24cbcce3589c13bd1e134301f31c4f6cec266905403af0164f0982ec591e8d8abca0b393253abe838a7a2039180ab378a46fb70c5a789dd0e150e81", 0x74}], 0x2, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r2, r1, r1, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}], 0x98, 0x8000}, {&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000000840)="b0ad954e18b78ad234f22c356b336deb10699df54496c2e2187ba7856e3fd8a5f97d89e2435e622c49e95b1cd3be9473b616e6c2a1dfde6b2c55368b5f1c60f83ba0d3110e92ed60c56124c73535daa99b76fae3f18e224170b860bfd66d12917e48085246885300158283c26d615882d89d357e82aa740fbdd126fd39ab1dde67d93d64820f1290ca917843ee50e5b65e4b369cc51a90307bcd149341ce680dfd4b99dbac8cf653da68d44d28f94a709f728adc21f9ee1a9cb70cf649e1948b740bd676231393e8921c9e7405153f24b2e8", 0xd2}, {&(0x7f0000000940)="16b8d4df387296ce24d54b2cc264a3eea9c3c0a5fee22fbe423d02907cd394c0f512c9719d0715ac397fda92d289a296d4ddf504a1345fe851e3f5bbb3092a40c31f30deab7b3a6ead31f3335e10e4e037bd71ef4347656a63137c71acb5ce56859abb55e2c66809613e2bf0bdca950248bf616d5d1dcde651c051e4cc", 0x7d}, {&(0x7f00000009c0)="07f81cd26d76247be1896f5722eee97f7173a06e1c732475535a04be33a8136c907abf5ec827466176d8302e215b64ce72a095e088b94a69ad4b9937936450e221ba96229f1f68229c56b5da2b8d1ca8dab468a03cc9498f66389a1690ceb1164904945211127595b3c9a0362578bf047acb3bd66aed96b884b275bfa52a083b1ae1564f2371a124067930bde0adb18155c283e0196ac542b65d7ded2f53e44f253409bb16c38ab89c515210125f717aef843312790954122afc068db24f4bd224496b1ce5317a1059568a659a02903a63b5336f4707f3dc43619c1b9b927e493f10c2027b32b421febc92111657a5d551e7530901c78064fd4a9224be455ab7ed3e803857b58851452471ff7a1b24e4f2da2c0ffea3e257e9cc99d8f517327f41538b1c16a1e1644ef953824716ec72cebcc3a8bae5fa05f6ea8e4614e3fc43adddcceb17141866c9a5863a0ba573e3d0817ff74766559dfd46f12bd50f7eaacb1b252000fb9fb7a1f7b7e31fe3153a694a1917d6d480d7ee36a23d6ca3fb6a7889880dfc682642d5631a4ffc09ad184daaace7c76760f209bcd87cf37c73cc11863d51f5acab93aac45ac9870b007045790f719063ec84020cf1c59aee816b680920eb1f705236a6b571116429735e650cdb88ba5a368f507e087285337fa7f338956be1ded517b28f8d5e7f3f80280c00b6c0e5aaf0f75f014d0ee4aa189ae71a58f1101774bae3d7dc65ad61db2f94e242226cb79ed9343be02409a45be70423b8d88b38118f88dd00f7e9daf86a3db343cf647b0c4577ca6a0038156c720c8a11a66f23ee5b4321db4c10aae645020f4b2a08e4fa69261b8a5345380d7bdbec53ed6e6be236276c9d1419be8eef1d6c8941942571f312a6b6ea8c3250a5b429a8e23e1d35f6af1f64c399d0726e0a0d6a11c646d1d48d6f9baeb44debced2e3cc4b07308afd48bf9704090f254d807a26791a3f3b11cc44daeb9738214975dacb208406f99f4ea342163e59f3fb36a4df8bd8b628d7e91c74163b6c648d40bc5bfffa5c7f3d09803be82037b4d56a7719aed5a6208b742f7cbdb2648ea55c16bbcc8470638d48b1115f6e5624071e1b2dd2fa65299eb6e9658eb5f933007800fe2853e6c7f72fbfa07a279adfbf9d379200df7e1555f124f89b896723387bffb5be01189d0a010adb8057ddebbe595f93136def88eca5d64699916b61d3838348a2df9035408e981b046e6a1dff5608fc529050c2cb03c145932c4c3dcf43a989a0e37689bfec6528fd0078a41f6178d263c739222ce13e6579a79514204cd7f88226dead9b7914a9a6532730bb4f52db13b15cce87433aea6d1388baf169a69b2675baf6dd098428facead728b948ef1a1f404dde7d5f0e1aeba39c36b85bfb1dcf3fff8fe3a036b711fe885b238eda323665a4f89fae2fd2f659403c65ba7c80f5b813acb50cff804c8b2d5d41e6b884c3070f466993a77ab4ef0c18d113f064d434c9cd05328fbc9b82858990d5489b9838a761775383126aea742d3f833a373deb595c7e47f8378db098f303831c09b69f210fc0b4e19c02b7078d3d8b251a42ae2aa6bc4823bf4fb6d9af6b6c6a5b4597e696a7b6ebc24a9ca5221220fe1878ba2e04ba803b82f6d24b67a838678ed1befbb018a576660136debb1a9731e4187b595654ebc8a76238ddb162f970101672148d4b70367efdf60a30ca8a3404a7f9493f6f4e14e042ca178d85df3e82f4be6ae0884bf6eb42c1f5227b53c7030be2afb8d063ab47a7f2ca7ce79f0d17822c5d3866ed5b11fbe0bb758960438ab54f058974892e6063f8be284408121e34e979206102aba903ceafc4aaeea8c0c5229104209dc50b50541ecf832f0cbdf036c2385ecc83e37361cb698556953831503c88098b121525d637cac4a12e1791aff400af7613c35dc6aafec47f4fd440bcc7f59ae1dae88164f7797ee06854b0a548061552911f0ed2f6e12f7b5eef99b207699291ce8e4be8889f059b50fc005a0f8d16fa19f4296915d317a38447a06b8fabd0c65d8be3efe2b44113d878c310fa23b3c94561ce185615e9a7739e1929c61d66cd208d55afc60fa14a4f6d09a416096b73a757a506971bb81e693cca5d5a69b6eacbd6f2dd13eb49f87a03869e156dccb6cb35b10934df3a57272f756cf614d9a177c0547efc607aa7118ea0722789bd232fff98ffa7d4b2adba8969e44749c8a3824893daf7690d9a08c80103011e632ea8b0beec9ac71b8e3cdbfdefc6b5e8958395e1fbbceee86f98cbade648cc26395e187e66129d85312213cfa54ca90d9f06505e7b13ece58cf412eb5ff32189325c9fc78d8dd88d6f553c897a624d48951f3c91945c87b66806e72841238ebd15b42978b005b8223fd28ee759b68dd50f3197a4c26c296633ad3ad6c16b4060b2526032eb6d204f662e1b16edc7b66bd7888518a7c7c1824402c925ffc07dc4429f6b19fac1e8309f52b81737b8c099a6f69e29f07e4f442fad4afbb61d630f2d50dd0dd1883e728bdc928eeff47a59856e3d7e9ebaa7c8ba673d9189fa4185002075b65ebfb6eaaeabc977f9a186c7d20372b9b07d2db3f130bf37d4c4df85bf9ec51a890d62bcd4ad04bab0bbd1821e7650a3896972661895bef84b182d9333b77f869d71364f2bea4e0aa36fcd455499c2012c9e56a5a75f56fd38d5adabb9480a2f0e3fbecb8e4db9357c6413bf5e4dace3d65d00f79a2d45635bb2c119dc88829e5cfde1ee4b90484754c92d09df3ada0fa08aca594047642edb6a5603e8d28f5e4fc13098b607fdf7aec6f6223b9ad3c53a64dc00a7cadec06ef3dd190cf687580f98e73cd1339c8b3d59530f92d0db53a299c773819b631226b4dfcaa39b2ff73fd395f2d8775da67b61ee296cb934bcf085c9424af4afb38903a8339ee73c55d4b4944f4c48705767a7610eb59d76158c5e51013a1bb57d9df31cfa6f29b88950cc354c1d2dfb1c923e7bca519691923e64576b26e823a2c01e78984d443759e858a3c98d481b2bfe5fe1df1b040bfe830debed60ba9ab0323d2ce0754432b1b8f151046020b94b44829e512e01dbe526673d58c4565ebc369ad742680efc997ead788f34661b352a019b569d726a8e4b4bd64177174e2e9010ff5667e7a940124e000b8b6417097b7477f50a4930fa722ca6bd8cc8f35deac050388ecb52615302f24b65d4445922bc3c622839882bb4974f4f33c85bddaebc1678b3bc599b696acbf7461072ccc8b489defc4b4ff2635939c990135e2f01cbd2a08bccec202a10d53f60661b8d7b3f6f7fbc13ffd41d9646e852157e7017d57ba3ae20b770e7649ee063e232fd266e8cb3f0fd53b8f7a01054f96829b129f53da91b3e94631a6cd6d337c96703973a67fdf68ac2c60480215e30cad9a5263fe4f1ff80ba5aae49f88a992a328461c8f4fef3e80de32ed6a542352f689e0024185deff32c54f2992401f5d9010f78181ce5b8b8a27602e1039124f36e565d57a4df0e1cf907ff819b023bc521e18e6d6643f029f8c5de68e3a75ae2615fdf2920313d14683f3a30f834fb35fe6fb20e8fae763bbf38be53fa8c68bb47900be3c608eaaac7e51996758aef7c1fa0a6dbc5e5a39dbbfa1623c40c4eba4f5e272ec872b18ba99fb393e1ffd19e0afce607fe0e4b6f921684f6217cfa4f268a7148586c76437c0f6cf4c3281bfe90bbc97ae50e8479745a1aaed8108bd70469a1f639305f20f4838c8d92e8cc470e9523182eaa525ffb94f8e3bf21d7d77ce0073f6e06e532d0978aa8df6da6a112314c874e9a9f75a646b8ff4b22a64e97c0778ec36428bc616ebf5412c270303bfacc8bee69e471855ac959f45aea197bc12de0a06a39e0128acea6ba80d9302f6cb64f26bfd30a1b7c15db6efbbcc685542ebb4ddb9832dba1c73f6d53d8142da5d27d7a5e3309099ea66789cc8b49f234fa8950f7ad72c53dd636e32ef273e071a1974a637b55391320ffd7fca22daabfc196322dcd5cddde48263f4f7055c3bac2af23c2bbe2761bcc5a517eb8c4ebf5cd36307cd99dd0e529774187514e985936bdaa80a5fe6f2096bc4406f077dc4f67eff3a8cade14ddb4d6a62e20fe93cd2e3bd5357baf1367ecc64732fc2a661060f5b8aa674e7015a5ce131f87f364f82f76bf2a2ae516ee3dd191218325213a16c83aecbb46f68dab47efbf14d94bbe3f0442c4617c65691ecfb90c3a99e165f00a3509a888e4afb7a03d3c14511d030b95eea6e4fcb6271ae004eb4ba2d545acab4126409d64b9c61e65f815ef4ae72d13ba41c396160a787c71a27340a23dd9eacb6a415f6dfc27ca797f958c596a5d076f09b05ff8d82ed9c8082260da4dc946764880746d2894bbf213b1c41f391d27da2257c622bc473bcd8a31d1a5a2d3f2d050e72411a04cb48f5cb4b724adf44ce4b6a898d69f492403aa4298eea44d0cc6952b6de388c70c4733830028731b3dc5a73676d82b0178e2e4e8604ccafbe6be86b1154ed70bdeb628d0f7175c286f03f40a0965051bd73b1d6ebe7de63077e3256da6e473e300f9ad2023d0fab4fbc6cf663f91013c73686b861942edb46834a1e5660ff1f6a1a88553393f047e1eb49759941ddd8376c2051391412442799cc3d9b59440dfea5dbb9c6de421dceb35d0abf6d41db901310c46bdbfc275e087d2fe3504d56e9b4ef1d2bf3b7eb9b854bfebd6ba27461c156399015d775afd71a8f9c2eac78ed96a914841cd908cf00649429bf082f403b7aeda37183de46b0362553367e9ebb48fa5ae5f8788105e411369e0b2b817c6810aa6a6fc2f37454482397dc6acc62c53062e330a804b877041fa548114789ef8e9612dbfea095d6b92f41455104140c8534aac2b1f6a1fb96a7937310b316d4d7eedccfcd49258ebed91daee8e8c5d5e8c6c0717a4a3eaf88923dcc77b302717ea14fc6348daa8a4819d8b1d55e7d2a1896a29e66129899da04108ddecb84de4a4afb959a00a36b91bd5c9a9c39ba6865a087889609b0193b7a8e0a3c212611be0d0bda7faea07d7f11792747f65a8c055e5926bfec6b8a4e95f53ae13952797799bc4152b88eeb20d48c08671c7834829c4a614590d39a45695bff9f5b793c4b6441d876a3bce2656e6b755b6915a0bdd9e252e35519eacd7087b3dd0666d5702e6508d5172ebb88262d7ecda7291461696f0114936a65ef4e22245e5868e347566f870d3d6b1dff0b6578d25d06ab2baad7056dd11e37fc35916d09c4c1ecafa24e04f0f124a70909e8ad77dcfb0ba0236126ae121771f9476687a27b2800791254aab54b16a8023f707558e77776a9afa3d6f8e86a04feb0865a61ececac789f9b6e4e247d8105ec58fefd9cb7e66c5abb715720f0e3ac3154adeb59ad6c3f508766eb9d88e37015e8d6486d31c0e3c04b1b86cf6a0c74e30b8a3b0f2ce14567f287020570b5a9a5f6f5594c54daceab2dad8934a3d761b9156ae09e899885bbb05da66d2aa0d8e1c39f0c9e0054f5124283f5455719ec25dcad51ec7c266528b5df79425e961ab0c1d40ac7ba56f39b221cf4719c7aba4692d0f32f69804df17e4776c46a84f58c7cce9d4cef12f7cb73488fdd3ed0b229cb6da713988198ce1c5be4b382545d4f6b100cc40dbc47949ac686f5d535dea815142ff4440cb60a922319236660949023d153054059625c43fdaf6ec21ac7a88881bde2d7060cbc8aa2778dbe23343ff5d85f75f871e022614d65f0201428985f69b113708fd4482989ba7daeaebccae03d95b12f9632", 0x1000}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="768418e1a47bf54940dc8d0ca9199f798109a91f7ef86a567d96ae2aebf2fd02988390e0f424a9a1122efeea7f6520206af7fbe4f58c16a22933a403e0748a266dcfe7fc3cc0413c536d05fa6a386253821a3d39f748f130cb224d4f2825477dc2b1fd84ddab7386e6456a77e8856db434b532b97221595b1d4fd697035b2238997b3210b5ef15ea165d8588d31cc7ae736669904ab4217429752296b16c2537a8a20d77c671b08e370a659cc7ad8c21c5c8b44851bd43e7f6ef44c40d24e957ca40701954fc1e5bc1e5465dfa703781f1a308739cd05460161554187cc4cb8f9157d3d7b8b85283f8decb73df3efd1f12edcc9a75090cc8f51412fc758751f49d5d9b8f9acc900bec0d457f64f038345852d86412ddae0de1bcc78f34edd5dde0b2d94e3b36d02199b9744830e51699e477f5786e2493360cef1fdb726449b85ae0b8f27012952d71efad751448f63ab33ac048b5d05deefd0e0b4b32234da28ed52d9e8b7bb0c66940cfbb7cbf59586e501c0134b8482a9796bc8adf322ded2bb4e41a20ab39876ac21b3e8f0a9c8f750992ada716e49928e93ea3b3f0f511245b2f2a47fc01d8d55ee2ab496f3190804a4894fed633e14db79b53bf763f34488cc6c6c428af858a106eae12fa58172c9070bd97058492ccd9e872efc736b1a746de241f3956a8adb6d0777db5c625ef9df3accf2af28e0ff605dcb83c6cf32283ca40c3723855cce218c279e1e3ac34da5b95aafdb70814274d95f2d958578d77cdec6995ccea578377a8f3fae74b45c1f97eab1e122d8eb5e1e135d375d8c1e5e873a0e8074a66a6c956627e36b231d91fa475fbe132243a4ea7732b416dbfcc1b65c3aa199dca8b1bb565d19dcfac37f5ac96f6d22d5c186abbae7ac2f2dbff301026de595b5996813cf0ff5297e42799daa6374d62ba0fc5fbb31a310a5e5d06ce6ee85238062de4a9dc1544782c62952772392dcdfa23ad0bd091edf3417ecf2640725d1a26b72e84d82d2a74ea7b4638e81d83cdd460a872093533f1925fa025adacf09bf05262bb8fb776aa1811d628d941ad7f1dcf4d82e3a2ec6fc8fd15b91e7fb929987492cc8a455e32bbd7cb1cfd075a2f4410a726e76338adeca4f4b091c95979ee5b8547062a5a49fa96eb69bdbef5e300ac9cf36cbf8a78a31899b236fea20b0c5a28c01f33f387c58d7f5e7dadb1fc5e78a23fddb472d40fcd68b9700607cd4069b9b298ab5f9abf98312d4371b8fb59921b4fa23aaf7e82868630e267176be6d0619ba0c413a66ad1779e35b914654a7972f4a139b7ad789d1909ed3b64bf516885d944a955e5441fa5bb9fcbd75046127816cc29b8d24d5a0120a32200960ecadf2aca2ae95b435d8003de889df5b1e2420db6061b5628cf9567e421a4ee8fef9f387ca6c4a9fb250d473b914518842ff615ac84c99b05483b1e25da1983de007a97f114336dba11911390516106e034c85243ca79a7bf829e8f44ad8ce540b3bfba213f7a643e5c628bb5155b2652d6ce740f3cdb0290d9bb0ba21366a39ad12319a833e4791696c468dd298db2011136e1fd8c26150b8fcd43d0b5027ddf773b1c20c060a7ae6a6213b7280f1cf48dffac8bf002ed118c849ac2105b107fd13a0f4a8a85f4407c04314ff595a520c7b2976e159cd58c524418873c037b0c14cfd472d7ebe88697418f05ce6e88f99f10f804851714b25f856966b868a2db62c7dee86af9650a42079716754f5daf78858da48d1cc55a736ea6e138e4f68b321e320c099eff7dc1aa3b9e31835ffe54eb5252aeb0230702f37b308ec94c4568d8d22bf0fdf5fd9a6fad5852a813a68c0b4b28df0874eb8937d186ed6b87be0eb9a17f6d3e642205bb86adc77a6146e825c8ef54310dc4de820f38a5b04c78b4925d2c86e7f4136702944c50938473e75306bb95a2ad762b50e2e89653262693ddc1265bbfe2edd7abcb4a2be5468e879d227f586e4d4ca31af3dc10a1fe7879d505d6e63afd83fcf64259b8f35bbd1bc5a7ced403290cd92f3b30f200a1ff4987d2ca619d61620bb0c2c5393962f4ae53ac89e5abfbb5ef50b1950d9caef1b352a9a3631fd6ace38dc8da1fb4c234f6b26a1897e87ceb9073eaff2ee1352e11132552b8338696d212a35ff69e2f6ffd26bf6bc4b6169c97ca987702f1d4c7832d2ffca893f442adbd934607de105ebe7fa5fce4c34a50febb13d059e9b6dd85b6d675123a4bd26b8d155a23e31d6a011c6fa79ac46634b76c9fa751b60950e520a16eb4fe2c32d126bda07dbd357c6eca3fe2f522ed3c4f85276f65d47185ed7e451bee035cbe073fe034499d335aeee6218ba0027e648c66f078d71025fa4d41bf61f9bdacaaae2fd0093836f4d546eee542b2e9cbd63f079955c05c8d2de0356edab34d19bfd0410c64bda401b2362a845ef177a8f1304e8177c8b619da2fca746dea8d5a65180208d9a529903bf05fdd9aa6503063317e50d8363034946f05fcf59e8b28f8f0c2c3df94d301fde0a8823bef8dc0d9dbea9ae06372aa433ed2999757ad3dadde27d066e58bea74d77b32b514bc4654c816244cafa9b972269c670ff549cd8d5796d2881fb6992f63135a6392d795bf41116f4d3e196e4f89332979459a4227def30ad12ab1b45e3c3873501fd7052f264c574b6aca039e5540f52fdfea2088acfdde7a17797afd9039a6242363eee6f5d9c5cea0d15c421490668eca0425831f1214b8f338560d1f1631149207818b2cbe6775ba85afa967a41a6b29a6fd32d9d353e9e844cf7480e7f1047d60c4450fb32aa3b7e4cb9590f850e01ed3657f9dfc99ac5d0f45a077514accdb37dafe800cde187ba3a10a10f635c4d4a3d42d5a74d709cc92ed4f5916d4d0f8c89701272bf2b6df35d34a85b272e4d851f0cb8a9eb0d319c5665897eb5b7f4352622cfe8fbcdd03947c9dc6801f95d4eb6929e191f1440071deb02490b5fef772355d014195006955e5aa4389651297196e67d2e57165ec6d886c76499fed305b37d9f2766a0dc2ff78378c6b351be4131ab2edb9935e2a7a28c11dfa3cdaf32a3b1f43c0cd3764ce5700b366afb85e6f365a730b33e8b2bd3b5d5e843701533039dcf0bfba666efd883b2ec185e512bf3a53b1ea5ee533f0011d74a6860f8d17e34cb80142b8bd5acabdf2c503e007d91ecc85f0e87341eb3fba7bb183f1e39c38f1e68d7470bd820993e237b3438a88e1892d5015174f7078e8f8f538e7ada07a1334f3c9976559bfce85c8f0871e128768433490b05ae0e80a750a11645b8142211a0c16798a32a096230b58460c9eb87a2e0669620794cf6dfda41ac5e6054f9ba7316a287435054db621855489206a2520c5202ad46b52c552c5c454a057f34a526dc5d4d796b1c63e0fe1f69a6d081500c3dd5098ac7350b3be2049d82a68e2c911064208e3ed4e5e84093223c0b792b51648ededfdfeba140dca4190f42f776ce3597202200dc59188fd7d9b955817cffb90e517235bc474a111a4bd18ee619f0836c8af368e565e6ad666faae9f904a967b5a3238575af699e92643f6c014a54bbf89459e2e534ae1404ef608205804fa4568a8139028a9134b464b0c140e4794c6d09cfe1ae08c1361628daad253e788dcb2dc34cd3fb576cc6de7e257971c6dd8489526767902c6ea2f38c101e01db3b97388d0d317e86dd8347ee69c38870d1ee405a89ee0643268ef68bb32a9107e3a36ba62845f648af17e1c21229250137bff60a7b6d778c5aa9da590237de80341df9a3eef48b19a8e2549fd9906a5bda0e0e4154a3ad1d253f53442534973ba5607b4e69412df138301a4581eb9d34b16b242d2a841437920615bfe5c025cdd4845df8a8c830e30762dd8d36e4b8d3a0852e4905ae730a9bdf5b8d7cbdb1b33676043d7f8ab509b44c99035cde25017cde02989390bc1a65248967950341fd834714680fb8dd782e2937e2fe41017be60b465314fbeea2ef95d05855fc5f8a679fac09e1c8e861323ef7971f78a5429409a0ca6f2c005b956d44706aedd8804e11933d4e0f22a86b7cdcc70b3e76d922476f59163b54e9bb163bd5f6fca899c256e547d9197d59c1a168fe3ce679cd916a08f7a300a2755110f90a48a65c7e1c3d5e048b22ce18929061fe8b13d89fe7ccc123ad413540ae09bc30178c80d0e1fa874b48347deec973afb83defb7bdde2ca3cba344a3365680d220f7d3e7ef376ea1e9598fa0708cec0b94e49af6f21b220db9151cb93ef27109be1e86f0f6b8ba1ff58e00ea651f2951f20ba94ed21756f43302657305acd678948c883f89804bbdd27434d198ce8e33cc6f1bd17794a369254468c15d4ff7e28d746b40ba8a378d7c1f6c45ffbd2b676f4e6ffce2e6f29314ef47bf85d791d9d18014120d08473d26401e95aeee09aca071a5328488d26b761272ad36bd4add5ecc9b7e2b3facc8a85ba0dc99ae1fd6fd16eb75e4f6dc16d6e5d1daa37fea8c16237b6ef798cf2d45dbae680f4c3f9f1e83ba6d39f2958fc56c1b5f2ccb961c720c8cff14271049ce552bc802d3e5e826039ffd52bf225501394e77a47dc00f52e2cee7ab6149d2cc11998d524e3842f44a2ce51f9f3d692d46c11c0b2a67451dccb31b2b1014d5fcbda03652215700e34e88d2db04c6fb64a92b2e0fa4727d8736a2e4f43282956d842066bb35c72c0a8019bce0f4b478e856987c739ed43e298c84d9a60be2ac01fd754bd8b02d7519723d4ef14fb880832a9276d1cf18b8e41cf0232368eb20029fa45163d2609536afb5159eeb0adfc0b6fc38fad3676141b3b3a2c5cbad4a7b3eefeacb6fe53ddbafce17643675ffed944a43cc2f7e683ce96665dd8492d5f89fde431ce267819b8ec8cdf30139998c61ebf9fd6c80affa0c5c4abb5b85d2ddc48ec3ca99985d27a08366115b96796009aa1583290fbbef12ac39cfa9a47a3e2ab6a83945d6be3c496c9c89056a3175dcb41ede6347428b9aa69af15cfd41f44004e9aeab8c65c031a55302f7d138833de2f0d46bdd87186fcf59c4d58c0233a91709e773442abb66ee50c310e64e48b22756cd3c17e813ee67f8f45f969dc2780719095faa7912b48386f4d809abc12eb6b44e49c9db93a07323f7ab5fae0e8404f7860b210ab48d5bc23a8a6d2e327812aa0e3a4b0511bedf3ea5da98ed54059884f7790733c05d853b377924d28ed4004d3ac35272b236f08891abb3f20f49da3a00f796dda6ace6595cc017b7c5404f641aaebc4901bfa0d5c64a3e5fe9aaf78ad7f71921219f3ee0d39db70bf54071c5811576f719b32ebe95be243ed510d643b392fffcc2ca9891209bc07b601ff56a1823c1ecd1b7a854355822a01d1434b35b0df265c645f7d08d86ecb2ae0faf31a544b7fe725d20c98a23419f8daf05f5c4ca53f39ab86d2218f72a9d4b8210bb77a782971d8a5e89b20cf3a25fd23f89a5057f0c3230c3779831b8c3e49384123360a4b835d5dfae9709ae0659615508e5a55aad2a2c834e28bea6c44729a2049bf888b84157724004bd2fdab262decdefd55655853b7bc0236a538143fc720c23dba720c055373b372a2536c0042fd8fd58387bf4ff85e1c84a3c371c91b0bc0919a07afaa6c009c247f02a476991a3368b43f2e8b6c53fc0d11a0f16d5d3f25e4f685ae4e54204ac70e8223ae52b4d35665342a6d7da92f50bae01d31f549263320b2ce639306625c371c90b4e53024c8fa56d7baa75ab656ee1bf11f91e222fdbbdec622280b32c1369ba873cd369cb4d91efaef5b", 0x1000}, {&(0x7f00000039c0)="09cb19937c4891ec476331636e22cdbbd7158b7f22a5a015e65bee07a16d79f1c4e697f03f11decec47fa96d8dbb4c48573ad13f98d32bdbfc664e9eb28e2a6683221443c523974b32c731cf9764813a4c0e", 0x52}, {&(0x7f0000003a40)="39987d023342f3fb83560eb0b688ce9c9abfa07bd7a33fd34702fc9f815f95b057b6bce44b9d543dc2c1340c5e65576b87e22c733dc2c68238d8d27f83acb118946c73a2455084678fa942f7622a26a13afed819065a1c7f57b1a69ce7e04af6acb6b657338b86a10797dd14367063b22660097e9058997606c4ea8fdbd5bbd495589fa1fb1c9dc928d363d7b37095aa27db0f8c8a71d1c804be593cedb6a1983f629390cef8ba1035450e31f5efaf902547f4244bba2ddb448e0495f61c27f7b882c1ec1490daed812c89c28d178ad5c427dd33b477698ce4c3fc1cc5b8db3c74c2be", 0xe3}, {&(0x7f0000003b40)="09eb9594ba14821bcb32b327765be38c21aa4b305e807cfd04a2226f3c8b6c72b8a1b9f4f4e321c6c8e29bb310a7740be7db96a42549d5b3acc636ea16903ffbaf764cca1d88decb97d6d48ec00868a8fb4f26335b1472f57ba8f9e138d646df8afb64c4c23fc4f647d26254f4fe265ac7a967db7b3fa28858127f37543d725912d9828d56deb026a86bb8e971286438defa54793a318137b26142fce4903ee050f7928b67ae01a5f0c69526f2a750a6889e654d52667c2a09b0dd908f4fbb16de25c411d0f92e5b13e0be2358193e1c4cda5bfd539155a34263647cad294eb937d70a", 0xe3}, {&(0x7f0000003c40)="b22711701eeba274bb7824e14fde63a55342fcbbf98d22330a6e1ec3423bb1170ee549bd5e727e9dbb430c151e57ca56bcf6e802ce67019556d3e754cc9d392a99107a4d340eb6a0bdcfe1db6e74cb096ea0e96d82b09a6c957bac555488680ce0c6f3bea405ae963aac886bc39421585a1d636a01af8b2756065b89798db77e28b6ba9e3f4514ff081577ef7c9f11d0e69ada816adf57274119564b00768b31c77024f2d120b22be1b12c59db7f2dd83e45d6002175cebdc5b875a0bb88869897d9a33a446e702153046289d0640aea5bb2be853309c938f8d50d1847a844b490a2cb43", 0xe4}, {&(0x7f0000003d40)}], 0xa, &(0x7f0000004a80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r0, r2, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r2, r2, r2]}}], 0x150, 0xc844}], 0x3, 0x40010) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 323.841907] FAULT_INJECTION: forcing a failure. [ 323.841907] name failslab, interval 1, probability 0, space 0, times 0 [ 323.859640] FAT-fs (loop4): Unrecognized mount option "uid<00000000000000000000" or missing value [ 323.882640] CPU: 1 PID: 24859 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 323.889772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.899131] Call Trace: [ 323.901729] dump_stack+0x138/0x197 [ 323.905374] should_fail.cold+0x10f/0x159 [ 323.909536] should_failslab+0xdb/0x130 [ 323.913527] kmem_cache_alloc_node_trace+0x280/0x770 [ 323.918648] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 323.924107] __kmalloc_node_track_caller+0x3d/0x80 [ 323.929037] __kmalloc_reserve.isra.0+0x40/0xe0 [ 323.933722] __alloc_skb+0xcf/0x500 [ 323.937356] ? skb_scrub_packet+0x4b0/0x4b0 [ 323.941681] alloc_skb_with_frags+0x86/0x4b0 [ 323.946090] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 323.951023] sock_alloc_send_pskb+0x5db/0x740 [ 323.955532] ? sock_wmalloc+0xf0/0xf0 [ 323.959336] ? _raw_spin_unlock+0x2d/0x50 [ 323.963484] unix_dgram_sendmsg+0x34c/0xf80 [ 323.967806] ? selinux_tun_dev_create+0xc0/0xc0 [ 323.972489] ? unix_stream_connect+0x11f0/0x11f0 [ 323.977249] ? security_socket_sendmsg+0x89/0xb0 [ 323.982001] ? unix_stream_connect+0x11f0/0x11f0 [ 323.986751] sock_sendmsg+0xce/0x110 [ 323.990470] kernel_sendmsg+0x44/0x50 [ 323.994283] sock_no_sendpage+0x107/0x130 [ 323.994294] ? sock_kzfree_s+0x50/0x50 [ 323.994307] ? find_held_lock+0x35/0x130 [ 324.002337] kernel_sendpage+0x92/0xf0 [ 324.002344] ? sock_kzfree_s+0x50/0x50 [ 324.002354] sock_sendpage+0x8b/0xc0 [ 324.002363] ? timespec_trunc+0xb5/0x120 [ 324.002371] ? kernel_sendpage+0xf0/0xf0 [ 324.002381] pipe_to_sendpage+0x242/0x340 [ 324.002393] ? direct_splice_actor+0x190/0x190 [ 324.002408] __splice_from_pipe+0x348/0x780 [ 324.002417] ? direct_splice_actor+0x190/0x190 [ 324.002432] ? direct_splice_actor+0x190/0x190 [ 324.002441] splice_from_pipe+0xf0/0x150 [ 324.002452] ? splice_shrink_spd+0xb0/0xb0 [ 324.002473] generic_splice_sendpage+0x3c/0x50 [ 324.061146] ? splice_from_pipe+0x150/0x150 [ 324.065991] direct_splice_actor+0x123/0x190 [ 324.070402] splice_direct_to_actor+0x29e/0x7b0 [ 324.075077] ? generic_pipe_buf_nosteal+0x10/0x10 [ 324.079922] ? do_splice_to+0x170/0x170 [ 324.083897] ? rw_verify_area+0xea/0x2b0 [ 324.087961] do_splice_direct+0x18d/0x230 [ 324.092105] ? splice_direct_to_actor+0x7b0/0x7b0 [ 324.096955] ? rw_verify_area+0xea/0x2b0 [ 324.101020] do_sendfile+0x4db/0xbd0 [ 324.104740] ? do_compat_pwritev64+0x140/0x140 [ 324.109323] ? fput+0xd4/0x150 [ 324.112519] SyS_sendfile64+0x102/0x110 [ 324.116489] ? SyS_sendfile+0x130/0x130 [ 324.120456] ? do_syscall_64+0x53/0x640 [ 324.124425] ? SyS_sendfile+0x130/0x130 [ 324.128395] do_syscall_64+0x1e8/0x640 [ 324.132276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.137120] entry_SYSCALL_64_after_hwframe+0x42/0xb7 17:00:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) 17:00:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgid(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x4ff) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) 17:00:04 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d307830303030303030303030303030783030303066666530303030302c00cd126adb13fca779398b0ace60ea6d39427a38a93b7c0142ed389dbf87753634b89cb0e9fe0300722f1b05a514414658ceffa94db4144cff00a348c762b29bd729e972e856be09d46004d398935d6e90f4a43b4a75d6856bca540141e3ae2618a5e7280e7575ba9591fe274b8699e17ef4d44480f67fae6d96e60c94d5342a1c63c57263"]) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x258882, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000100)={0x2, 0x9, 0x80000000, 0x7ff}) [ 324.142306] RIP: 0033:0x459879 [ 324.145488] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 324.153195] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 324.160550] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 324.167811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.175079] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 324.182358] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:04 executing program 2 (fault-call:4 fault-nth:34): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:04 executing program 0: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x96, &(0x7f0000000240)="b8f0935986346ec335c3f6afe7526f5454fffbe5ac11fa1085a22ebff782b37487424c79546439ccf42345e84469376290979954dc4c962b66c8b3e3fd8a1ad0216b71e10adf5ce5f2c7b04c772349674d2a4a83e7904d270db6a31ddc089beb492eb0600a1ec91c4f70969b1a85f75c2a40b33e5b5bf82e36cdfc6ab6e9c587771ed2956689bc4cec69035936be13f20724bf3eb4af"}) ioctl$TCXONC(r0, 0x540a, 0x6) setsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000180)="7eea9eaffceb0d4551612808401d5a1a08d43cc14a81298b96c5ae48b1c2e32f7b4dcb77cd7c665f648a69bb24ef00304e4909e90b7feb7ef4af5662db866b2d2fd4cc1b168c97f00686a3b582047f78c6629838237b9c5445016e65ee5f06d4c9513d805cb026d3edffd98930689b96f45eb252313e4fdebbaad50c6348805ebb02ad59b9d865e10b701e", 0x8b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x80, 0x181) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x1) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x635c3f7a}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440)={r5, 0x8}, &(0x7f0000000480)=0x8) ioctl$TCFLSH(r4, 0x540b, 0x101) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x81, 0x401, 0x1, 0x2}, 0xffffffffffffff67) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0xfffffffffffffffd}, 0xc) 17:00:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = dup(r2) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000300)) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0xfffffffffffffff7, 0x6, 0x7fffffff, 'queue0\x00', 0x9}) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4003, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vcan0\x00', r6}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') 17:00:04 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:04 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000000c0)={0x2f, 0x8, 0x4, 0x100000001, 0xffff}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x2) 17:00:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) [ 324.342622] FAULT_INJECTION: forcing a failure. [ 324.342622] name failslab, interval 1, probability 0, space 0, times 0 [ 324.400768] CPU: 1 PID: 24891 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 324.407902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.417262] Call Trace: [ 324.419866] dump_stack+0x138/0x197 [ 324.423524] should_fail.cold+0x10f/0x159 [ 324.427684] should_failslab+0xdb/0x130 [ 324.431665] kmem_cache_alloc_node+0x287/0x780 [ 324.436255] ? __lock_acquire+0x5f7/0x4620 [ 324.440495] __alloc_skb+0x9c/0x500 [ 324.444121] ? skb_scrub_packet+0x4b0/0x4b0 [ 324.448442] alloc_skb_with_frags+0x86/0x4b0 [ 324.452849] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 324.457782] sock_alloc_send_pskb+0x5db/0x740 [ 324.462282] ? sock_wmalloc+0xf0/0xf0 [ 324.466082] ? _raw_spin_unlock+0x2d/0x50 [ 324.470234] unix_dgram_sendmsg+0x34c/0xf80 [ 324.474557] ? selinux_tun_dev_create+0xc0/0xc0 [ 324.479239] ? unix_stream_connect+0x11f0/0x11f0 [ 324.484000] ? security_socket_sendmsg+0x89/0xb0 [ 324.488749] ? unix_stream_connect+0x11f0/0x11f0 [ 324.493501] sock_sendmsg+0xce/0x110 [ 324.497212] kernel_sendmsg+0x44/0x50 [ 324.501011] sock_no_sendpage+0x107/0x130 [ 324.505162] ? sock_kzfree_s+0x50/0x50 [ 324.509052] ? save_trace+0x290/0x290 [ 324.512859] ? find_held_lock+0x35/0x130 [ 324.516931] ? save_trace+0x290/0x290 [ 324.520741] kernel_sendpage+0x92/0xf0 [ 324.524637] ? sock_kzfree_s+0x50/0x50 [ 324.528527] sock_sendpage+0x8b/0xc0 [ 324.532239] ? touch_atime+0x166/0x250 [ 324.536127] ? kernel_sendpage+0xf0/0xf0 [ 324.540194] pipe_to_sendpage+0x242/0x340 [ 324.544346] ? direct_splice_actor+0x190/0x190 [ 324.548934] __splice_from_pipe+0x348/0x780 [ 324.553253] ? direct_splice_actor+0x190/0x190 [ 324.557839] ? direct_splice_actor+0x190/0x190 [ 324.562417] splice_from_pipe+0xf0/0x150 [ 324.566476] ? splice_shrink_spd+0xb0/0xb0 [ 324.570718] generic_splice_sendpage+0x3c/0x50 [ 324.575296] ? splice_from_pipe+0x150/0x150 [ 324.579617] direct_splice_actor+0x123/0x190 [ 324.584025] splice_direct_to_actor+0x29e/0x7b0 [ 324.588698] ? generic_pipe_buf_nosteal+0x10/0x10 [ 324.593542] ? do_splice_to+0x170/0x170 [ 324.597512] ? rw_verify_area+0xea/0x2b0 17:00:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) [ 324.601571] do_splice_direct+0x18d/0x230 [ 324.605718] ? splice_direct_to_actor+0x7b0/0x7b0 [ 324.610562] ? rw_verify_area+0xea/0x2b0 [ 324.614625] do_sendfile+0x4db/0xbd0 [ 324.618342] ? do_compat_pwritev64+0x140/0x140 [ 324.622940] ? fput+0xd4/0x150 [ 324.626137] SyS_sendfile64+0x102/0x110 [ 324.630110] ? SyS_sendfile+0x130/0x130 [ 324.634081] ? do_syscall_64+0x53/0x640 [ 324.638054] ? SyS_sendfile+0x130/0x130 [ 324.642036] do_syscall_64+0x1e8/0x640 [ 324.645927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.650776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.655964] RIP: 0033:0x459879 [ 324.659150] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 324.666866] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 324.674136] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 324.681400] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.688669] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 17:00:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0xb) 17:00:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffffffffffff8d7f}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r3, 0x4}, &(0x7f0000000100)=0x8) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0}, 0xc) 17:00:05 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="747279e1733d72646d612c706f72743d307830305e59c2578a119f8815cca63030303030306d656f75743d3078303030303030303066faffffffffffffff00"]) [ 324.696016] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ftruncate(r0, 0x3) getpid() clock_gettime(0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0xffff, 0x5, 0x1000, 0x1ff, 0x6, 0x1}) write$sndseq(r0, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0x8000, 0x0, 0x3f, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 324.750799] 9pnet_virtio: no channels available for device 127.0.0.1 17:00:05 executing program 2 (fault-call:4 fault-nth:35): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:05 executing program 5: syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="39f78c66101263e5545942da8c86348cebd38629b9cd69ebe2b0ec2325869e3392b94846aad615081a42dccbac031d0409254ca6d5eee1a293e5ed77b4306946008ab2d0f6fa1cc4525fb3c54879da35ee424989d5fcbcda5beb34b5c3131827bedd5e3fce4e89f301c06316d638260b7d37a041f5483f33aac003bacfa29f1db1e69d73be8a", 0x86, 0x800}], 0x8020, &(0x7f0000000340)={[{@whint_mode_off='whint_mode=off'}, {@whint_mode_user='whint_mode=user-based'}, {@inline_data='inline_data'}], [{@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mime_typeproc/'}}, {@obj_type={'obj_type', 0x3d, 'ppp0'}}, {@smackfstransmute={'smackfstransmute'}}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x3) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000400)="0bb38c9a758bd5d317ad70a18b037bf58dd1be4ee65e02eabc9ad89b0a7582abab96d0b2b6792dc988b22b353a19607a92ce32a227c2a47e882a20411fc54849851c904429f34254f96c9a", 0x4b, 0x4}, {&(0x7f0000000480)="dd2e9b62da860be2eb04f9dd816267", 0xf, 0x3f}, {&(0x7f00000004c0)="5c121ad18274c6fa8fdda37ebe7650e758ed16b5c7997ef01d681105fdeadeb5b89b60f4cf15bd0b9010c430dade210d7a37c378dce63d05fdbddb3cdd395bd4a776268e9574ae7d34663560c379a2eb290c6f5f9ad6dda8f28b3ba8bd7d6915dabe15f02aa828978d3c455f3cb629cc943745a559aa1e8ebf612d7f437878503284815ba47d40e1b22236da8442fdb0b2dcef4a84d034d9451be367", 0x9c, 0x1}, {&(0x7f0000000580)="ce36adbd6efdba94aed73b57a90b7abdf33683da334ca84e14dc6d0a0870a36b78d0a2150a7d0286f8d856", 0x2b, 0xffff}, {&(0x7f00000005c0)="00b9ad9c0b66293df38b7f9be21dd35b25a5a510cfa2f56b83fa4dac2f32ffc91bd11353598620b4b0b416a83406e9e220a7a6fd8741c16da3afc0f76e2bc44e5380c36a8f51449f09b4c2d8f965b3bca376bb9ba4be4630888bcda37b37abe1690eae14ce562685f6fb5bda565ec95df1356603dbc78f0952cec33b79ee483af6f70e9c24a20d0277e8e5e7cb4ace8ca0bb0ab2fa851cbd376464b217b08ebfffcfb347c397dcf71e14d46af0665d65", 0xb0, 0xffffffffffff898a}, {&(0x7f0000000680)="f707213e77fb0d409b3b29133c2168291112e0c2be70a512fe1e7cef1c030b717d39c46698ae8a5eb77b343f9b4a74", 0x2f}], 0x80, &(0x7f0000000780)={[{@barrier='barrier'}, {@part={'part', 0x3d, 0x2}}, {@session={'session', 0x3d, 0x3f}}, {@decompose='decompose'}, {@nls={'nls', 0x3d, 'macinuit'}}, {@session={'session', 0x3d, 0x81}}], [{@smackfsdef={'smackfsdef', 0x3d, 'em0!trusted'}}]}) 17:00:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:05 executing program 4: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = geteuid() syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="0f507b5e80ccc61597b03b1ef04ceae5b765a5cb3f3b9d957ae851c69285eb98e6a5bc44f68a2d6e2fdc2b66c397f428f8dacf457addc3eca092e45cbf66cf66392d25cf15b4b0cc35dab358f7a5bf5a2bc39fb2bef92aac5a04983df1e1f44d9743927a8a3e49f6da6940e094ebcfb4a14ab0beb07aec", 0x77, 0x7}, {&(0x7f0000000180)="939cf50ec1c5a5f23ddf8284dca7f32d1ade1dc25d6bb1b3ba31fee52f21a565f55d9b9ca72d716c0e49b3881204e41f282166ce321d001caf88590a2a7a29a2c53dcef1afbe5f8c9e88266cb33fc90bf3a83255015c679876990cb1aca76ac9a438fd5c08a0de74383bfa02dbb308d5c6cb899c7c10402bac6eecb32c0d2837048273613d9e0fa1fb029449c20767137ea22db6a555238cfbfb72a647b8569265baeebdee", 0xa5, 0x10000}], 0x40004, &(0x7f00000003c0)={[{@numtail='nonumtail=0'}], [{@uid_eq={'uid', 0x3d, r0}}, {@appraise='appraise'}, {@fowner_lt={'fowner<', r1}}]}) [ 324.961904] FAULT_INJECTION: forcing a failure. [ 324.961904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 324.973743] CPU: 1 PID: 24943 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 324.980844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.990204] Call Trace: [ 324.992793] dump_stack+0x138/0x197 [ 324.996421] should_fail.cold+0x10f/0x159 [ 325.000586] __alloc_pages_nodemask+0x1d6/0x7a0 [ 325.005253] ? fs_reclaim_acquire+0x20/0x20 [ 325.009578] ? __alloc_pages_slowpath+0x2930/0x2930 [ 325.014699] cache_grow_begin+0x80/0x400 [ 325.018765] kmem_cache_alloc_node_trace+0x697/0x770 [ 325.025414] __kmalloc_node_track_caller+0x3d/0x80 [ 325.030349] __kmalloc_reserve.isra.0+0x40/0xe0 [ 325.035021] __alloc_skb+0xcf/0x500 [ 325.038649] ? skb_scrub_packet+0x4b0/0x4b0 [ 325.042983] alloc_skb_with_frags+0x86/0x4b0 [ 325.047395] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 325.052328] sock_alloc_send_pskb+0x5db/0x740 [ 325.056833] ? sock_wmalloc+0xf0/0xf0 [ 325.056850] ? _raw_spin_unlock+0x2d/0x50 [ 325.064763] unix_dgram_sendmsg+0x34c/0xf80 [ 325.069077] ? selinux_tun_dev_create+0xc0/0xc0 [ 325.069098] ? unix_stream_connect+0x11f0/0x11f0 [ 325.078494] ? security_socket_sendmsg+0x89/0xb0 [ 325.083249] ? unix_stream_connect+0x11f0/0x11f0 [ 325.088005] sock_sendmsg+0xce/0x110 [ 325.091716] kernel_sendmsg+0x44/0x50 [ 325.095513] sock_no_sendpage+0x107/0x130 [ 325.099663] ? sock_kzfree_s+0x50/0x50 [ 325.103594] ? find_held_lock+0x35/0x130 [ 325.107673] kernel_sendpage+0x92/0xf0 17:00:05 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="8491f425ab8197defaa0f4f4fd5c1cbffdb77fa427f3e6cc7687ae5bffd2c53299beef8d701c1e672dd08738aec637e3", 0x30, 0xf2}, {&(0x7f0000000140)="ef759da969ea7c24c104a40dab4889428c59fb256b9d4aac64e7c6070c7ca7cf19c9052d6383560822574f94e3d208e603adc6c0fe253ab4f08e71e25794deaad3834d9802cc0ef5eaf6ed1d68310c715365b9c28919627611c073c936c555bd55b3f8bb50607e06c1bbfc30a586c07f2bb4650e425ca959f701863b", 0x7c, 0x40}, {&(0x7f00000001c0)="1e90ee04814c359032b5ebf02a090197b96fe344b01c647a43756a34ea67317cbbe1e1afd4cb3213a5f33b23465d3dec9b74a9839616b4c6fdbc92ecfcf45630ca9cad82ddc2d4eb4cfc35fc61a04b42b1057c6e76ac8a514cd71a97356fdd", 0x5f, 0x54}], 0x2000420, &(0x7f0000000380)={[{@dioread_lock='dioread_lock'}, {@barrier='barrier'}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@abort='abort'}, {@sb={'sb', 0x3d, 0x12000000000}}], [{@euid_lt={'euid<', r0}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 325.111558] ? sock_kzfree_s+0x50/0x50 [ 325.115450] sock_sendpage+0x8b/0xc0 [ 325.119164] ? timespec_trunc+0xb5/0x120 [ 325.123236] ? kernel_sendpage+0xf0/0xf0 [ 325.127295] pipe_to_sendpage+0x242/0x340 [ 325.131447] ? direct_splice_actor+0x190/0x190 [ 325.136037] __splice_from_pipe+0x348/0x780 [ 325.140361] ? direct_splice_actor+0x190/0x190 [ 325.144948] ? direct_splice_actor+0x190/0x190 [ 325.149530] splice_from_pipe+0xf0/0x150 [ 325.153596] ? splice_shrink_spd+0xb0/0xb0 [ 325.157847] generic_splice_sendpage+0x3c/0x50 [ 325.162439] ? splice_from_pipe+0x150/0x150 [ 325.166762] direct_splice_actor+0x123/0x190 [ 325.171177] splice_direct_to_actor+0x29e/0x7b0 [ 325.175850] ? generic_pipe_buf_nosteal+0x10/0x10 [ 325.180782] ? do_splice_to+0x170/0x170 [ 325.180795] ? rw_verify_area+0xea/0x2b0 [ 325.180806] do_splice_direct+0x18d/0x230 [ 325.180817] ? splice_direct_to_actor+0x7b0/0x7b0 [ 325.180831] ? rw_verify_area+0xea/0x2b0 [ 325.180845] do_sendfile+0x4db/0xbd0 [ 325.180863] ? do_compat_pwritev64+0x140/0x140 [ 325.180882] ? fput+0xd4/0x150 [ 325.180895] SyS_sendfile64+0x102/0x110 [ 325.180905] ? SyS_sendfile+0x130/0x130 [ 325.180914] ? do_syscall_64+0x53/0x640 [ 325.180925] ? SyS_sendfile+0x130/0x130 [ 325.193062] do_syscall_64+0x1e8/0x640 [ 325.193071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.193089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.193097] RIP: 0033:0x459879 [ 325.193103] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.193113] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 17:00:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0xffffffffffffffff}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001, {}, 0x0, 0x5}) 17:00:05 executing program 2 (fault-call:4 fault-nth:36): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/\x00\x00\x00\x00') getdents(r0, &(0x7f00000000c0)=""/58, 0x23) 17:00:05 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x42) r3 = request_key(&(0x7f00000017c0)='.dead\x00', &(0x7f0000001800)={'syz', 0x2}, &(0x7f0000001840)='/dev/btrfs-control\x00', 0xfffffffffffffff9) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001880)={@in6={{0xa, 0x4e20, 0xdfa, @mcast1, 0x276c}}, 0x0, 0x8, 0x0, "1a040f88bd29bb790647501a499ce989680971103c99de8247a53e1cdbf8c1424e5018f094ce74909307bd0bead0c40b2d914ea41161960a719493a0e07a1b0ddc6867ad8676ef7017f7f1f8b1c23d09"}, 0xd8) add_key$user(&(0x7f00000016c0)='user\x00', &(0x7f0000001700)={'syz', 0x2}, &(0x7f0000001740)="6e1c6bb067b1c7cb0abb29926c49d9caaea235e5461238f36721fe10bb0c83eb4c532abfc0faeae63cdcbb03f63d303e6442f1bc4a7be7d6e367ab7465a621df65dabd7b5d706709e9472be9", 0x4c, r3) sendmsg$nfc_llcp(r2, &(0x7f0000001680)={&(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x0, "53d84b07b256681e43ec06be0561e0a07fd70124b39dddbb2befd1eaee6d20fe8229fffb1ac6b3e53957985742fdbaae08a7550b8ac84eaa3adeed8f702ab1", 0x10}, 0x60, &(0x7f0000001500)=[{&(0x7f0000000180)="4947c5d5ec086c0d35e39f7507d6c3f7ae9fff5741d75ab454545e6210562a05aafdd39d531d60e652e7a74af18164aba93ca846477c1bf083ffd03657d2562dd4d78175a65539a4ef08afb91b7c6c141022ddb03efc5a986172a69332657c9d3ca91ba7375b703071b1cfa09459f5cee7b05945cfd8ee916fdc2bfc", 0x7c}, {&(0x7f0000000200)="cc2dc6d0ef248281ca3b2f299d6ee0f6fed53cd4483ad03f5159eba58d2077a84600aebe1ec9b5251aa5455035b818f813a86a0df74cc62a6903c8aea9054762481ac092d087e465d9cfa731f20aa6799ee434f5d25d4a57699c889bd2707221b4ab1ed757717a34413df2033f85f19ae945a6daeaafa7989aa38ef2bb22b832365e5f8e4725575f83d00aa818277fdf2cd2ae3c580f72a768b892a3ff87edd47123d23fd44fd411a7876944606ceca1b5cfda3a1b4797e802b5f64652", 0xbd}, {&(0x7f0000000100)="ea33c86e706b48b3e0e9178a2815a347d1d79436f3f1ad04798ee30a06044cc874da44e819", 0x25}, {&(0x7f00000002c0)="4092d524f7e96ebd3cf07e4c123330ae7d4d8b3bb56d4ca57f24fcb8868204b1195442ea7df45f05e7f3ea94c046be016b2e5423f5e2804112b44eb7e9509a711b3efb8ab18388458e2be3ef6aa7", 0x4e}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000340)="cc2b20067bbbe4265044590c35c22b77540e5349417be07ce59ae4f5f20a03774c99719c1b877c75f27dff390da7738c7c4226d2582990a1014499b099fb8125e53f9f3fe9763cf4615ba56f9ec2cdea013429f301afb93aaa9e51a04d23946a31874be7b6f4f4c22b23cf1da82ef6412219bf38f2356c02cfee9ed371ec5ab05a84291cdf842d7ea3535f1a78e9e4b26e3d8a4c16922e1b4b10", 0x9a}, {&(0x7f0000000400)="c1e582a165b9e88dd680c7d42b40045ab08b399739f6356b58d3f86cf6d779baee87913290cdcce54ca7e074618aad6157f4abb52cd355a47ecb8baa0d89b3bda538e11a06da12e3e2cd176838", 0x4d}, {&(0x7f0000000480)="b53a580b5573941a8767369b4f86873c22bde94510c6883e9a47f041a9d52e4e85d1aa0830c56286", 0x28}], 0x8, &(0x7f0000001580)={0xd8, 0x10b, 0xfffffffffffffff9, "393fcd2ff50eee4500cea6bd3aefb4c16fec21b47db5470f066ec13eb0b2e2c2a4f45ea15d3c4294459e0734887795975ad789b79ce694bfd566c50fbd7e18315a80a55bf381411617af972b4ef3e73feedbb59faedf7980f2729e688e87cd62ebd092e865450c809902ed0742233270fdb067455343e2766c5aff74634fe4c6a1ccc4d7595c1eb94982a077c360c75829aba216af696fd0c2d1ed169b454dee4d83b90314280359de5150af91b3720c6faec02695212d9549010db05db9597b6edb3d"}, 0xd8, 0x4}, 0x40010) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000001980)={0xd9, 0x1, 0x6, 0x1, 0x8, 0x8, 0x9}) bind$netlink(r1, &(0x7f0000000140), 0xc) 17:00:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 325.193119] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 325.193123] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.193131] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 325.237972] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)) 17:00:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 325.337457] hfsplus: unable to parse mount options [ 325.347628] FAULT_INJECTION: forcing a failure. [ 325.347628] name failslab, interval 1, probability 0, space 0, times 0 [ 325.399537] CPU: 1 PID: 24970 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 325.406672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.416031] Call Trace: [ 325.418632] dump_stack+0x138/0x197 [ 325.422272] should_fail.cold+0x10f/0x159 [ 325.426434] should_failslab+0xdb/0x130 [ 325.430441] kmem_cache_alloc_node_trace+0x280/0x770 [ 325.435551] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 325.441013] __kmalloc_node_track_caller+0x3d/0x80 [ 325.445948] __kmalloc_reserve.isra.0+0x40/0xe0 [ 325.450624] __alloc_skb+0xcf/0x500 [ 325.454249] ? skb_scrub_packet+0x4b0/0x4b0 [ 325.458575] alloc_skb_with_frags+0x86/0x4b0 [ 325.462993] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 325.467933] sock_alloc_send_pskb+0x5db/0x740 [ 325.472444] ? sock_wmalloc+0xf0/0xf0 [ 325.476265] ? _raw_spin_unlock+0x2d/0x50 [ 325.480508] unix_dgram_sendmsg+0x34c/0xf80 [ 325.484840] ? selinux_tun_dev_create+0xc0/0xc0 [ 325.489537] ? unix_stream_connect+0x11f0/0x11f0 [ 325.494308] ? security_socket_sendmsg+0x89/0xb0 [ 325.499067] ? unix_stream_connect+0x11f0/0x11f0 [ 325.503832] sock_sendmsg+0xce/0x110 [ 325.507647] kernel_sendmsg+0x44/0x50 [ 325.511457] sock_no_sendpage+0x107/0x130 [ 325.515614] ? sock_kzfree_s+0x50/0x50 [ 325.519526] kernel_sendpage+0x92/0xf0 [ 325.523421] ? sock_kzfree_s+0x50/0x50 [ 325.527315] sock_sendpage+0x8b/0xc0 [ 325.531033] ? timespec_trunc+0xb5/0x120 [ 325.535098] ? kernel_sendpage+0xf0/0xf0 [ 325.539338] pipe_to_sendpage+0x242/0x340 [ 325.543582] ? direct_splice_actor+0x190/0x190 [ 325.548170] __splice_from_pipe+0x348/0x780 [ 325.552495] ? direct_splice_actor+0x190/0x190 [ 325.557077] ? direct_splice_actor+0x190/0x190 [ 325.561646] splice_from_pipe+0xf0/0x150 [ 325.561657] ? splice_shrink_spd+0xb0/0xb0 [ 325.561676] generic_splice_sendpage+0x3c/0x50 [ 325.561683] ? splice_from_pipe+0x150/0x150 [ 325.561694] direct_splice_actor+0x123/0x190 [ 325.561705] splice_direct_to_actor+0x29e/0x7b0 [ 325.561720] ? generic_pipe_buf_nosteal+0x10/0x10 [ 325.561732] ? do_splice_to+0x170/0x170 [ 325.561743] ? rw_verify_area+0xea/0x2b0 [ 325.600756] do_splice_direct+0x18d/0x230 [ 325.604898] ? splice_direct_to_actor+0x7b0/0x7b0 [ 325.609733] ? rw_verify_area+0xea/0x2b0 [ 325.613785] do_sendfile+0x4db/0xbd0 [ 325.617495] ? do_compat_pwritev64+0x140/0x140 [ 325.622062] ? fput+0xd4/0x150 [ 325.625247] SyS_sendfile64+0x102/0x110 [ 325.629209] ? SyS_sendfile+0x130/0x130 [ 325.633165] ? do_syscall_64+0x53/0x640 [ 325.637125] ? SyS_sendfile+0x130/0x130 [ 325.641079] do_syscall_64+0x1e8/0x640 [ 325.644947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.649789] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.654962] RIP: 0033:0x459879 [ 325.658131] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.665818] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 325.673069] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 325.680316] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 325.687593] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 325.694845] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:06 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x3d, 0x1, 0x9e7, 0x0, 0x1, 0x1, 0xd9a, {0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x2}}, 0x100000000, 0xfffffffffffffffa, 0x42b, 0x1, 0x9}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x8}, &(0x7f0000000240)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000080)=0x500000000001, 0xfffffffffffffe44) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 17:00:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001680)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000018c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0}, &(0x7f0000001940)=0xc) r5 = geteuid() getresuid(&(0x7f0000001980), &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001a40)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000001b40)=0xe8) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000001e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) stat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0xc) getresgid(&(0x7f0000001fc0), &(0x7f0000002000)=0x0, &(0x7f0000002040)) stat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000001640)='system.posix_acl_default\x00', &(0x7f0000002140)={{}, {}, [{0x2, 0x2, r2}, {0x2, 0x2, r3}, {0x2, 0x7, r4}, {0x2, 0x6, r5}, {0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x4, r8}, {0x2, 0x1, r9}, {0x2, 0x4, r10}], {0x4, 0x3}, [{0x8, 0x2, r11}, {0x8, 0x0, r12}, {0x8, 0x0, r13}, {0x8, 0x7, r14}, {0x8, 0x1, r15}, {0x8, 0x2, r16}], {0x10, 0x4}, {0x20, 0x2}}, 0x9c, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r17 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r17, &(0x7f0000000140), 0xc) socket$isdn(0x22, 0x3, 0x26) sendmsg$sock(r1, &(0x7f0000000480)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xd3, @rand_addr="5056fab9c535c3dd9de30c071a151686", 0x10000}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)="9453d1f0cbce7c75cf9d10a8cd4026eb253e501c2b74861ae737395350bcc5e3cbe6515ff80d6753d3b7302ab567a9a1cadc91e388af6dd23f75f26333d764416a2ff8bedca904e65f86f8bb9b8cef217d24601eff634999f435c416077aa4e1eab6405b80ab9995f0c1f6d2aa1e6da2151eb7f26c7f2a59b1107584f286053e4908a3da3e5337406edc357c9790f3e5b905603bb20ba79ed1e189368a30dbf4d8de4678d6c863cb924b2c6e7fc53376249caa1c70d81a757bb724f4f38eebf0f34264f593962462004b8b927bdeb3710116509bd38685a02b6ed5f674ce1fa5e0aa5da251e3c80c6134eb488e87904f53911784ec53ca3aff", 0xf9}, {&(0x7f0000000080)="85b6ea522973cb7cc74e7eeeb74d031bab5e20c39bc939180203c2e496ceaeccb5502c", 0x23}, {&(0x7f00000000c0)="fe1016155bc3f7a33b309181fa2a25bda39bdbe0e34aba7f2c96d1d7460f7c8757ef53efb857196b5ff8f2a42f955670b5b774c93a07b017128f0d5763a9a0ef47a4e0b6c49dde90f8faef215d416926", 0x50}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000280)="6733f3c42644eaa05ab2c44ab70aee7519174da667674a967619174e14b3c18e3ab624ebbc5d26231045cee547e091c979ecd602af4a00cded39c1428d61063f951d52207e1d6f610e11dba681434e7585b77e864fa7cbd5e67cf04500fe34736700e47d6b3c3ed9f8b855feb90fe050725721e9809bd11bf8c81eac6d34404e779294cbe75846e30e45b5952206d54af7c50f9623cd06f83c74082e50b3335e28c72f2b4f85b11493dc3edf7c7c2bbb721f9f3d6bc24235e18f8c1f6268f963f7d884ab7893f6b9c8ad70da91619a", 0xcf}, {&(0x7f0000000380)="1bcc90a14f14d015709e4aec7626918b1fcf047ac228d03302a0621490aba05800920b963ef1539fa62a83117be578385a7efa2339c9c397f762220b3bd73c8a8e1c6fee5f1f1ef899c882179025cc8b4f08354117726a3382ca43276a3c6ec115f3a0cb6bbc296c0637af27763e217157c602450fc7e9bf3a22a8371159f5622cb63f5fe4f8cdea9a2034e341f189e15e3e73066fbe4638f6b937d1520ddd2ce54cb37025435c0fed179d23a782b39165cae4c81e9237821d84b9e0ec12cfedf1f9eda64e497f4ec0d1c61f74dcef1f60401dd38760a22c2fdccf55ab64aaea32", 0xe1}, {&(0x7f0000001500)="ef5529df3027bbe7be0046703fbca9dcd368516602fe8161ca3c773b073a5fc72866f9c6437f255019f744222cb5f68de9823dfa09603a3ce37fb69ca0efd90326d5f51ac5f9b9891a5c297e611462f776fa37f5dc6ba2d9cf76eaa8ca030df6c264a79b8d5bece6bd5e0e8badb97da0cf6d8863fdfd5cf01b33c75cbf7db8440169019a81c8e0fc6d", 0x89}], 0x7}, 0x0) 17:00:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x2, 0x4) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") syslog(0x2, &(0x7f00000000c0)=""/112, 0x70) 17:00:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='\x80usejnk\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x10) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x1ff, 0x1, 0x400}]}) 17:00:06 executing program 2 (fault-call:4 fault-nth:37): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x101}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x8, 0x803c, 0x2, 0x1ff, 0x0, 0x3f, 0x410, 0x8, 0x7fff, 0x1, 0x1, 0x1, 0xf5, 0x9, 0x6, 0x7, 0x8, 0x9, 0x5, 0x1, 0x5, 0x1, 0x2, 0x1b8, 0x1ff, 0x1, 0x7, 0x4e, 0x3, 0x2, 0x1, 0x40, 0xfffffffffffffffb, 0xb3fd, 0x5, 0x100, 0x0, 0xfff, 0x4, @perf_config_ext={0x2}, 0x20, 0x8001, 0x100000001, 0x1, 0x20, 0x9, 0x80000000}, r4, 0x9, r2, 0x8) bind$netlink(r3, &(0x7f0000000140), 0xc) 17:00:06 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff010}, {0x6}]}, 0x10) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="55296bd8", 0xfefe}], 0x1}, 0x0) 17:00:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) [ 325.818661] FAULT_INJECTION: forcing a failure. [ 325.818661] name failslab, interval 1, probability 0, space 0, times 0 17:00:06 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000880)='/dev/input/mouse#\x00', 0x39, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f00000008c0)=[@dead_binder_done], 0x3b, 0x0, &(0x7f0000000900)="1f6cd50a5172f28176d18ccee8d68260c3e0bc8bb5902bad2bcfca273fb41bdd3e831db60efb9e432d69eb6d2adb0c81faa15e6a9813c1ebfd8cc1"}) openat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x80, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) mount(0x0, 0xfffffffffffffffe, &(0x7f0000000180)='romfs\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@random={'security.', 'user\x00'}, &(0x7f0000000840)='\x00', 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000140)='\v', 0x1}, {&(0x7f00000001c0)="14f17dc131eab25af0861b83d137f7ea04f747dc9a426a9e88b672bdde5cfd2ee42f42b3defd5ac8c23e8d8d46731609c7b0ff8b58a7776235101c7ea547ab46d972f066fc8e94740f7634a0ddd732664815b7accf530a0b948d56425f21e8e1b15d1c419a2946855d6fbcf1ce8040b4d5bf1904166f1826a9cf3c3b5723af3276688c1834508bd1cbca04245d67f57e78269d6ba8898bf5740d95747175da9016", 0xa1}, {&(0x7f0000000340)="78fd94f1f1a92d6693d191cec91cd3425dedb31b4bc0d410b535f9fb46e43ec3d8769d9b2a35ca8c368572a4ab04ee6fa211d34d9f756d1353bbad34401a427669dcdf8292f05ca9263631785a9bab302c60b239f96b0002dd4c49fe8edfadeeb39750adee660789e3bb3c09d4289670fc55311098dc22902c55cd0d9ecaf4046f863f5ff5b8800e6a603ac003cf7b3ee8da5ffa1405f09309b5e9c39318fdd6a6efdde63f8334cbc38f981290bda9cdbda08472ac39afbd6a6bbe1bce887750f1c01132d627af4d", 0xc8}, {&(0x7f0000000440)="2aa8fc06ce93c7e5f1fdba319e13b39c6f1b821dff8784a8cc266777cc67f9d52d3c10ee93fe4d612f3f390e1d66363fee18bda720ef7b6f5214d292a854b9015e11ba45459960b19ac36653eda2a29aa57e45f0b602897118ba3d6b92d821a4560bb8487684a415041cf88a0f2a6569956f0ec6754cd1c5e2bdd933f25f71f07eab2be76d860d3586e3ea8f434407e3e51a9188457e", 0x96}, {&(0x7f0000000500)="f4a6aa233b65c9f777fcfacfd856063517fc96ca408b359b71834b7c8fe4e6642102d6e73cda5bd885902f0163fc74d19d0ef0b3bf968645397e10ebc619d23241a6fff82bebdf4f2d0c61603cebacc732e7853f330130ad030d7edbb86ffb74f9c8bd81f46255c312166411925c5e99e948e48daa8a387a59ebafe4ccee8fa8308b4878122abc631f1b0e75a6fee6dedd43e51d13123faea02d76eb2192c270a573d9ecf4999c8704cf697674fa8603df6a14f1ca3c9bb3bc2dfbdf6fdfe60e098058226ee2566f64774907261baf1ae8f678c3b687531bbe97d07dc60f75e1cf211ce7771fe3e1", 0xe8}, {&(0x7f0000000280)="6ffed8c639ef524da468390207a6b7f3606a1afe263011502215d6d6ad02eed3e63231a834a8c8b76059356010dcb6bfd24676f2316be288cc50b230e19f60f3ed8d633186da8e1629a2ea0e9cf2c80699de427f07c1f9b816e9f00fe0e1e4af3c4b7852cb9e42a9dd4575ea6e2edafa14f78d989b2e397168fb", 0x7a}, {&(0x7f0000000600)="d5997e7b30", 0x5}], 0x7, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x4000000) 17:00:06 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x100, 0x0) mq_timedsend(r0, &(0x7f0000000340)="19fc9c25615bf3d4f3ea9a6da400d4d28f1ae29e59cf96d3394bef5a5755b86d22ffdef084d973c8780bbf855b593c9008ff9df355537a51e17d1c531aca7168200d8830ea9684a354c90820fb62ae57e37988aa00f31d30b8cc4ec34e4b2b31b8375bcdf5bcfeb55957f8811cc722af21562ab49abe4d2f92b3ec384bcdfa3fe6b6a5f49f1075f2f77052d3653bad1992f8d5d0e2058cd1ea04970f0912bd87a4283f459be6ff83650bf2f94ffddb265d58c0823d09c38d3f2ade9e39fca81d3df70163216c3665a371cff515ec5d427740902d0dd7a7fd24623a4827afe5cd302eaa10349498c8afe762eb20148356e97a8d0ea6ac95817a5611121755fd23305d1392739044c0fba5d3ec39c0f62e8e30ac2ae4602ba61cb6817765c315a83d7f803f034701f55217b1d0458e30c99d1a06ff2ffbd580091347e998977aa4b919127eb614c41f63df9c984337ce7dda9e464c9683450f010b443d6096ad23e0d6b4c88172ffe9db9aab544a38edcf6a2b7a538e9bfe2ff09cb4a00bd1dfd7c84477a4e9d0bc624af945e01b84c2389168e4cd7b87d08f24dd130b774161336ab91e95a06a6f44434148dacb975f7c12cf08f0c54eba5da3905bbc6de8d6c500b5417d16befe6a134d39b80dfa477da55f3bec336e54d614816a87a9e1d226e5485a79e9cc6e520f13b79c5198abda068ce7706811fc1b79e8c9bc17867a6deba76943507081300ed4f0040673bafcbedfc1dc511c9811d0ab8a37beae93bb88105d1ac33470bf8a3e583a61d71aedf5845623a266f20d91ae2f7485d73c31676386bc9ea2da07ef0e2824fed5e00c6d7d0102066b5d706d335b242a0d13e77976c3a7a7895838fa9b79e93e34693c3dc3740d9718453834caf403aa02a510ce481bfe2c0163773bb0210ff94862e8d76638ccf863219de0674d60ab8cece3451999cf64002b24582dfe0f6e259944adf2641e88be9a271191049726f7c817b46e9cfeacc40313b59b1278839098f71b2a6adc3c63ee911e0086848607392d344a53dafca8604c476655cfc356fa641fbb183d7e769d5956a623c0ae0f1f500345d18356689462266be119baf3acd7c5ab2aa64c14fdc05bec732a00af90f7f4bf42e34987813c829fa1a0231bf10bfc183e6bf16b319421c4877fea46a54a1ca0958bb83a2fa2f5f3994f89092d26abf5712d693424555d00203f79fbf81069801075934a2b5915401f95e4203ca11825a1a808d23075ef7b12dfad54dda6bcbe037854980d9850e69a3991dacb432bd5484afa02826d8a8299baa674ec1b01eae4eee0bc82857d7c0090977909c6818c662f52a9102c2f9d6a5ea51c497a1b61bbe59088a776c1bce64ecf13c633422ec12b99abf3f4b0693c1d496368603c93cf53adf8c6388a64e0a1094940cb961818cf61cc3885295b72cc11248a641d3d50b9a7edbae19a9e81ee580e8c311f0c3697d110c637f382284f0291b9ac8d062940654b7f110e94a58124472c36562fab76519d5e96beed264a81f641d7535692273760bd40a8d961d9179621acd60310fe9cb556a88abfb0b1d6037619ce1438c29dea6532294d0426b233f8b7f02b5c61912b5bfc04a077dd4478dcc4b2764064dc7992bab347b673b6c741d22b12e2a5de47a69e467f5a2011ce0b33a6b191e6ecd509717bb3a7978f87805a9903edeb5a3e2cefb8d8a12a9eaa61823d44330eb9abe20ac8a986a9930e58873d906f53fed6c1db40b6bf90517524947c5e2dee2cfd222ea5d1783666ab4b40c77460c7b7ce95a69fd7c48c2df52c86e42fe77dd08df191b2276ae1f2ab693857825bd9774215cc739f35a7e52025409fbc0ae25bd5247bd305faabe09a89d4d7f8e365a453dc9d1194192c895e756081aa09a81fb2eaa6fd13bde9a17b5a61926c93109dd5ba14e7cb9a0fe936e624f1a887676630187c136cd96ba483db3bc4f8bb84d69aabc01f9d7805d6432bec76330ea5e91368de9ba6409bf93584d8ddf0e131d00e0eb47f3bc6a1ba5c115d73c09d9bdf0ee99c92e0cfe32a3ff5b72917dffb1b112a66719cf220938898eadaa978813586984230d86e854bdb4c79a8deec3ce0e920d186db8833fd70b514454108c4eb0b6e12c2dbf0516a1db84f6ac4a828f0ae6aadb13e8c1faa53c74d2bac6241843a5313229f685c0537bcad124b5f3a26e0b9212e1c8610fd3b25859a1268eb611eb8d68859ed05bbac53686f61e7a48e4fcad5e41023430f48fbc567a64b905e6a8b6601f2352275c9290b799a7a6b755737130170e0cf0e2cdf789ee2253bfe58b654b368baf21e75680631274059782c680bff3bbcdbfc5d2f6942ed3920cf55abb955c51e9c4d037a821b22a9604348aa26cbc2f0c2913a0cd72f6f1819928e4eb68de014de37db08e86183be395035b6745c4391a6e7a158c4cb61d97ce6804454b476c3a5548b3f8815360b0aac91829de3a8b5b2fe28a0feefe843c9b673a4d4183c4f3ffa3e43e02628e6e70b92a9b4921cfc012075515f00fbab95fefa1fe66058d61ca62bad60501897bd7fb12a0cebc3ca070766b9f9f2465918e608ea82cab4c6191f56c26315096566c222faf98c48e93f7adf41cfc79d5013a2b07d6fa75d4689ef5b89c239c76e025ff4112b3ec67e6318a14f0e3b61174af866e8e93b6c52d27a786437fafabb9c7d13242af3e910a01344b508c23b0a9b2e9da73c10f9e79c75853207612653dd73abf3bd4d6ff1a7fbc263fb2d24cbc8122deea83a89ac923deb9b9f43c280b5ee4ca2368127f0fd151e00fa90e9eb246a68b2cae035ae3629c2dd1dbc87e6b017914164f12c7c99e88077b6bb24dcf41e156f1e432443aee782017deed11a13d7c4272410dfde099c0c9cb6a1c4c3c5f5f52f3c9561002641162c7a77dff7c6a728609182527969a43f16870ac899cc4317f45ae45a4916e253e062d7df833a0207d9705d53e8c389d46a08a51dcd51713035bcd57c9a535c332eab9470c541c10d5d2fae337df1dcb6a8b46e9c08f23cb30733cba622839ad44f61599a9b3d2ab2881706c27c4f0ea0fdfe4962e61dbb36eaad83e1eecb4c66ad256aa9e098eaf9728c4c343df7e5714a9aadadb6b148ff12f4af8391667024cedd95a79040204a41ef181a58babe1d643a8169fd7f0ea5a1559f3b1a0e737d243122d1426351d274b1069c10ab94592c200af6a7b605c34a96290fc9c99c630393d865841f3dc83c3be034e6d4e9f45a30ed06eaaca2267ab50524be15e5a4f4fe3a60fd14faab698b7f2708e7c89adaf8dc515cdd47eb7c140845f8cef4e4c72cbe15d3465ec6b4d7029a0c483e8351cf4a1ba839ada7dbf2adac92e202cdb591308b05d9e41be5c7d9d17ebbc9ad922fa74006c33be1f3bd87844f241d8917f9cd065988a466bff3f796ad29ea54ce41a8b2b38246153452cbccdb9ba6d1041207afc8a840b63076f66c2068ab8d3674c2babc824968681aea93bd2d526e3484621caf16a5592b50bb2de6aa08c032093eadf188a709347d5b6aedd33222545e343d057b9233cf953fafdc2d532885e66d2c6c7101f80e84abed388630c7608d465ed31b62f88098051bb6c48c005e30b8a42d974d2b7076c48cc623c085939ef36dbcd9f8455cfcdcf622d334e69e85e72585687dad754ac02d5e31aaa5b7977fc301736e884f6d4184dfe04e6c9a83509a0af15ccde4f8fb4548f4cb3f0040a0652e7ffdd4cbecd28bb62eee9f835756f450facf13577a29d9f8c0d1f5280a0f9e06adec9b73761000edf463341122c266d29da098c1a34d41ac907dcab6a5212becb689208691a5b390657011daa930d5013ad8757205f390c07d9cd939cbe488fc7e8fa698164d67859ae4fb22a3206b0eeccaac8df6f7deb0817f57228ba4daea1b3b2f203b3fd8bafc7430209ec01a5ac1b27de053762d7b2894004eef904ec5576a74855bb8e9e51ef77b620e3afd0f1c1a74ed2f1b978127e85adef4d848e44ee28e1b89911c47844124c01507f1ecca7e9a9afb38f70495505918c0562989d63af15e7ce6d1d9f28bd6c5c28d27790736b91f787d0a4e7c4452ff73e8d5ba47ba9808c42ce11a32e82570ee468b12d1a6788ad11090a19cd3e39dbdb754084ba6389ed7a131c0c15aabee055b6b7b4e9869b07cbc08cfe2d82a60cf3895ad3063556fc33e598aea13ce9901c0ca64995d6512333e3896923226a30a3535afe555bd3c4bd7724b892a2e09e00bea4c376083641f9b9d8ca324fcf4efa97af3b253899f858da5089bd64d99ca3e585c31306f82eb071b7460cd7842284e89c39a77e2f4d7c0979626b6ca7410aa4cd00ec0d38e6fee7616378c2bffc42aea13b57546c5a85c02428ae81b641ca2c9d18c57160c77f37ef079a79583f4520c6c7ffd4e2fdaab142458bed64086edc39b8acf49750a691f570abaeb630c206143dbffb651249434ceda7ca283b717166d07722b0ecd51f305dbb87cc3635b03640a16027467c73363d683716885e33dbc85f81c835e05ff636a6612436ec85cdfead6e8d7f1019be91e4e73aeb16a428609fe474d6b09874d552a140f3a67ef4a626e2951e4bff5668531b57df9fe852f7ef8ad386524d0321d7f5339187e129738d3d4f974208891efd7351eb6567c17944a152decc6393585658cf3bbf62a0ee651b701289f9780e471a72273fd4fc39b0feae8e767801432ffef955898a6cb60b558eadcd77410fa33afcf203039d7dd61033dbc860d83c1e10aa608f78de50cbc77514b4fad7a64aac734440fadce1ffcdea1a507263cb8580cc6d0d4b31b05ff54a42ef34f3d4f851cfa9e09307d5d50ede66cbc155bb7345a975bfffc644f968eb4a0ea987746007892cb5448cee3a4b1feac5eccc9b42f9b32bfae6d13f67657986930def2ee402cd5d095416315a3f56154fb4f172d704de79786248a41a2070c7a4d24b9367b9a0256c679c0f0daf9fa627461913a68cf73354d07d1d5b79784d996e5918dc96e589484fa6030a18350b67def6b6a1a3805564c04ad7ae9bad86b4650244954ff8eb4855ac46b4b64ea3f60352ab20b14b257a8ad3519594b35c05ab30a3f6108cfa043e5de2ce319788579631734f6279f789a24ec2b670188ca618ea8590e7bd5e56154be167b3f625966c30e48ddecef82cdd2474501f0b5623c9d4cf382cc1d711da4c1dbd98dc493a40986ca7b85e125881de5f3a41595436efe9f43d298773a25d189bb66a205a71eda121edc836de5d8c0c7cb31d38baac08224878a6f21208249f8e33fec61018987e8addaa439f631d81d63ccf51af588ca2994d0f305ffaef32bfd6cb0d45e6d520072b33ffd5e592a83d6f34e60c295d83814abd15457730a8cc9f13af689d9f94ff8a00cdc20f163e4361978755152670db9dec8e96f99d30eabc23725e2f293a64e5e6339f5a3cfbc33959d48aa34c7ba5c68890eb1ddd82c2dc691b15a908dd18a929a214eb2db1db100dd8e980e0b53ef6a15def5f4b1b8374095ee4e0397140de60136cb0f6f3a0fcd7c6702f1e6a87fef0060edd1916e5730ead81de351cf4ce21825b517e9047734c3699b07b504ba794aa6115e5ffb47f6e1d21c50f2c0814e79a16ec70add4532b7ed5455993fbce610c77c92a6e0c4aad37992d0fd3a7c945140f6d39e4ff737e41a5551c6d76ec9d4424226af366e50b261d70be4815def684e05fb1242c28b2050bff7e59901ea450a51a6270d2888f1fbbe8e5e8c67b0de9103c48600032189a42667cce8902575dd72", 0x1000, 0x1, &(0x7f0000000100)={0x77359400}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74726100733d72646d692c706f72743d307830b030303030303030303030303030302c74696d65ca21e960b9ff6e646f75743d3078303030303030303066666530303030302c00aeaee3c54b6b473f221a9af8eb2fa548120cbf3451930c8879756d276fb6301df1bd49b1c25d9b95792884fb776c2afaa12ca1f11901349f27e0680d75b5bb26d3db8673b8bcc8381b99b394a257089a06aac7a365ab32d1ee903055b2b9689af515e891ac49e3ff1feafbe119c240354a8a63487eab33abf94ccefd235e02c2852158849511541863e21ca9d592954fdaec"]) [ 325.951295] CPU: 1 PID: 25001 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 325.958435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.967883] Call Trace: [ 325.970480] dump_stack+0x138/0x197 [ 325.974122] should_fail.cold+0x10f/0x159 [ 325.978295] should_failslab+0xdb/0x130 [ 325.982281] kmem_cache_alloc_node+0x287/0x780 [ 325.986877] ? __lock_acquire+0x5f7/0x4620 [ 325.989451] 9pnet_virtio: no channels available for device 127.0.0.1 [ 325.991116] __alloc_skb+0x9c/0x500 [ 325.991126] ? skb_scrub_packet+0x4b0/0x4b0 [ 325.991140] alloc_skb_with_frags+0x86/0x4b0 [ 325.991156] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 325.991169] sock_alloc_send_pskb+0x5db/0x740 [ 325.991190] ? sock_wmalloc+0xf0/0xf0 [ 325.991207] ? _raw_spin_unlock+0x2d/0x50 [ 325.991221] unix_dgram_sendmsg+0x34c/0xf80 [ 325.991232] ? selinux_tun_dev_create+0xc0/0xc0 [ 325.991253] ? unix_stream_connect+0x11f0/0x11f0 [ 326.041559] ? security_socket_sendmsg+0x89/0xb0 [ 326.046406] ? unix_stream_connect+0x11f0/0x11f0 [ 326.051167] sock_sendmsg+0xce/0x110 [ 326.054881] kernel_sendmsg+0x44/0x50 [ 326.058687] sock_no_sendpage+0x107/0x130 [ 326.062835] ? sock_kzfree_s+0x50/0x50 [ 326.066736] kernel_sendpage+0x92/0xf0 [ 326.070615] ? sock_kzfree_s+0x50/0x50 [ 326.074485] sock_sendpage+0x8b/0xc0 [ 326.078178] ? timespec_trunc+0xb5/0x120 [ 326.082225] ? kernel_sendpage+0xf0/0xf0 [ 326.086265] pipe_to_sendpage+0x242/0x340 [ 326.090392] ? direct_splice_actor+0x190/0x190 [ 326.094958] __splice_from_pipe+0x348/0x780 [ 326.099256] ? direct_splice_actor+0x190/0x190 [ 326.103825] ? direct_splice_actor+0x190/0x190 [ 326.108386] splice_from_pipe+0xf0/0x150 [ 326.112430] ? splice_shrink_spd+0xb0/0xb0 [ 326.116655] generic_splice_sendpage+0x3c/0x50 [ 326.121221] ? splice_from_pipe+0x150/0x150 [ 326.125524] direct_splice_actor+0x123/0x190 [ 326.129915] splice_direct_to_actor+0x29e/0x7b0 [ 326.134566] ? generic_pipe_buf_nosteal+0x10/0x10 [ 326.139391] ? do_splice_to+0x170/0x170 [ 326.143349] ? rw_verify_area+0xea/0x2b0 [ 326.147404] do_splice_direct+0x18d/0x230 [ 326.151534] ? splice_direct_to_actor+0x7b0/0x7b0 [ 326.156360] ? rw_verify_area+0xea/0x2b0 [ 326.160407] do_sendfile+0x4db/0xbd0 [ 326.164107] ? do_compat_pwritev64+0x140/0x140 [ 326.168672] ? fput+0xd4/0x150 [ 326.171850] SyS_sendfile64+0x102/0x110 [ 326.175811] ? SyS_sendfile+0x130/0x130 [ 326.179772] ? do_syscall_64+0x53/0x640 [ 326.183727] ? SyS_sendfile+0x130/0x130 [ 326.187680] do_syscall_64+0x1e8/0x640 [ 326.191546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.196376] entry_SYSCALL_64_after_hwframe+0x42/0xb7 17:00:06 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x10104) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x200800) recvfrom$unix(r0, &(0x7f0000000180)=""/42, 0x2a, 0x1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) socket$tipc(0x1e, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x1000002d9) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030203527af80a18e9230302c74696d553bcafe65710d656f75743d30783030303030303030666665"]) 17:00:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x1}, 0x8) [ 326.201545] RIP: 0033:0x459879 [ 326.204716] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.212435] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 326.219684] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 326.226931] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.234179] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 326.241430] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0x436) fstat(r0, &(0x7f0000000000)) 17:00:06 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) socket(0x2, 0x6, 0xf) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r1) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = geteuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f00000003c0)={0xa0, 0x0, 0x1, {{0x4, 0x0, 0x8ca, 0x2, 0x3, 0x9, {0x0, 0x4, 0x1, 0x28, 0x8001, 0x10001, 0x13, 0x2, 0x4, 0x401, 0x10001, r3, r4, 0x0, 0x4}}, {0x0, 0x1}}}, 0xa0) 17:00:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipx\x00') getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x4) bind$netlink(r1, &(0x7f0000000140), 0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000240)=0x3) 17:00:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffd5) ioprio_get$pid(0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72643d307830303030303030303030df6bf02a7b7a55024b0000000000000000303030303030303066666530303030302c00"]) 17:00:06 executing program 2 (fault-call:4 fault-nth:38): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/64) 17:00:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x20, 0x1, 0xffffffff, 0x3, 0x4}) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x12000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 17:00:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 326.443975] UBIFS error (pid: 25053): cannot open "(null)", error -22 17:00:07 executing program 5: lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x1) mkdir(&(0x7f0000000700)='./file0\x00', 0x180) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72036d612c706f72743d307830303030303030303030303030800000006500000000307830303030303030306630302c000000000000000000"]) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r2 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x1000, r1, r2, r3, r4, 0x40, 0x7}, 0x7fffffff, 0x2, 0x480, 0x9, r5, r6, 0x16}) 17:00:07 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 326.524025] UBIFS error (pid: 25053): cannot open "(null)", error -22 [ 326.554797] FAULT_INJECTION: forcing a failure. [ 326.554797] name failslab, interval 1, probability 0, space 0, times 0 17:00:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='dax\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xbce, 0x100) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0xb9655c4, 0x3}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r2, 0xbf, 0x49}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha3-256-generic\x00'}}, &(0x7f0000000340)="287c79f557f173bc39ac79507f504db4b5e22dc25b66569d231b6c1b9051ade916a204ce9b48258572e97080fe5e0b47776f249558f767f566daab218d62e22d84e2ea8e80b65ba0b59a0ed729112a8218cba69fb8d526f368fc423a5a3922e5d0244d8feb63f02690cf9b98fdc36e24453dcd173d4c71c23d8bf3fa61527c78268e1261420d8899d9f540921ccb949dcc6543f82f686d1b93a058286dc9fa20e0103926dad4c041436099b63b4e115448b05cfa6f47fcbc5c67c87d743338", &(0x7f0000000280)=""/73) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x3, 0x0, 0x8, 0x4, r1}) 17:00:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1000, 0x8000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "3b1c51bb614b506a463ac3e66daa1ed998b3104d4c91e0d90196e6a475dab384", "8a9083bb2644d76f2f9be958fec5d0c6e25131c8aa4ab8509f72e41061600b28", "edb04bcb847b2a89be32adf7af6acf1270dac336dd7e007b6fac367f356ff33b", "a5eaa64de8ac77e080d1db5cc0bf16746800f656653b2f73c204a4f02ec1ee71", "b26195a29669d522c10f075958da76f91092d73009af9f10599a8c5d4e594c8f", "0a9353c6ee2c6ad19f50e146", 0x1f, 0x70ee, 0x81, 0xfff, 0x3ff}}) [ 326.625161] 9pnet: Could not find request transport: rma [ 326.633945] CPU: 1 PID: 25069 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 326.641065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.650411] Call Trace: [ 326.652989] dump_stack+0x138/0x197 [ 326.656613] should_fail.cold+0x10f/0x159 [ 326.660753] should_failslab+0xdb/0x130 [ 326.664715] kmem_cache_alloc_node_trace+0x280/0x770 [ 326.669807] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 326.675245] __kmalloc_node_track_caller+0x3d/0x80 [ 326.680166] __kmalloc_reserve.isra.0+0x40/0xe0 [ 326.684814] __alloc_skb+0xcf/0x500 [ 326.688422] ? skb_scrub_packet+0x4b0/0x4b0 [ 326.692728] alloc_skb_with_frags+0x86/0x4b0 [ 326.697119] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 326.702031] sock_alloc_send_pskb+0x5db/0x740 [ 326.706520] ? sock_wmalloc+0xf0/0xf0 [ 326.710315] ? _raw_spin_unlock+0x2d/0x50 [ 326.714451] unix_dgram_sendmsg+0x34c/0xf80 [ 326.718754] ? selinux_tun_dev_create+0xc0/0xc0 [ 326.723414] ? unix_stream_connect+0x11f0/0x11f0 [ 326.728157] ? security_socket_sendmsg+0x89/0xb0 [ 326.732893] ? unix_stream_connect+0x11f0/0x11f0 [ 326.737629] sock_sendmsg+0xce/0x110 [ 326.741322] kernel_sendmsg+0x44/0x50 [ 326.745107] sock_no_sendpage+0x107/0x130 [ 326.749234] ? sock_kzfree_s+0x50/0x50 [ 326.753120] kernel_sendpage+0x92/0xf0 [ 326.756989] ? sock_kzfree_s+0x50/0x50 [ 326.760858] sock_sendpage+0x8b/0xc0 [ 326.764553] ? timespec_trunc+0xb5/0x120 [ 326.768592] ? kernel_sendpage+0xf0/0xf0 [ 326.773155] pipe_to_sendpage+0x242/0x340 [ 326.777290] ? direct_splice_actor+0x190/0x190 [ 326.781858] __splice_from_pipe+0x348/0x780 [ 326.786161] ? direct_splice_actor+0x190/0x190 [ 326.790728] ? direct_splice_actor+0x190/0x190 [ 326.795301] splice_from_pipe+0xf0/0x150 [ 326.806375] ? splice_shrink_spd+0xb0/0xb0 [ 326.810600] generic_splice_sendpage+0x3c/0x50 [ 326.815161] ? splice_from_pipe+0x150/0x150 [ 326.819459] direct_splice_actor+0x123/0x190 [ 326.823848] splice_direct_to_actor+0x29e/0x7b0 [ 326.828498] ? generic_pipe_buf_nosteal+0x10/0x10 [ 326.833331] ? do_splice_to+0x170/0x170 [ 326.837288] ? rw_verify_area+0xea/0x2b0 [ 326.841335] do_splice_direct+0x18d/0x230 [ 326.845463] ? splice_direct_to_actor+0x7b0/0x7b0 [ 326.850288] ? rw_verify_area+0xea/0x2b0 [ 326.854332] do_sendfile+0x4db/0xbd0 [ 326.858040] ? do_compat_pwritev64+0x140/0x140 [ 326.862604] ? fput+0xd4/0x150 [ 326.865783] SyS_sendfile64+0x102/0x110 [ 326.869740] ? SyS_sendfile+0x130/0x130 [ 326.873695] ? do_syscall_64+0x53/0x640 [ 326.877649] ? SyS_sendfile+0x130/0x130 [ 326.881605] do_syscall_64+0x1e8/0x640 [ 326.885473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.890300] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 326.895470] RIP: 0033:0x459879 [ 326.898637] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.906327] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 326.913576] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 17:00:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4080, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x1, 0x4, 0xfffffffffffffff7, 0x7}, {0x2, 0x0, 0x0, 0x100}, {0x3, 0x2, 0x7ff}, {0x40, 0x42d8, 0x1f, 0x9}]}, 0x10) [ 326.920828] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 326.928076] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 326.935325] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xf62503cfab3d7f66, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0xbf) bind$netlink(r1, &(0x7f0000000140), 0xc) setns(r1, 0x14000000) [ 326.982964] 9pnet: Could not find request transport: rma 17:00:07 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001800)='/dev/audio#\x00', 0x5, 0x80) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000580)=0x101, 0x4) setsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000001840)=0x8, 0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x80000) r2 = syz_open_dev$sndseq(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0, 0x0) pwrite64(r1, &(0x7f00000002c0)="574233e9096ab5078516da52c688a76b86ebbd56216c78627dc600f1dce0d4825f3305ae685083d7b454e33f9dd86ca509bb1e6b5a32ba128702f05e036dc2005a072ce692b2dced7f067295f371c2dd340bead09c44eab398b272d71c603b4bc8f848c58929aa757561b657cb600055e3a31513131d26664fdf07d41972e25683637e2205c82f32afd8925fb7dcc6", 0x8f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x0, 0x6, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r3 = geteuid() mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='mode=00000000000000000056514,mode=00000000000040000000000,mode=00000000000000000000002,mode=00000000000000000000002,mode=00000000000000000000003,euid>', @ANYRESDEC=r3, @ANYBLOB="000090d179dbf1000000"]) write$sndseq(r2, &(0x7f00000001c0)=[{0x1e}], 0x30) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4100, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="04000000d5680b9e279038b299ca93ad4a060b16402112171809e2ecddb616a3853a063ff8dc409df044b09546696e8fe7afcbbb89cd2e7184b20e5961cd7781be52f6b209aef56d45c97782373a5f74db50b9aa4282feca798e08bec1f80dc5ceb83bb7e8be4135055e62b8090000009fd2299df3aec1fc8010bf50309754f121115278886580c42ea7732470d7b1"]) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000500)=0x9, &(0x7f0000000540)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:07 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000140)={0xffffffffffffffff, 0xede6517, 0x8}) 17:00:07 executing program 2 (fault-call:4 fault-nth:39): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:07 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0xa50e900fe31225e1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xbd5, 0x2}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x7, 0x20}, &(0x7f0000000180)=0xc) 17:00:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x42040, 0x0) bind$netlink(r1, &(0x7f0000000140), 0x67) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 17:00:07 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x28) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000380)=0x44) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) fsetxattr$security_evm(r0, &(0x7f0000000240)='security.evm\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050009001a0100000012e89304bc0374681926351b2e9a479073"], 0x1a, 0x56763b6b6be79db9) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x100000001}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000440)={r2, 0x1}, 0x8) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT]) 17:00:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 17:00:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000280)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000080)) write$sndseq(r0, &(0x7f00000001c0)=[{0x10001e, 0x0, 0x0, 0x0, @time={0x77359400}}], 0x2d4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 17:00:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20200, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000040)={0xc, @output={0x1000, 0x1, {0x81, 0x81}, 0x7, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) [ 327.228954] FAULT_INJECTION: forcing a failure. [ 327.228954] name failslab, interval 1, probability 0, space 0, times 0 [ 327.249936] 9pnet_virtio: no channels available for device 127.0.0.1 [ 327.283340] CPU: 1 PID: 25120 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 327.290507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.299869] Call Trace: [ 327.302464] dump_stack+0x138/0x197 [ 327.306108] should_fail.cold+0x10f/0x159 [ 327.310267] should_failslab+0xdb/0x130 [ 327.314247] kmem_cache_alloc_node+0x287/0x780 [ 327.318836] ? __lock_acquire+0x5f7/0x4620 [ 327.323080] __alloc_skb+0x9c/0x500 [ 327.326706] ? skb_scrub_packet+0x4b0/0x4b0 17:00:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 327.331037] alloc_skb_with_frags+0x86/0x4b0 [ 327.335449] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 327.340388] sock_alloc_send_pskb+0x5db/0x740 [ 327.344898] ? sock_wmalloc+0xf0/0xf0 [ 327.348703] ? _raw_spin_unlock+0x2d/0x50 [ 327.352888] unix_dgram_sendmsg+0x34c/0xf80 [ 327.357215] ? selinux_tun_dev_create+0xc0/0xc0 [ 327.361896] ? unix_stream_connect+0x11f0/0x11f0 [ 327.366662] ? security_socket_sendmsg+0x89/0xb0 [ 327.371422] ? unix_stream_connect+0x11f0/0x11f0 [ 327.376183] sock_sendmsg+0xce/0x110 [ 327.379898] kernel_sendmsg+0x44/0x50 17:00:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 327.383701] sock_no_sendpage+0x107/0x130 [ 327.387853] ? sock_kzfree_s+0x50/0x50 [ 327.391759] kernel_sendpage+0x92/0xf0 [ 327.395643] ? sock_kzfree_s+0x50/0x50 [ 327.399537] sock_sendpage+0x8b/0xc0 [ 327.403249] ? timespec_trunc+0xb5/0x120 [ 327.403261] ? kernel_sendpage+0xf0/0xf0 [ 327.403271] pipe_to_sendpage+0x242/0x340 [ 327.403282] ? direct_splice_actor+0x190/0x190 [ 327.411376] __splice_from_pipe+0x348/0x780 [ 327.411386] ? direct_splice_actor+0x190/0x190 [ 327.411403] ? direct_splice_actor+0x190/0x190 17:00:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) [ 327.411411] splice_from_pipe+0xf0/0x150 [ 327.411423] ? splice_shrink_spd+0xb0/0xb0 [ 327.411444] generic_splice_sendpage+0x3c/0x50 [ 327.411452] ? splice_from_pipe+0x150/0x150 [ 327.411463] direct_splice_actor+0x123/0x190 [ 327.411476] splice_direct_to_actor+0x29e/0x7b0 [ 327.411490] ? generic_pipe_buf_nosteal+0x10/0x10 [ 327.464642] ? do_splice_to+0x170/0x170 [ 327.468619] ? rw_verify_area+0xea/0x2b0 [ 327.472687] do_splice_direct+0x18d/0x230 [ 327.476835] ? splice_direct_to_actor+0x7b0/0x7b0 [ 327.481680] ? rw_verify_area+0xea/0x2b0 [ 327.485757] do_sendfile+0x4db/0xbd0 [ 327.489484] ? do_compat_pwritev64+0x140/0x140 [ 327.494075] ? fput+0xd4/0x150 [ 327.497281] SyS_sendfile64+0x102/0x110 [ 327.501265] ? SyS_sendfile+0x130/0x130 [ 327.505241] ? do_syscall_64+0x53/0x640 [ 327.509233] ? SyS_sendfile+0x130/0x130 [ 327.513218] do_syscall_64+0x1e8/0x640 [ 327.517107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.521967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.527156] RIP: 0033:0x459879 17:00:08 executing program 2 (fault-call:4 fault-nth:40): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, [], 0x1a}, 0x3}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x1f, 0x6, 0x80000001}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000140), 0xc) 17:00:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={0x7, 0xc, [0x10001, 0x100, 0x2ea8b2f4]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x2, "e9433d5530447ec0316b4ed869c56debc3b2941e2516df840b27c1d819193228", 0x20, 0x1, 0x1000, 0x1, 0x2}) 17:00:08 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,timeout=0x00000000ffe10000,\x00']) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) 17:00:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {0xfffffffffffffffe}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 327.530340] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.538052] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 327.545347] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 327.552613] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.552623] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 327.567144] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x1000, 0x8, 0x28, 'queue1\x00', 0x1ff}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x7d9f, 0x5}}], 0x30) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x2) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0xdb29) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 17:00:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80040, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 327.672734] FAULT_INJECTION: forcing a failure. [ 327.672734] name failslab, interval 1, probability 0, space 0, times 0 17:00:08 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x48d, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x44, 0x2e, 0x707, 0x70bd27, 0x25dfdbfb, {0x0, r1, {0x9, 0x2}, {0xfff1, 0x16479c70301c6077}, {0x0, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x8286}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x90) 17:00:08 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x40000, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x20000000003, 0x24080) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000000)=0x400) [ 327.732614] CPU: 1 PID: 25159 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 327.739749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.749103] Call Trace: [ 327.751707] dump_stack+0x138/0x197 [ 327.755345] should_fail.cold+0x10f/0x159 [ 327.759511] should_failslab+0xdb/0x130 [ 327.763492] kmem_cache_alloc_node_trace+0x280/0x770 [ 327.768603] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 327.774059] __kmalloc_node_track_caller+0x3d/0x80 [ 327.774074] __kmalloc_reserve.isra.0+0x40/0xe0 [ 327.774087] __alloc_skb+0xcf/0x500 [ 327.783659] ? skb_scrub_packet+0x4b0/0x4b0 [ 327.783677] alloc_skb_with_frags+0x86/0x4b0 [ 327.783692] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 327.783711] sock_alloc_send_pskb+0x5db/0x740 [ 327.805514] ? sock_wmalloc+0xf0/0xf0 [ 327.809363] ? _raw_spin_unlock+0x2d/0x50 [ 327.813519] unix_dgram_sendmsg+0x34c/0xf80 [ 327.817852] ? selinux_tun_dev_create+0xc0/0xc0 [ 327.822535] ? unix_stream_connect+0x11f0/0x11f0 [ 327.827303] ? security_socket_sendmsg+0x89/0xb0 17:00:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 327.832067] ? unix_stream_connect+0x11f0/0x11f0 [ 327.836827] sock_sendmsg+0xce/0x110 [ 327.840664] kernel_sendmsg+0x44/0x50 [ 327.844473] sock_no_sendpage+0x107/0x130 [ 327.848723] ? sock_kzfree_s+0x50/0x50 [ 327.852615] ? find_held_lock+0x35/0x130 [ 327.857505] kernel_sendpage+0x92/0xf0 [ 327.861392] ? sock_kzfree_s+0x50/0x50 [ 327.865283] sock_sendpage+0x8b/0xc0 [ 327.869001] ? timespec_trunc+0xb5/0x120 [ 327.873091] ? kernel_sendpage+0xf0/0xf0 [ 327.873103] pipe_to_sendpage+0x242/0x340 [ 327.873115] ? direct_splice_actor+0x190/0x190 [ 327.873131] __splice_from_pipe+0x348/0x780 [ 327.873140] ? direct_splice_actor+0x190/0x190 [ 327.873158] ? direct_splice_actor+0x190/0x190 [ 327.873168] splice_from_pipe+0xf0/0x150 [ 327.873181] ? splice_shrink_spd+0xb0/0xb0 [ 327.873202] generic_splice_sendpage+0x3c/0x50 [ 327.873209] ? splice_from_pipe+0x150/0x150 [ 327.873220] direct_splice_actor+0x123/0x190 [ 327.912294] splice_direct_to_actor+0x29e/0x7b0 [ 327.920988] ? generic_pipe_buf_nosteal+0x10/0x10 [ 327.921001] ? do_splice_to+0x170/0x170 [ 327.921012] ? rw_verify_area+0xea/0x2b0 [ 327.921024] do_splice_direct+0x18d/0x230 [ 327.921034] ? splice_direct_to_actor+0x7b0/0x7b0 [ 327.921047] ? rw_verify_area+0xea/0x2b0 [ 327.921062] do_sendfile+0x4db/0xbd0 [ 327.955387] ? do_compat_pwritev64+0x140/0x140 [ 327.955400] ? fput+0xd4/0x150 [ 327.955412] SyS_sendfile64+0x102/0x110 17:00:08 executing program 2 (fault-call:4 fault-nth:41): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x10000) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x200000) read$rfkill(r1, &(0x7f00000000c0), 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x7a120, 0x8005}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) 17:00:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000040)) [ 327.955421] ? SyS_sendfile+0x130/0x130 17:00:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:08 executing program 2 (fault-call:4 fault-nth:42): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 327.955429] ? do_syscall_64+0x53/0x640 [ 327.955437] ? SyS_sendfile+0x130/0x130 [ 327.955446] do_syscall_64+0x1e8/0x640 [ 327.955453] ? trace_hardirqs_off_thunk+0x1a/0x1c 17:00:08 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000780)='ntfs\x00', &(0x7f00000007c0)='./file0\x00', 0x3, 0x5, &(0x7f0000000ac0)=[{&(0x7f0000000800)="0952dbf6678ffc4b00cb4d3bff328bbbd976257267a5861496c9cfb755c07b74a2c0c3a831f8d0ee2aa2c751afb6b038517d669216c8e72d5a1a0808a14fce30f81dee9b800f5d5943b5bc77e2894cc79f96ed005cadd54a4813799198346263cb8eb245545e599f10ec9d119bb827e1befc1c61b9b526746f7e62b83630e870fd7eecb73e30038918fd8cc8676a40ddc84aff56", 0x94, 0x3}, {&(0x7f00000008c0)="b1edec3b72114dbeafc5d6b29a39fc21199ca11d35ade923de715c1c803d79d8e07677966d487cc8fdcefc644e4485ef3f0c099030122492ae2e2d6e9c0476e92cbea0a7c2f1e8de0fcf71ab9a803587d23adac0efd54218cea0b184a6", 0x5d, 0x5}, {&(0x7f0000000940)="f4886af6f900d62e2517ca6de0ddc9ddeb9e54f65dcb661d75907b881851bb96a7071d22a7f1de9fe0b089c3fa2cf93c73993991b75a36bd2342bfd68967a0a12b95f4f0bf1d0baa8983b1f676c629442ead07bfd8ad1efd5ff365f4159a56d5a484085a764d9cc63886ea0588", 0x6d, 0x6}, {&(0x7f00000009c0)="134cd59666d0a91ce931bba5871f099cc2d8fb063e788004a8eb9daf839a9d41921e24125207859d", 0x28, 0x2}, {&(0x7f0000000a00)="e505c49d440e010cdd94e2cd4b6a9cef125c9b7316799a80e5daaee80aa2185568632e8b4dd9093bf79995f07e623679a5724a7f69de12671bb7b7e683f58beaf18ed3338e25ca4e2d367702d8df759f0d5b9287771763e38206089c893cc7232a5a4fbbd5133cfc190325b207b3b41e3de5d66738fdc7162eb05959bf5e82538935b12b39a2ef259ad8a309ad7eea9a8ab016d9a451725940ad1c73488cc6b7c0f4a07fc8f81ba7f39bbe36313a2156650ead1290f738c0654dc0dbbe4d8188", 0xc0, 0x7}], 0x40412, &(0x7f0000000b40)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@errors_continue='errors=continue'}, {@errors_recover='errors=recover'}, {@fmask={'fmask', 0x3d, 0x3}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, r0}}], [{@smackfsroot={'smackfsroot', 0x3d, 'net/snmp6\x00'}}]}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000600)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000100)="ae12c9b218c0da68468d1d6809a31c39d47d65941462b2ad5551fe1ae39797c86df29497b97e6b9018651d2846762171ea090304f81b099bc97a82c4fbbe6af67360663f0a42238d70b6267408c0a76711239bc52425fd30836c60886690c06ef1d0259cc9b3009395557639ba3a75d65b7ec1dabab87033f6f5b124871586b6d8ab82c8a4d1a2c8024ee5a47e972471483fb42f66369ff02fda150b01a0592ee3339058b65022e6d3ff6e4c9189199b6519eb43ea7f5454fee2360867fb0e86e7e2b54c40a7c617b41ca3fbf9faee1a3c30f170979f501c09ff009b7b62e33cb2ba84f62983f09fa886", 0xea, 0x7}, {&(0x7f0000000200)="74e5e97f10dc3724f8d100378fb8402f927cbea3297293d60a4ba381d4ff8e79447abccb15bb641b4c43ac817e77fa599bf2f92b74a47cf82597d1f3b204c453549534c115f0ea7a5ca373598bf4e1a25557db6ebe88f45f7c0ea1e9129dee029a223f5823744b58bd68c3894c4019633ba2f20ece1e51c2a9c49a600781380d3098", 0x82, 0xfffffffffffffffd}, {&(0x7f0000000340)="a0a6764251170310864633667e9a2a9fc2a567e6e24e7d6d9f66bf57e86f78f89b056e392477b46c723731df5f2e29dec49debae40c60047e8b8944b6985e3a77e3f5019f1bd88fe7dc0b5", 0x4b, 0x8}], 0x100080, &(0x7f0000000540)=ANY=[@ANYBLOB='case_sensitive=no,fmask=00000000000000000000777,uid<', @ANYRESDEC=r0, @ANYBLOB=',seclaEel,audit,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r1, 0x0, 0x2, &(0x7f00000006c0)=',\x00'}, 0x30) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000c40)=0x1) syz_open_procfs(r2, &(0x7f0000000740)='net/snmp6\x00') 17:00:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x0, 0x7a120, 0x8001, {0x77359400}}) [ 327.955466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.955473] RIP: 0033:0x459879 [ 327.955477] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.955485] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 327.955489] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 327.955493] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 327.955497] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 327.955501] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 328.065548] FAULT_INJECTION: forcing a failure. [ 328.065548] name failslab, interval 1, probability 0, space 0, times 0 [ 328.065562] CPU: 1 PID: 25197 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 328.065569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.065574] Call Trace: [ 328.065589] dump_stack+0x138/0x197 [ 328.065609] should_fail.cold+0x10f/0x159 [ 328.065626] should_failslab+0xdb/0x130 [ 328.065638] kmem_cache_alloc_node+0x287/0x780 [ 328.065653] ? __lock_acquire+0x5f7/0x4620 [ 328.065668] __alloc_skb+0x9c/0x500 [ 328.065688] ? skb_scrub_packet+0x4b0/0x4b0 [ 328.065706] alloc_skb_with_frags+0x86/0x4b0 [ 328.065727] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 328.065745] sock_alloc_send_pskb+0x5db/0x740 [ 328.065768] ? sock_wmalloc+0xf0/0xf0 [ 328.065794] ? _raw_spin_unlock+0x2d/0x50 [ 328.065809] unix_dgram_sendmsg+0x34c/0xf80 [ 328.065821] ? selinux_tun_dev_create+0xc0/0xc0 [ 328.065843] ? unix_stream_connect+0x11f0/0x11f0 [ 328.065862] ? security_socket_sendmsg+0x89/0xb0 [ 328.065873] ? unix_stream_connect+0x11f0/0x11f0 [ 328.065884] sock_sendmsg+0xce/0x110 [ 328.065896] kernel_sendmsg+0x44/0x50 [ 328.065910] sock_no_sendpage+0x107/0x130 [ 328.065921] ? sock_kzfree_s+0x50/0x50 [ 328.065948] kernel_sendpage+0x92/0xf0 [ 328.065956] ? sock_kzfree_s+0x50/0x50 [ 328.065967] sock_sendpage+0x8b/0xc0 [ 328.065975] ? timespec_trunc+0xb5/0x120 [ 328.065985] ? kernel_sendpage+0xf0/0xf0 [ 328.065995] pipe_to_sendpage+0x242/0x340 [ 328.066007] ? direct_splice_actor+0x190/0x190 [ 328.066023] __splice_from_pipe+0x348/0x780 [ 328.066033] ? direct_splice_actor+0x190/0x190 [ 328.066048] ? direct_splice_actor+0x190/0x190 [ 328.066057] splice_from_pipe+0xf0/0x150 [ 328.066068] ? splice_shrink_spd+0xb0/0xb0 [ 328.066088] generic_splice_sendpage+0x3c/0x50 [ 328.066096] ? splice_from_pipe+0x150/0x150 [ 328.066108] direct_splice_actor+0x123/0x190 [ 328.066121] splice_direct_to_actor+0x29e/0x7b0 [ 328.066136] ? generic_pipe_buf_nosteal+0x10/0x10 [ 328.066150] ? do_splice_to+0x170/0x170 [ 328.066162] ? rw_verify_area+0xea/0x2b0 [ 328.066175] do_splice_direct+0x18d/0x230 [ 328.066186] ? splice_direct_to_actor+0x7b0/0x7b0 [ 328.066202] ? rw_verify_area+0xea/0x2b0 [ 328.066221] do_sendfile+0x4db/0xbd0 [ 328.066243] ? do_compat_pwritev64+0x140/0x140 [ 328.066259] ? fput+0xd4/0x150 [ 328.066276] SyS_sendfile64+0x102/0x110 [ 328.066287] ? SyS_sendfile+0x130/0x130 [ 328.066299] ? do_syscall_64+0x53/0x640 [ 328.066312] ? SyS_sendfile+0x130/0x130 [ 328.066324] do_syscall_64+0x1e8/0x640 [ 328.066332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.066348] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.066356] RIP: 0033:0x459879 [ 328.066361] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.066373] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 328.066380] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 328.066388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.066396] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 328.066403] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 328.178591] FAULT_INJECTION: forcing a failure. [ 328.178591] name failslab, interval 1, probability 0, space 0, times 0 [ 328.269867] CPU: 0 PID: 25207 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 328.496023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.505358] Call Trace: [ 328.507934] dump_stack+0x138/0x197 [ 328.511547] should_fail.cold+0x10f/0x159 [ 328.515677] should_failslab+0xdb/0x130 [ 328.519634] kmem_cache_alloc_node_trace+0x280/0x770 [ 328.524718] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 328.530157] __kmalloc_node_track_caller+0x3d/0x80 [ 328.535071] __kmalloc_reserve.isra.0+0x40/0xe0 [ 328.539719] __alloc_skb+0xcf/0x500 [ 328.543330] ? skb_scrub_packet+0x4b0/0x4b0 [ 328.547637] alloc_skb_with_frags+0x86/0x4b0 [ 328.552030] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 328.556944] sock_alloc_send_pskb+0x5db/0x740 [ 328.561437] ? sock_wmalloc+0xf0/0xf0 [ 328.565220] ? _raw_spin_unlock+0x2d/0x50 [ 328.569350] unix_dgram_sendmsg+0x34c/0xf80 [ 328.573665] ? selinux_tun_dev_create+0xc0/0xc0 [ 328.578320] ? unix_stream_connect+0x11f0/0x11f0 [ 328.583061] ? security_socket_sendmsg+0x89/0xb0 [ 328.587798] ? unix_stream_connect+0x11f0/0x11f0 [ 328.592536] sock_sendmsg+0xce/0x110 [ 328.596230] kernel_sendmsg+0x44/0x50 [ 328.600016] sock_no_sendpage+0x107/0x130 [ 328.604155] ? sock_kzfree_s+0x50/0x50 [ 328.608035] kernel_sendpage+0x92/0xf0 [ 328.611901] ? sock_kzfree_s+0x50/0x50 [ 328.615787] sock_sendpage+0x8b/0xc0 [ 328.619480] ? timespec_trunc+0xb5/0x120 [ 328.623520] ? kernel_sendpage+0xf0/0xf0 [ 328.627562] pipe_to_sendpage+0x242/0x340 [ 328.631690] ? direct_splice_actor+0x190/0x190 [ 328.636256] __splice_from_pipe+0x348/0x780 [ 328.640557] ? direct_splice_actor+0x190/0x190 [ 328.645125] ? direct_splice_actor+0x190/0x190 [ 328.649691] splice_from_pipe+0xf0/0x150 [ 328.653735] ? splice_shrink_spd+0xb0/0xb0 [ 328.657958] generic_splice_sendpage+0x3c/0x50 [ 328.662522] ? splice_from_pipe+0x150/0x150 [ 328.666824] direct_splice_actor+0x123/0x190 [ 328.671214] splice_direct_to_actor+0x29e/0x7b0 [ 328.675866] ? generic_pipe_buf_nosteal+0x10/0x10 [ 328.680695] ? do_splice_to+0x170/0x170 [ 328.684651] ? rw_verify_area+0xea/0x2b0 [ 328.688694] do_splice_direct+0x18d/0x230 [ 328.692827] ? splice_direct_to_actor+0x7b0/0x7b0 [ 328.697658] ? rw_verify_area+0xea/0x2b0 [ 328.701700] do_sendfile+0x4db/0xbd0 [ 328.705417] ? do_compat_pwritev64+0x140/0x140 [ 328.709983] ? fput+0xd4/0x150 [ 328.713167] SyS_sendfile64+0x102/0x110 [ 328.717131] ? SyS_sendfile+0x130/0x130 [ 328.721100] ? do_syscall_64+0x53/0x640 [ 328.725057] ? SyS_sendfile+0x130/0x130 [ 328.729011] do_syscall_64+0x1e8/0x640 [ 328.732883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.737708] entry_SYSCALL_64_after_hwframe+0x42/0xb7 17:00:09 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = geteuid() syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x7, &(0x7f0000001480)=[{&(0x7f0000000200)="0095e1dd96c9866be37a582b77be0874d2130f7d2559a8f3035961fa2078c07062", 0x21}, {&(0x7f0000000240)="fe88ae33a948f68ee52db99f65ef4fd7e1f2e9", 0x13, 0x2}, {&(0x7f00000002c0)="1482502ecc18e65dc8d98025eab39a4e90aea4d38cef1037e411764842e0e4d9e6e388d163daa0281a70094e14f9d72444a0740538eb8cb5019dc794", 0x3c, 0x81}, {&(0x7f0000000340)="8de3fafa308208891d46c856cdb5b9e68702e68c9bdb514a8ad9cfd573b7b666516aefe8e9f27cb2a1", 0x29}, {&(0x7f0000000380)="c825daf7a85f534ce48a9ab896bfdc70d4c1e239f2c63b0bdcb5644434f027297f512514cfcd8d3a52e4c796854bc68efc5f476afe769fbeab8a181ee4385603ce060bb7832fdef3a887d254261a6938addf7e5f6a550a9fceac8f118e339e8ddb0c7fa0b677e527cc421408a1633aa37877cd998f4c3455fa3176d2afa90b96164d45e34dfa32fdecc3b2fccb4f140418aa1472ade7bda2586313474a2f828fe9e57804d2bf4dbfe10c27e55dcaac8247b477c56da21d767ff59c7a37702f49a3ab2eee311c0419bac6cc3a28303b1fe4750757ef3c8c06a3db8893be320e9f63438f16cebe06d9231cea8f99e010e6d751f8375d1546859d657fb943d1db6048c9570e2458ddeb4c0687a04782a9aa16b5e2279486bb6bda1cff8bb929760f4f07486f1bdca1a2aaf0ce9a0d9bbd2eda84f1e5aba2e5194d87cabf623fe9c049b1326c078c97bd4cbc0a6bc259bd46803e135d774c84875231a9b0733031199f62543cb8aca01d8e987f4b64c434dfcb5cd7902a7cf018c72dac2134e9ce269e378cd8db5cfea6a524e03a9e60a031eba6f8c02631b009981f61a0ac0d0898a7426b933d46e9dea2ed45f1de13b5ee73643ea37b91c7c291f41ba50bb672a085a01672e6e5638dd8781aaf72964c42472c5a6197791393fee87f6b9f177f1301d75e1a6ba9d64ed9e0f00be3edfe2786c00c6996f4a8b97472ac98336c6dfff60f350aada557276a764c62411434b50070e4c818726dd6c3714a28144cbb9437cbb67fef28add6292d5ff7c27e5303f24a0178f22466bee973479c50c6824530c1118cc0fced70f31d5d3e7718a53a2a38991b5f843f3892aeb1a014d514856b5b36bcbccb996812ede93f704fa106da819b4602f4b87dd3f3dcb33c8cedb431f071a75db8b742fc8fc4316cfa77ca85e5a18b4e7b1baa30be43c573f5646f38f65e7bf0052459916a7488bb1645b57726a1d5e947e6b88a32ffd3257ca190fbf205f41b61b99404a6fdbd084559ea175339a5be1b3b5ebe4e4bc9597e2c62908d0fa75bc9770057b0e44bbab41b97be154a0c02284b2fb2ec283a3a667ce80cfec5df28e3b38ac69c570a62dfefb4b46ed5a2acca1cd71c06f183d3705ed8612f5f15e51c8c279c8fab7359506ba00a3f23a6bc7c2f50b2b2c01d29d11eb6478260d036f8fd89dad302e07c60ad5a9629f86ea207818ad572d6a00f5278ed048147bd743c6f8b3e1a4ef923bd802a3b4d83cb42773673851179a369e65ef00d22f1b723a396626ea18de94ef9bac83822d51c4943d205cac74f267055bac17bb852a917e53867663a2a051e303be5ae4b53d5c8758c778a3a1be7b9ec2fe518cb625a82896575500a7d6397595c6cedd38330710b7980c1b0c731a6d66cf822a32b1402bdc1e1829f89ea29fab01708884d36d80cd30f20b8519159c24cc2da29a88853eb06ee1cf7de064eef55ef4c4aa24170f0a6457ee24162c0d5807554cae0bb881058f45037b6641a1fb3a605bb90f68ff8b08a0f1cfb4b8ad8646c7769598e4f93cb0831a2bda30a27f8a47753ebf6c4dfb172fc876c364dea60a369cc33a514f92eeb0122d418b54408795ee84a5f30e11333fc89436345de52b7f6f2cd73f4ef4e60a0e4093b21bcea513b0f9be3db896280d6b53eddb0d13eea894aaf961837b3c5222705c73f1590e4fa14d4b12d561eca1618db3eda33b6a740e50810a161dd9f64747a8c375af30966b312654e3b0738682cbdb9f0840e8e5d5e7ae1e8294e751086e1342b1ea0f1dec32f79901d67f19fc664fcdf8d69e80e67043e3bfd65647a94400da79f78c4e97cff91d039a491211cca0383f08050e1523fbea22984aaec7b9f4aa81ac097c88e709fd7c36e17439b000fe2468243331563ecc006f9073bf468b5ffa5702282c2755cb69bc27df559ddf80a871005a33d3214da7769770e5491cf153c9e14113e6ee07031d14bf2f2a5a888141c6aa9bdfe2f7cbc09afc3a7fc9cb4b17e5df61a988aef234000126102320d3f7332d39bdfd2dbd9133d54d895bb3e5d2bd41381b9519d9ac28937f8c8151ab803946642d148ee9de25de56512fefb5a5df2f5c4b04a88d8d562b1dd17e372964b012c576b3509e59d75daf6160cb3aa4d46b0337ac424bb2e183c5fad528ae6e01caa316d465fc885ce2cc9cc832d1b721834623ccdb3c874f09f967cfaf9d684918f4cd7811b35aff49b9e80615de05c6d236582b1ca1baa465ab4ad46211412e23bf3a3725d98a4f1b7cc862a09935e8bcc814b3bf8941619c08d85c1784c684a4c2a4ac948bd8adf75d3602ce85f765c50467ea30480bde85950b752a496b1f2dff2faf7f0c9252282a856c0c83cba222539b48d272d4718cbbef38675181ef6c650a8e81dba2c71a2d0050c5a05e4eb86be92a3b28d4b0fc4c00ee3a59e0194a04726cd4bcc85c3ac0c117e592232627db0a2012a01d1dee629c858dc4d1254e4c237a43ad6387547ba1939a05de78610c73b47bf6b65742b19d4c7ddf194d69160c993fbd88051404226ec681acbda307ee39b9d7d939be70707a6b6e4c2b3fd3d72de2e9167d9641922b354ede0ea44a2b125bd236e1820595870e66b6eb9cc9e466bdb1891bbcc3ce8d964c206f0a66a6c338fc58a44b71cc966b7737c6cf2d1c086395ef990ae019a2d60f11051c74bbc1a03ec4fabfb3fd7e41c68af58ae900421cd892ba964f99a5f6c652d79804f92d2ba5fe068be82b739064b80ee37882675932134820d3474f32ce63aa0b83cad5f83e03821cb80c80f936a0b8728b8d36d1b1b045963568f242043b213d30f2797ff1d1777b651b59992768ddb1f7be01fbe33b19486e3c57c0a5baa096e7d4c27c87ad64bd649ec2679138fba21f0991620d2a8ba4cc0d4122408c6a8584ab1672ebe62b74a095740a56baf321c01c7d1397fda7800f906030114d6b778ae88fbb603f418b77cfc95499fee0d42b0d8bb0b5a99490e37650c1a34b21fed47626b260a31ce1a7a8e72bf44deb02114b1cbfb1594b60d839ff7812a8cb0ce2f9e744fad4e98272afb9404e482a09e9ecdd850b2e0eb4a7ba134c478d6d3bd3142ce3c78cf855d113fbc747f48696d23c2ef6a5f50983544adc1cd65d64c7082c41e09aa3af51093f5ed3f953086cb0305f51d0dbfadf52bacb16e0ac75ccda75cd7eed9045ea91aa934bad1369205ce061760243f9a200d117dd64d98b215d408084c054c7d537a6a3b952851715a16656ae2f4ec791cdc56472c5dff1579b4944ba36ce26d7a5aa47ab0269d67ef7f18fd33b4810ec45b87b163d7cd2ce3bf03f1d30a5ec1a1c951e2501368bb7ab052c2d1ef793bd3d1b59df33026fed47df7972771cfc462e3fe42fdaf0a437fb6db5e43a75b72104166f78d8a1f0e2f04af4e498eb07bbd152a55db44de89ee410dcc05b687b3b14add5081e4cfc7434fc48afbbfca0144a3eb88a03332a371049c1de7cd339cc246eaa47e7b70efd3d95652b5f4a308b4feaa643549d1c91d3009fd7c023be8f6abc056de50e7f8d2881e08e16db9baedcc10c8191e6275ecd1c82a6019826858447a169ae84bb6e198a0c177418dfd1dd74718c8563ccf3b3b4a9c29818859b1c76d9621d0c909ad0776e84b1a15b8f9e5ebeab138e428ce4c21af67a8c646c40a7fc4bd633970771616171a4b2c385f79f51927f0b3eda8c3dec225849fe5a467465c3dfb1dd638c7d71a3da83b5085c0f82eb082eb48ee6e94176ad02b1b8537f5234bc457638d311e091ca55fa57b68820c633dbd3c10f7d6e8ce2307b075c3182b6ab2fc5737763cc4d0f9cf3e2faedf26f070f112771b0bcfe59408d938aaaf05bc53521fead46fc328199b4e1651b9aae95d2b920385a5526749abb18c53f52c8fc1faa0f9bca458abcb9b6212f240c43b61f185969f606fbbc15803368e01d441f0f220a72ea005a3309fe07a9700ef95e251b8daa4880b21c8d9c242ca99147d9fa2ac52ff595346637698eda6b4ad2b5256950db3fc93f60ac70be4a6965af47894b2cf2b240f896c0770616d3e3996f3f53f3e7e2e773b5ae54c4671f6cb67c0a3c8c2b1cb2ac77101f25f0fa2db848f6d77ed9e32b90f2a21572cdb07258cb09865fc82ba38844d3ea67629b1a649e82b47e2a52f51bd9eb323010219e6e4316aa0fb14e9a9f32de5a97ac7a6693fd26e77078a380db44a35a20fe54bd257166ec6906eb33341b4586bbc37edacb5c796d2d6c632b36a838bac907d484735086b5b97b2d4efe117c569c7b7a9d1716e4ae8e10789aa0e327e4dacf042c2a90b2934d55a2a5c2e86c39da62117a20774946424444c88d2d7cc6126643c7f6a05d1259231f63d00c5d08dc1ed2fce5e4f68c0dc5bfdd656824c6d43adfd93fd124a291d2bbbdd01afc5b4d7f46eb07956ee8184985685280bd55fb4db83d922e1aad7d7df3fa6b8c95802248d8abf21a390de030c4df4ac4fcbb2bacca6c3ab4e981a7e63877dd324e21b3d17c5b85d70d866b21d3222e14a9302b0f5ed6f0a8359a25ef9bd499de9d7139cf61c41d6971e1263d9d60e2d92128a10c023e4655ca8a73edea576b6ef9aba620714fc55435e5d3525861e036dcfdea2b25b38700d2b2403f4cf4e59c92907141289ab84f2447c526d9ba213e8c83a2de0e313836ec5825e1ecb59a4de71aefb8c1732329b1da050e02a0ff0375ffc485627d4f55a947f38940774a26e25e3b2df0f25dc9698d5aa38835d86ab765de1b719be8f58f0617c81b3a8a2f2e45f5f837238f5ef98e0c97e9a779f59b3fb43d9c9b0a16b7795b0249df9b5c8ec4ff7b5ca18bb739a847b60ea606e918c9accbda2085ec44fe2de5d60945723e7b8596f79d21502e4a5ce7bf77d879b30c6c1d372b931f222a891d62dbb8ee9baf46fee2f8463ffc297208d70f9a382361d8593c183017a5fe1c32e049d7f2f847199b39ca873d2d496457098b4a0d847c7956a2ca0aceda85ae0f05d0a6b411346075458a5219c540dca33468ded0ded2a0a2df96ddcee923f913c178ed0f8924202d34923e6f2e5cd0d972c7fa3d9808193465f6e48a162ad0f04136cc449a31c333502dd9b8c2c6a456b4872f82e1bb660fa26442d48f12f877e2764754b143e158a888b2dda41d168052bc2db203f914fa1461c431e246d3bf3dac8fd62f75a1d5a7bd12435d09bdafdad70d0822912b43334351e8d982cb5729dea253f1f4d87fb8b0057c7852c3edc34b716a4902b66560377e5602c02d18958f82d4c5008ba3084eb102073a640e75c55c764496ed0f2c851650dd79a77603328c2fb855aab1053e327925963ee1122b0ed4be23f3d3f7747f70ced52f9cced6cd983f384df5b228a1185545b7813123e55fe44c33cf5c363287a3fb307877ce377c4218a21266fcf04fb01f519684a4520e282a30326b8af7f8e9924acb30ee26f3e94e389a843b5b1a7fe97d2962217d9942845cf8f6e73eac6b1305f15baa13c22352fc8eaa6ab3671c5449c23213a4d3d86411ef89e0cf9f35c9ff0345fcfa14dce3a1e66d478b760bf744d6603cb005c5e3fb0452e702bb8b40930e2724fdff665dcf2c35910cbb762436539cf24959c9d0005a1ba1b59472802aef285d6aafb03f0afd98ff8667d41f5806b00f852e04894e183e0255787b624cbdee1111db4b340249b0b83c5009253fa61c1a1ba4e9652174e18b1a7767437c14ea67ad4d5043baeb7118d4adbb2bbcef14a75070949b5585115547c342ee532a5cfa1280ff2b3b26b792662eb125f", 0x1000, 0x7fffffff}, {&(0x7f0000001380)="e2aa704a64dcc5241e06ca74a5531b569fce2c815424df944467aebab705", 0x1e, 0xae6}, {&(0x7f00000013c0)="30a18d59ecda2f9a2734900f3ed47c63a5a2a7ae2a4d3f5dc157829ac8b15680b4b1f133df808915671b84fedec06a371cb403a921ce62817dd51c19190ece7861d2c815a3799275b222cafd5823fa7478546b7dfaacc6d719088659bde6eac18d9d4470aadbb28b8d2ce8f59a199107d9b560f7e98c5292f5f5d2168aea7ce95b34fe5a4a3a66ef", 0x88, 0x401}], 0x800000, &(0x7f0000001540)={[{@balloc_border='block-allocator=border'}, {@expose_privroot='expose_privroot'}, {@tails_off='tails=off'}, {@data_journal='data=journal'}, {@usrjquota='usrjquota'}, {@resize={'resize', 0x3d, 0x3}}, {@jqfmt_vfsold='jqfmt=vfsold'}], [{@audit='audit'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, 'losystemcgroupeth1wlan0-*ppp0)ppp1*-cgroup'}}, {@fowner_gt={'fowner>', r0}}]}) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x1000001, 0x0) 17:00:09 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ifb0\x00', r1}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x200000) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x4, {0x5, 0x8001, 0x34f2}}) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x7ff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000380)={r4, 0x3}) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000300)={0x4, 0x103, 0x4, {0x9, 0xb2, 0xffffffff, 0x8}}) fcntl$setflags(r0, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000080)={0x4, 0x3f, 0x80000000, '\t\x00\x00\x00e\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x15_9\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0x2}) write$sndseq(r2, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001, {}, 0x7}) 17:00:09 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000440)='/dev/rtc#\x00', 0x3, 0x101800) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x9e5, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}, 0x5, 0x6, 0xff, 0x7, 0x48}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x81}, &(0x7f0000000400)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000000200)={0x8000, 0x0, 0x3003, 0xaf7d, 0x8, {0x9f, 0x9}}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000140), 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000180)) mkdir(&(0x7f0000000240)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r7, &(0x7f0000000100)=0x4) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 17:00:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 328.742883] RIP: 0033:0x459879 [ 328.746051] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.753752] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 328.761125] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 328.768911] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 328.776159] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 328.783420] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:09 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20402, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:00:09 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffffffffff7, @remote}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="4aacd8e6ab17988b70e280f12b6d44aaa03e13291ed161b79093fad311fc22b8f543139dbd2aabf1e703384d38152412c7522f608813dd237bad43c2482e9cc371543f6e28b395c235bb6d88e59389e2687af915", 0x54}], 0x1, &(0x7f00000002c0)=[@tclass={{0x14, 0x29, 0x43, 0xd1}}, @tclass={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x1, [], [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xb0}, 0x4044084) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7aa3d70f, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x100000000, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000080)={0x8001, r3}) 17:00:09 executing program 2 (fault-call:4 fault-nth:43): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000080)={'ip_vti0\x00', @ifru_settings={0x23, 0x98bd, @fr=&(0x7f0000000000)={0x7fffffff, 0x10001, 0x3, 0x80000000, 0xff, 0x7ae2, 0xc5bb}}}) [ 328.961586] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument [ 328.961586] 17:00:09 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:09 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x3d, &(0x7f00000000c0)={0x24, 0x4, 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000004c0)={0x800, 0x6, 0x1, {0xa, @pix_mp={0x6, 0x10000, 0x4f424752, 0x0, 0x0, [{0x7, 0x1}, {0x9, 0x6}, {0x400, 0x7}, {0xffffffff, 0x1}, {0x1, 0x4526}, {0xff}, {0x4cf4, 0x65b08c48}, {0x3d76, 0x3}], 0x57d6, 0x3, 0x1, 0x2, 0x6}}}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0xfffffffffffffffc, 0x8000000, 0x4, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r3 = dup3(r2, r2, 0x3bbdd2459e733b6e) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setreuid(r5, r6) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000340)={0x1, 0xfffffffffffffffe}, 0x2) write$sndseq(r2, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000005c0)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0xda5, 0x80000000, 0x5, {}, 0x9, 0x5}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/169, 0xa9) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380), &(0x7f0000000400)=0x4) 17:00:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) 17:00:09 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 17:00:09 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xbde49cbd2b46632f, 0x0) listen(r0, 0x74) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 329.054037] FAULT_INJECTION: forcing a failure. [ 329.054037] name failslab, interval 1, probability 0, space 0, times 0 [ 329.123985] CPU: 0 PID: 25249 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 329.131125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.140472] Call Trace: [ 329.140491] dump_stack+0x138/0x197 [ 329.140512] should_fail.cold+0x10f/0x159 [ 329.140529] should_failslab+0xdb/0x130 [ 329.140540] kmem_cache_alloc_node_trace+0x280/0x770 [ 329.140553] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 329.159940] __kmalloc_node_track_caller+0x3d/0x80 [ 329.170294] __kmalloc_reserve.isra.0+0x40/0xe0 [ 329.174956] __alloc_skb+0xcf/0x500 [ 329.174968] ? skb_scrub_packet+0x4b0/0x4b0 [ 329.174983] alloc_skb_with_frags+0x86/0x4b0 [ 329.187297] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 329.192236] sock_alloc_send_pskb+0x5db/0x740 [ 329.196745] ? sock_wmalloc+0xf0/0xf0 [ 329.200560] ? _raw_spin_unlock+0x2d/0x50 [ 329.204719] unix_dgram_sendmsg+0x34c/0xf80 [ 329.209044] ? selinux_tun_dev_create+0xc0/0xc0 [ 329.213736] ? unix_stream_connect+0x11f0/0x11f0 [ 329.218501] ? security_socket_sendmsg+0x89/0xb0 [ 329.223259] ? unix_stream_connect+0x11f0/0x11f0 [ 329.228018] sock_sendmsg+0xce/0x110 [ 329.231734] kernel_sendmsg+0x44/0x50 [ 329.231750] sock_no_sendpage+0x107/0x130 [ 329.231760] ? sock_kzfree_s+0x50/0x50 [ 329.239692] kernel_sendpage+0x92/0xf0 [ 329.247419] ? sock_kzfree_s+0x50/0x50 [ 329.251309] sock_sendpage+0x8b/0xc0 [ 329.255024] ? timespec_trunc+0xb5/0x120 [ 329.259092] ? kernel_sendpage+0xf0/0xf0 [ 329.263163] pipe_to_sendpage+0x242/0x340 [ 329.267315] ? direct_splice_actor+0x190/0x190 17:00:09 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x48642a07, {{0xa, 0x4e23, 0xffffffff, @rand_addr="3bb57c82b6553abae98ad1831501b762", 0x101}}}, 0x88) fcntl$notify(r0, 0x402, 0x91479f63a69f9dcb) syz_init_net_socket$x25(0x9, 0x5, 0x0) 17:00:09 executing program 1: prctl$PR_SVE_SET_VL(0x32, 0x4d30) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 329.271908] __splice_from_pipe+0x348/0x780 [ 329.276231] ? direct_splice_actor+0x190/0x190 [ 329.280823] ? direct_splice_actor+0x190/0x190 [ 329.285410] splice_from_pipe+0xf0/0x150 [ 329.289475] ? splice_shrink_spd+0xb0/0xb0 [ 329.293722] generic_splice_sendpage+0x3c/0x50 [ 329.298394] ? splice_from_pipe+0x150/0x150 [ 329.302716] direct_splice_actor+0x123/0x190 [ 329.307124] splice_direct_to_actor+0x29e/0x7b0 [ 329.311810] ? generic_pipe_buf_nosteal+0x10/0x10 [ 329.311825] ? do_splice_to+0x170/0x170 [ 329.311835] ? rw_verify_area+0xea/0x2b0 [ 329.311847] do_splice_direct+0x18d/0x230 [ 329.328816] ? splice_direct_to_actor+0x7b0/0x7b0 [ 329.333668] ? rw_verify_area+0xea/0x2b0 [ 329.333683] do_sendfile+0x4db/0xbd0 [ 329.333702] ? do_compat_pwritev64+0x140/0x140 [ 329.333715] ? fput+0xd4/0x150 [ 329.346043] SyS_sendfile64+0x102/0x110 [ 329.346054] ? SyS_sendfile+0x130/0x130 [ 329.346065] ? do_syscall_64+0x53/0x640 [ 329.346076] ? SyS_sendfile+0x130/0x130 [ 329.346088] do_syscall_64+0x1e8/0x640 [ 329.368987] ? trace_hardirqs_off_thunk+0x1a/0x1c 17:00:09 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:09 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='adfs\x00', 0x2, &(0x7f0000000140)='\x00') [ 329.373837] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 329.379031] RIP: 0033:0x459879 [ 329.382216] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.389927] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 329.397195] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 329.404462] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.411733] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 17:00:09 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 329.419003] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:10 executing program 2 (fault-call:4 fault-nth:44): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x6, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000140), 0xc) 17:00:10 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000000000,timeout=0xB0000000ffe00000,\x00']) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1) write$rfkill(r0, &(0x7f00000001c0)={0x8, 0x6, 0x3}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 17:00:10 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x2800) r2 = dup(r1) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x10000000000000, 0x7a120, 0x8001, {}, 0xfffffffffffffffd}) 17:00:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect(r0, &(0x7f00000000c0)=@un=@file={0x0, './file1\x00'}, 0x80) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)) 17:00:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$netlink(0xffffffffffffffff, &(0x7f0000000140), 0xc) 17:00:10 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x1, 0x4, 0x3, {}, 0x6, 0x4cc}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='dax\x00\x8f\x1d \x94w=]\x14\xe0\xccy\x01\xfb\x19#\xb4O\b\xb4\x9f\x10\ay\x90\xb6Au\xa8\x1b\f%\x90\x04\xf3\xf2x\x81;n\xbc\xe2\xe8n\x1d\x11\xd9?\x90\xeaFH\xbe\xbc1\xf9_\xac\b\xb3\xc8\xea\x8d\x8eN1\'\x04EDN\x85\xaer\x80\xfa\x1eV\xc9\xd5\xeff\x8bK\x1a\xc7\xe4\x9dn\r!>\xde,i_\xa8\xd5\xea\xf1E\x92\x8cG\x0f\xc9[Q*A>s#<\xe1\x99\xda\xd8\b\t\x004\x17\x11\x19*A\xf99\xd5\x1b', 0x200000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x4000) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) 17:00:10 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x67) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x0, @name="dc523a09c567a956aec624aab9666dad33d5ff38e3ed27345ab88aeaab1ece80"}, 0x8, 0xffffffff, 0x9}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 329.650721] FAULT_INJECTION: forcing a failure. [ 329.650721] name failslab, interval 1, probability 0, space 0, times 0 [ 329.662083] audit: type=1400 audit(1567184410.108:116): avc: denied { connect } for pid=25302 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 329.738666] CPU: 1 PID: 25308 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 329.745811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.755170] Call Trace: [ 329.757761] dump_stack+0x138/0x197 [ 329.761420] should_fail.cold+0x10f/0x159 17:00:10 executing program 2 (fault-call:4 fault-nth:45): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:10 executing program 3: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 329.761438] should_failslab+0xdb/0x130 [ 329.761455] kmem_cache_alloc_node_trace+0x280/0x770 [ 329.761474] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 329.761492] __kmalloc_node_track_caller+0x3d/0x80 [ 329.761507] __kmalloc_reserve.isra.0+0x40/0xe0 [ 329.761521] __alloc_skb+0xcf/0x500 [ 329.761532] ? skb_scrub_packet+0x4b0/0x4b0 [ 329.761548] alloc_skb_with_frags+0x86/0x4b0 [ 329.761561] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 329.761586] sock_alloc_send_pskb+0x5db/0x740 [ 329.761610] ? sock_wmalloc+0xf0/0xf0 [ 329.761632] ? _raw_spin_unlock+0x2d/0x50 [ 329.761649] unix_dgram_sendmsg+0x34c/0xf80 [ 329.761662] ? selinux_tun_dev_create+0xc0/0xc0 [ 329.761683] ? unix_stream_connect+0x11f0/0x11f0 [ 329.761701] ? security_socket_sendmsg+0x89/0xb0 [ 329.761712] ? unix_stream_connect+0x11f0/0x11f0 [ 329.761723] sock_sendmsg+0xce/0x110 17:00:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 17:00:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xb2c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000140), 0xc) 17:00:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 329.761735] kernel_sendmsg+0x44/0x50 [ 329.761749] sock_no_sendpage+0x107/0x130 [ 329.761760] ? sock_kzfree_s+0x50/0x50 [ 329.761769] ? find_held_lock+0x35/0x130 [ 329.761796] kernel_sendpage+0x92/0xf0 [ 329.761804] ? sock_kzfree_s+0x50/0x50 [ 329.761816] sock_sendpage+0x8b/0xc0 [ 329.761825] ? timespec_trunc+0xb5/0x120 [ 329.761836] ? kernel_sendpage+0xf0/0xf0 [ 329.761846] pipe_to_sendpage+0x242/0x340 [ 329.761858] ? direct_splice_actor+0x190/0x190 [ 329.761873] __splice_from_pipe+0x348/0x780 [ 329.761883] ? direct_splice_actor+0x190/0x190 [ 329.761899] ? direct_splice_actor+0x190/0x190 [ 329.761908] splice_from_pipe+0xf0/0x150 [ 329.761921] ? splice_shrink_spd+0xb0/0xb0 [ 329.761943] generic_splice_sendpage+0x3c/0x50 [ 329.761951] ? splice_from_pipe+0x150/0x150 [ 329.761963] direct_splice_actor+0x123/0x190 [ 329.761977] splice_direct_to_actor+0x29e/0x7b0 [ 329.761991] ? generic_pipe_buf_nosteal+0x10/0x10 [ 329.762005] ? do_splice_to+0x170/0x170 [ 329.762017] ? rw_verify_area+0xea/0x2b0 [ 329.762030] do_splice_direct+0x18d/0x230 17:00:10 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x3d, &(0x7f00000000c0)={0x24, 0x4, 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000004c0)={0x800, 0x6, 0x1, {0xa, @pix_mp={0x6, 0x10000, 0x4f424752, 0x0, 0x0, [{0x7, 0x1}, {0x9, 0x6}, {0x400, 0x7}, {0xffffffff, 0x1}, {0x1, 0x4526}, {0xff}, {0x4cf4, 0x65b08c48}, {0x3d76, 0x3}], 0x57d6, 0x3, 0x1, 0x2, 0x6}}}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0xfffffffffffffffc, 0x8000000, 0x4, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r3 = dup3(r2, r2, 0x3bbdd2459e733b6e) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setreuid(r5, r6) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000340)={0x1, 0xfffffffffffffffe}, 0x2) write$sndseq(r2, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000005c0)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0xda5, 0x80000000, 0x5, {}, 0x9, 0x5}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/169, 0xa9) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380), &(0x7f0000000400)=0x4) 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 329.762041] ? splice_direct_to_actor+0x7b0/0x7b0 [ 329.762058] ? rw_verify_area+0xea/0x2b0 [ 329.762071] do_sendfile+0x4db/0xbd0 [ 329.762091] ? do_compat_pwritev64+0x140/0x140 [ 329.762106] ? fput+0xd4/0x150 [ 329.762119] SyS_sendfile64+0x102/0x110 [ 329.762130] ? SyS_sendfile+0x130/0x130 [ 329.762140] ? do_syscall_64+0x53/0x640 [ 329.762153] ? SyS_sendfile+0x130/0x130 [ 329.762165] do_syscall_64+0x1e8/0x640 [ 329.762175] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 329.762192] entry_SYSCALL_64_after_hwframe+0x42/0xb7 17:00:10 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x3d, &(0x7f00000000c0)={0x24, 0x4, 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000004c0)={0x800, 0x6, 0x1, {0xa, @pix_mp={0x6, 0x10000, 0x4f424752, 0x0, 0x0, [{0x7, 0x1}, {0x9, 0x6}, {0x400, 0x7}, {0xffffffff, 0x1}, {0x1, 0x4526}, {0xff}, {0x4cf4, 0x65b08c48}, {0x3d76, 0x3}], 0x57d6, 0x3, 0x1, 0x2, 0x6}}}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0xfffffffffffffffc, 0x8000000, 0x4, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r3 = dup3(r2, r2, 0x3bbdd2459e733b6e) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setreuid(r5, r6) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000340)={0x1, 0xfffffffffffffffe}, 0x2) write$sndseq(r2, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000005c0)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0xda5, 0x80000000, 0x5, {}, 0x9, 0x5}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/169, 0xa9) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380), &(0x7f0000000400)=0x4) [ 329.762201] RIP: 0033:0x459879 [ 329.762207] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.762220] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 329.762226] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 329.762231] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 329.762237] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 329.762243] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 329.938845] QAT: Invalid ioctl 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) timer_create(0x5, &(0x7f0000000200)={0x0, 0x3c, 0x23dff9e503c7651a, @thr={&(0x7f0000000000)="c950c49532a026cae6bda2e975c6ef39ad305a1290d19561d6fafefb968c0e8b0dce06cd4c818e7dbe97a25679c3424067d904db7065b2fc75c02f13b9c12ac3fe2403b4473aa9e7ca67017abf668f51354425ce63bbf51c00728ebb0cb97117a75fac78617c014a471f8296213a45f8557b90c8e72d0538bdee91e8ff712040fa164f66e5e0", &(0x7f00000000c0)="9133f21d1c2cad8dfaed69ddbdfe3baf6f3c5cf739715460af5d92005b894ed959492c572200a7bc96e3afb4758be37108a96a680b2fe6597b299c316b624311538556c2bd1a580faea7bc68bcdc05d1cc6e13073da7a67c0d8fbec31c46"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 329.959291] FAULT_INJECTION: forcing a failure. [ 329.959291] name failslab, interval 1, probability 0, space 0, times 0 [ 330.141734] CPU: 1 PID: 25344 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 330.148866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.158214] Call Trace: [ 330.160844] dump_stack+0x138/0x197 [ 330.164479] should_fail.cold+0x10f/0x159 [ 330.168635] should_failslab+0xdb/0x130 [ 330.172616] kmem_cache_alloc_node+0x287/0x780 [ 330.177209] ? __lock_acquire+0x5f7/0x4620 [ 330.181451] __alloc_skb+0x9c/0x500 [ 330.185080] ? skb_scrub_packet+0x4b0/0x4b0 [ 330.189420] alloc_skb_with_frags+0x86/0x4b0 [ 330.193837] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 330.198770] sock_alloc_send_pskb+0x5db/0x740 [ 330.203289] ? sock_wmalloc+0xf0/0xf0 [ 330.207103] ? _raw_spin_unlock+0x2d/0x50 [ 330.211255] unix_dgram_sendmsg+0x34c/0xf80 [ 330.215582] ? selinux_tun_dev_create+0xc0/0xc0 [ 330.220255] ? unix_stream_connect+0x11f0/0x11f0 [ 330.220274] ? security_socket_sendmsg+0x89/0xb0 [ 330.220284] ? unix_stream_connect+0x11f0/0x11f0 [ 330.220294] sock_sendmsg+0xce/0x110 [ 330.220306] kernel_sendmsg+0x44/0x50 [ 330.220319] sock_no_sendpage+0x107/0x130 [ 330.220329] ? sock_kzfree_s+0x50/0x50 [ 330.220353] kernel_sendpage+0x92/0xf0 [ 330.220363] ? sock_kzfree_s+0x50/0x50 [ 330.234611] sock_sendpage+0x8b/0xc0 [ 330.234625] ? timespec_trunc+0xb5/0x120 [ 330.234634] ? kernel_sendpage+0xf0/0xf0 [ 330.242218] pipe_to_sendpage+0x242/0x340 [ 330.242232] ? direct_splice_actor+0x190/0x190 [ 330.242247] __splice_from_pipe+0x348/0x780 [ 330.250255] ? direct_splice_actor+0x190/0x190 [ 330.250272] ? direct_splice_actor+0x190/0x190 [ 330.250280] splice_from_pipe+0xf0/0x150 [ 330.250290] ? splice_shrink_spd+0xb0/0xb0 [ 330.250310] generic_splice_sendpage+0x3c/0x50 [ 330.250317] ? splice_from_pipe+0x150/0x150 [ 330.250328] direct_splice_actor+0x123/0x190 [ 330.250341] splice_direct_to_actor+0x29e/0x7b0 [ 330.250355] ? generic_pipe_buf_nosteal+0x10/0x10 [ 330.323106] ? do_splice_to+0x170/0x170 [ 330.327069] ? rw_verify_area+0xea/0x2b0 [ 330.331135] do_splice_direct+0x18d/0x230 [ 330.335279] ? splice_direct_to_actor+0x7b0/0x7b0 [ 330.340118] ? rw_verify_area+0xea/0x2b0 [ 330.344193] do_sendfile+0x4db/0xbd0 [ 330.347907] ? do_compat_pwritev64+0x140/0x140 [ 330.352486] ? fput+0xd4/0x150 [ 330.355679] SyS_sendfile64+0x102/0x110 [ 330.359650] ? SyS_sendfile+0x130/0x130 [ 330.363609] ? do_syscall_64+0x53/0x640 [ 330.367667] ? SyS_sendfile+0x130/0x130 [ 330.371631] do_syscall_64+0x1e8/0x640 [ 330.375506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.380349] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.385537] RIP: 0033:0x459879 17:00:10 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/144, 0x90}], 0x4, &(0x7f0000002680)=""/186, 0xba}}], 0x1, 0x40000000, &(0x7f0000002740)={0x77359400}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000027c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0x140, 0x140, 0x0, 0x140, 0x248, 0x248, 0x248, 0x248, 0x248, 0x3, &(0x7f0000002780), {[{{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x9, [0x80000001, 0x4, 0x6, 0x7960, 0x7ff], 0x3, 0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0xfffffffffffffffb, 0x800, 0x2, '\x00', 'syz0\x00', 0xfff}}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000280)={0x3, 'rose0\x00', 0x3}, 0x18) sendto(r1, &(0x7f00000000c0)="9d7b2fe05104f3cc502c806d789db72a8e8a6a04ae86c98f4a9d07b25df020bde70192b67463d5e38fd5d4c519814cd95a794d0de17c6d9e0112647bcb4ec1a6302f626f6eee824e4681edf8c5030d9a9a21a28552e556cb860aa7d403f80d89c967ef5ecd67429edb7f99fddae48627198516600ea64adf597023f4c37af282d27c671f44b0678626c19db042b378f0e1760079fab991b3", 0x98, 0x80, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r3 = inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x120010090) inotify_rm_watch(r1, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000002d80)=0xe8) fstat(r2, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000002b00)='ntfs\x00', &(0x7f0000002b40)='./file0/file0\x00', 0x5a3, 0x1, &(0x7f0000002c40)=[{&(0x7f0000002b80)="8c859bf30d59ec97fceca3300145578607a804b7de7c08568b523c9b5890826bd875bd642a46094bfc5b42b525be7125499ebfade20c842871e33e9c002dbd8868f73bb608bf7ec6587ee39a6c5da9f4fee417600bdaa54061d3ee1a7f88b0c71092aeab2493cc58b661948bd6f4eec1d590450f10414db16c4fdd640fb52f2fe4ae9fb90df3d72de65a422cbe919a2314090896c4fed2bd1a139462e2088414", 0xa0, 0x6}], 0x1000, &(0x7f0000002e40)={[{@case_sensitive_no='case_sensitive=no'}], [{@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r4}}, {@euid_gt={'euid>', r5}}, {@audit='audit'}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0xedb9b9f91fa1ba9e, 0x33, 0x3e, 0x65, 0x0, 0x38, 0x61], 0x2d, [0x62, 0x32ca19f8fc558673, 0x77, 0x37], 0x2d, [0x36, 0x7f, 0x61, 0x32], 0x2d, [0x375033ef805fb9ea, 0x32, 0x62, 0x63], 0x2d, [0x62, 0x31, 0x63, 0x35, 0x31, 0x37, 0x38, 0x77]}}}, {@pcr={'pcr', 0x3d, 0x3a}}]}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @broadcast}, {0x306, @remote}, 0xc, {0x2, 0x4e22, @local}, 'team0\x00'}) bind$bt_sco(r1, &(0x7f0000002f00)={0x1f, {0x4, 0xff, 0x8, 0xfffffffffffffffc, 0x6, 0x3}}, 0x8) bind$unix(r2, &(0x7f0000002f40)=@file={0x1, './file0/file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:10 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="4421aa94732e6b5eee461e3d580becf387c60295ad2a14a64dafa0194bbab2a25eb2fe82dfc68e80eb82155b92b23d1fdbd0236e4877db89197dc2a3c8199293486c5b31a2eb2a7510f6f8b84b7b6395369bc4bd8ea3dce71fc13c97057e5162829e83ed481dae32538501eec74d77d251113ddcc15a61e3e9c5956d7727d1d9227efa98ef387797b185f4b9db4768520d53b5d5e0c5f739110628d398376d83705574364b662aec27b2d5c8bbdaf387", 0xb0, 0x2}, {&(0x7f0000000200)="8237bfd5fbca02800261c6ae99049dbd71257a6a53787c28a6288e8387c642a4789ab5b53cd7d44bff9dcde9cbd8e109a5ccc7fe462854c0fad33454c258c85e621f1fda2c8c5f30652fecf1b443d133372b5afac4994475e7a539f4c01f5eab55ba234479889371dc50dccc5dbdd1bb36209b61", 0x74, 0x4}, {&(0x7f00000002c0)="e00c0e54193769f6342ed18bc32a40", 0xf, 0x400}], 0x850, &(0x7f0000000500)={[{@noacl='noacl'}, {@nombcache='nombcache'}, {@barrier='barrier'}, {@errors_continue='errors=continue'}, {@block_validity='block_validity'}, {@errors_continue='errors=continue'}, {@data_err_ignore='data_err=ignore'}, {@errors_continue='errors=continue'}, {@resuid={'resuid'}}], [{@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r0}}, {@subj_user={'subj_user', 0x3d, '127.0.0.1\x00'}}]}) 17:00:10 executing program 3: syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:10 executing program 2 (fault-call:4 fault-nth:46): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:10 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x3d, &(0x7f00000000c0)={0x24, 0x4, 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000004c0)={0x800, 0x6, 0x1, {0xa, @pix_mp={0x6, 0x10000, 0x4f424752, 0x0, 0x0, [{0x7, 0x1}, {0x9, 0x6}, {0x400, 0x7}, {0xffffffff, 0x1}, {0x1, 0x4526}, {0xff}, {0x4cf4, 0x65b08c48}, {0x3d76, 0x3}], 0x57d6, 0x3, 0x1, 0x2, 0x6}}}) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000a00)={0xfffffffffffffffc, 0x8000000, 0x4, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r3 = dup3(r2, r2, 0x3bbdd2459e733b6e) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) setreuid(r5, r6) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000340)={0x1, 0xfffffffffffffffe}, 0x2) write$sndseq(r2, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000005c0)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000000)={0xda5, 0x80000000, 0x5, {}, 0x9, 0x5}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000240)=""/169, 0xa9) getsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380), &(0x7f0000000400)=0x4) 17:00:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1d, 0x0, 0x0, 0x0, @tick, {}, {0x800, 0xfffffffffffffffc}, @result={0x2, 0xfffffffffffff001}}], 0x30) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x408202, 0x0) r2 = geteuid() ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000240)={@default, @null, 0x2, 0x56}) getgroups(0x2, &(0x7f0000000200)=[0xee00, 0xffffffffffffffff]) fchown(r1, r2, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write(r0, &(0x7f0000000040)="5d0c77a546dc91466a785f9000ad3580ab13a5f0b2b4b4929e4ff44c5a46e54215baa77312bf66129185a29b5b3f4d233df2315b98ad697f2537f28cc02259d7784b9e376492b32a24719743c419955a1d6405130c", 0x55) [ 330.388722] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 330.396411] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 330.403661] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 330.411004] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.418263] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 330.425515] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:11 executing program 3: syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='dsx\x00', 0x0, 0x0) 17:00:11 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x40) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 330.519321] FAULT_INJECTION: forcing a failure. [ 330.519321] name failslab, interval 1, probability 0, space 0, times 0 17:00:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x2ffe1d4f37fe83ac) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/255, 0xff) arch_prctl$ARCH_GET_CPUID(0x1011) [ 330.576934] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 330.602627] CPU: 0 PID: 25378 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 330.609758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.619113] Call Trace: [ 330.621705] dump_stack+0x138/0x197 [ 330.625322] should_fail.cold+0x10f/0x159 [ 330.629459] should_failslab+0xdb/0x130 [ 330.633419] kmem_cache_alloc_node_trace+0x280/0x770 [ 330.638510] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 330.643945] __kmalloc_node_track_caller+0x3d/0x80 [ 330.648858] __kmalloc_reserve.isra.0+0x40/0xe0 [ 330.653511] __alloc_skb+0xcf/0x500 [ 330.657119] ? skb_scrub_packet+0x4b0/0x4b0 [ 330.661426] alloc_skb_with_frags+0x86/0x4b0 [ 330.665815] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 330.670731] sock_alloc_send_pskb+0x5db/0x740 [ 330.675217] ? sock_wmalloc+0xf0/0xf0 [ 330.679011] ? _raw_spin_unlock+0x2d/0x50 [ 330.683146] unix_dgram_sendmsg+0x34c/0xf80 [ 330.687459] ? selinux_tun_dev_create+0xc0/0xc0 [ 330.692121] ? unix_stream_connect+0x11f0/0x11f0 [ 330.696886] ? security_socket_sendmsg+0x89/0xb0 [ 330.701623] ? unix_stream_connect+0x11f0/0x11f0 [ 330.706359] sock_sendmsg+0xce/0x110 [ 330.710057] kernel_sendmsg+0x44/0x50 [ 330.713842] sock_no_sendpage+0x107/0x130 [ 330.717972] ? sock_kzfree_s+0x50/0x50 [ 330.721852] kernel_sendpage+0x92/0xf0 [ 330.725720] ? sock_kzfree_s+0x50/0x50 [ 330.729591] sock_sendpage+0x8b/0xc0 [ 330.733288] ? timespec_trunc+0xb5/0x120 [ 330.737332] ? kernel_sendpage+0xf0/0xf0 [ 330.741376] pipe_to_sendpage+0x242/0x340 [ 330.745504] ? direct_splice_actor+0x190/0x190 [ 330.750072] __splice_from_pipe+0x348/0x780 [ 330.754376] ? direct_splice_actor+0x190/0x190 [ 330.758943] ? direct_splice_actor+0x190/0x190 [ 330.763514] splice_from_pipe+0xf0/0x150 [ 330.767558] ? splice_shrink_spd+0xb0/0xb0 [ 330.771783] generic_splice_sendpage+0x3c/0x50 [ 330.776346] ? splice_from_pipe+0x150/0x150 [ 330.780650] direct_splice_actor+0x123/0x190 [ 330.785053] splice_direct_to_actor+0x29e/0x7b0 [ 330.789707] ? generic_pipe_buf_nosteal+0x10/0x10 [ 330.794532] ? do_splice_to+0x170/0x170 [ 330.798500] ? rw_verify_area+0xea/0x2b0 [ 330.802630] do_splice_direct+0x18d/0x230 [ 330.806760] ? splice_direct_to_actor+0x7b0/0x7b0 [ 330.811587] ? rw_verify_area+0xea/0x2b0 [ 330.815633] do_sendfile+0x4db/0xbd0 [ 330.819341] ? do_compat_pwritev64+0x140/0x140 [ 330.823909] ? fput+0xd4/0x150 [ 330.827082] SyS_sendfile64+0x102/0x110 [ 330.831037] ? SyS_sendfile+0x130/0x130 [ 330.835003] ? do_syscall_64+0x53/0x640 [ 330.838961] ? SyS_sendfile+0x130/0x130 [ 330.843111] do_syscall_64+0x1e8/0x640 [ 330.846981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.851814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 330.857428] RIP: 0033:0x459879 [ 330.860598] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 330.868320] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 17:00:11 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) [ 330.875571] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 330.882822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 330.890072] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 330.897322] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x10000) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x2, 0x8, 0x2, 'queue0\x00', 0x8000}) fsetxattr$security_evm(r0, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@ng={0x4, 0xf, "e28d8859c6eb590f2f61d8"}, 0xd, 0x3) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000000, &(0x7f0000000400)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@fscache='fscache'}, {@privport='privport'}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'queue0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}}, {@permit_directio='permit_directio'}, {@fowner_gt={'fowner>', r2}}]}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:11 executing program 3: syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x0, 0x8}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001780)='gfs2meta\x00', 0x10, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x400, 0x18a00) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0xffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) sendmsg(r0, &(0x7f0000001740)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @link_local, 'vxcan1\x00'}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000200)="63b5cde2a95e7dbad5326e240e617c997f257c167e8a35cb527ba863833f0a975f57", 0x22}, {&(0x7f0000000240)="2af8279a772b734bb32c11a094f89638b4134ae504f0e04b806950355522fedfec55daaeb896c89ed509a338766b3d9d1061a3c31b315565ae6c7aa07125d102b23c12339e269e607825ca8f5c84dfeede4b73772ee09f7121ab4e21fcadb1ba771c1a4e6ee858638762747335b9d4b0c1be2f26256d552405dd411e19742febaa20870218282dcfb60d2b5d4aa249a2d5010758c63ae1f88bda3e36d269a8202b1934ef304a641ffae2de0b6b", 0xad}, {&(0x7f0000000340)="f4cbeec5ec8ca5236702c6bf55f2cc5338bfa822041e639e33e4069a31de5dfea2f4003456ebe7bea612625d1f18771ee5ff", 0x32}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="314d83ea44aed3685b19138fdb6eeba6c269822a9ba538b27aad299e0c7e150fab27e715ee132bdcc6e7c49011884bf91c774be457bb1ff507847529aaf93174613d229aeeba4bf4f8146caee10067cba63ea6dc995e975dafcd81def1d685c379c2d06a85367486dc835f68ec133fa52e823ad3c0c4ee34e2b0", 0x7a}, {&(0x7f0000001400)="e2ed46349294784e08732c48bc6a89395e3e6f6fb3404414efc348fe830fc273f1ce243700711230fd317ab63d58a0dcc62b7b83995f83ef550f5a76d32db5dbad7bbce95c27cf280a10242943f862a2c7f7dc02bc19f4f75a5dd8d76d485b8d0f9c8901dac048c0d20b0b53a9f8224029e85c6830bfb5eb37ecff86acc26fc24a4bbab60d225427c5e8819c5d44d13ff2135b3899", 0x95}], 0x6, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x1f0}, 0x8001) 17:00:11 executing program 2 (fault-call:4 fault-nth:47): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x10c00, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x8, 0x7}) 17:00:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) 17:00:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) 17:00:11 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) 17:00:11 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0xfffffffffffffcab, 0x7) [ 331.150411] FAULT_INJECTION: forcing a failure. [ 331.150411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.162429] CPU: 0 PID: 25417 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 331.169538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.178903] Call Trace: [ 331.181501] dump_stack+0x138/0x197 [ 331.185146] should_fail.cold+0x10f/0x159 [ 331.189305] __alloc_pages_nodemask+0x1d6/0x7a0 [ 331.193988] ? fs_reclaim_acquire+0x20/0x20 [ 331.198324] ? __alloc_pages_slowpath+0x2930/0x2930 [ 331.203372] cache_grow_begin+0x80/0x400 [ 331.207550] kmem_cache_alloc_node_trace+0x697/0x770 [ 331.212677] __kmalloc_node_track_caller+0x3d/0x80 [ 331.217615] __kmalloc_reserve.isra.0+0x40/0xe0 [ 331.222289] __alloc_skb+0xcf/0x500 [ 331.225918] ? skb_scrub_packet+0x4b0/0x4b0 [ 331.230234] alloc_skb_with_frags+0x86/0x4b0 [ 331.234631] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 331.239555] sock_alloc_send_pskb+0x5db/0x740 [ 331.244050] ? sock_wmalloc+0xf0/0xf0 [ 331.247846] ? _raw_spin_unlock+0x2d/0x50 [ 331.251984] unix_dgram_sendmsg+0x34c/0xf80 [ 331.256315] ? selinux_tun_dev_create+0xc0/0xc0 [ 331.260995] ? unix_stream_connect+0x11f0/0x11f0 [ 331.265736] ? security_socket_sendmsg+0x89/0xb0 [ 331.270477] ? unix_stream_connect+0x11f0/0x11f0 [ 331.275214] sock_sendmsg+0xce/0x110 [ 331.278909] kernel_sendmsg+0x44/0x50 [ 331.282698] sock_no_sendpage+0x107/0x130 [ 331.286834] ? sock_kzfree_s+0x50/0x50 [ 331.290720] kernel_sendpage+0x92/0xf0 [ 331.294588] ? sock_kzfree_s+0x50/0x50 [ 331.298457] sock_sendpage+0x8b/0xc0 [ 331.302174] ? timespec_trunc+0xb5/0x120 [ 331.306216] ? kernel_sendpage+0xf0/0xf0 [ 331.310256] pipe_to_sendpage+0x242/0x340 [ 331.314383] ? direct_splice_actor+0x190/0x190 [ 331.318947] __splice_from_pipe+0x348/0x780 [ 331.323253] ? direct_splice_actor+0x190/0x190 [ 331.327819] ? direct_splice_actor+0x190/0x190 [ 331.332395] splice_from_pipe+0xf0/0x150 [ 331.336450] ? splice_shrink_spd+0xb0/0xb0 [ 331.340672] generic_splice_sendpage+0x3c/0x50 [ 331.345231] ? splice_from_pipe+0x150/0x150 [ 331.349531] direct_splice_actor+0x123/0x190 [ 331.353920] splice_direct_to_actor+0x29e/0x7b0 [ 331.358571] ? generic_pipe_buf_nosteal+0x10/0x10 [ 331.363397] ? do_splice_to+0x170/0x170 [ 331.367351] ? rw_verify_area+0xea/0x2b0 [ 331.371392] do_splice_direct+0x18d/0x230 [ 331.375523] ? splice_direct_to_actor+0x7b0/0x7b0 [ 331.380348] ? rw_verify_area+0xea/0x2b0 [ 331.384391] do_sendfile+0x4db/0xbd0 [ 331.388101] ? do_compat_pwritev64+0x140/0x140 [ 331.392665] ? fput+0xd4/0x150 [ 331.395848] SyS_sendfile64+0x102/0x110 [ 331.399809] ? SyS_sendfile+0x130/0x130 [ 331.403761] ? do_syscall_64+0x53/0x640 [ 331.407715] ? SyS_sendfile+0x130/0x130 [ 331.411667] do_syscall_64+0x1e8/0x640 [ 331.415535] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.420369] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 331.425549] RIP: 0033:0x459879 [ 331.428718] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 331.436403] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 331.443653] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 331.450902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.458151] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 331.465400] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x100000000) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=rdma,', {'port'}, 0x2c, {[{@sq={'sq', 0x3d, 0x9c80000000000000}}], [{@smackfstransmute={'smackfstransmute'}}, {@uid_lt={'uid<', r0}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r0}}, {@measure='measure'}, {@dont_hash='dont_hash'}]}}) 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x40, 0x100) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x5, 0x7fff, 0x1ff, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x7}], 0x30) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0x8001, {r2, r3+10000000}, 0xffffffff}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file1\x00', 0xa001, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000400)="d4661416e9a7d7918a18a0bb6721086df87d1579364440295395492639aa233e1e7975f82edcd6d95b3e607ce95a4eb473f787be1f52c5b02ca96dac9d6459d1f50514e7713d292325aa03d6ccdfbac2ab52b71a72e39071226ddfdc74620e52dafd8fb731611eef5e406a2899d6a17ee1c1f45c965143b3c65773f405be242619f4bc51c0134318fc9dc7f681975bbf5a74f5feee81909d3d47aad57aa57bcb4bec7eb0ee0abfbdf02361ff2fa9701e0e2a21e5d527aa62e98252e74dc907761e894cab57797c8910cff81cffa30ba5944491057146f7b43680", 0xda, 0x1f}, {&(0x7f0000000500)="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", 0x1000, 0xfff}, {&(0x7f0000000280)="60c57ecc7aacb64fa2996ead112cb5b10a32b502636c04063a10f3ffef987397b53414e5191af9a1c67b543d211b09a23bbd7592d0796a8e6a4aaaf385d4c0e944e9084aba95699abac65032b8fc2f6fe143b1f9cdb612a687f263224fa54bb4368e0ba1ea31641ea9e2", 0x6a, 0xc46}, {&(0x7f0000001500)="a20a31aede9cd479835ae47bd7ca2f6e361141594cbe9b66eb78a4653cc95a462f60c77687d8e6fcfa8fd53bc5d43d04899350c7771c0440c9c3991ea4ebc70888897b84fd693233938aa1175abbe27b23c0d8146fa38a78be247ca167d920956796d584692e301c29b848f7d8c5ac1f70400197298a32001875e38164e2043f623bb5d0b150fc485100a268fba32bee45b570bc6df57d75abdaa2bc356848b74bb86ca3ea396d48acdf59c8cc1b0e3138f6b0a6f38fb969", 0xb8, 0x1}, {&(0x7f0000000340)="119fa3ca75ae12441d78106197b052223663e0dc263a24372fb5f6864f0c5e62c64a90066c57aad1d1d5ab63c391fda194c77a3ac05a9f75da77db6689fc3e9ef1d90ceae0da9e2bc0ca748be6a9ff4c18f7c2b081711c49b92373a6d3c47c9ed513743e59f5aa", 0x67, 0xfff}], 0x40004, &(0x7f0000001640)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00') ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x9f0000, 0x82b, 0x0, [], &(0x7f00000016c0)={0x9f0bfb, 0x5, [], @string=&(0x7f0000001680)=0x3c2c}}) 17:00:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x101104) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0xfb3433f97ad0d2b0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000440)=""/130, &(0x7f00000003c0)=0x82) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000500)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, 0x1, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @default]}) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0xff, 0x40, "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", 0xf2, 0x3, 0x24ae, 0x675a, 0x1, 0x101, 0xffffffffffff9976, 0x1}, r3}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x100000000015, 0x0, 0x8003, 'queue1\x00', 0xe7}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x80004, 0x0) ioctl$KDENABIO(r4, 0x4b36) 17:00:12 executing program 2 (fault-call:4 fault-nth:48): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, 0x0) 17:00:12 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x800) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x82000, 0x0) bind$isdn_base(r1, &(0x7f0000000380)={0x22, 0x4, 0x8, 0x5}, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@empty, @remote, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0x7, 0x4e20, 0x0, 0x0, 0x20, 0x80, 0x2b, r2, r3}, {0x8, 0x800, 0x6, 0x80000000, 0x3, 0x401, 0x6, 0x20}, {0xf018, 0x4, 0x1, 0x20}, 0x800, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@loopback, 0x4d6}, 0xa, @in=@remote, 0x0, 0x3, 0x2, 0x0, 0xe1c5, 0xfffffffffffffffa, 0x8}}, 0xe8) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) [ 331.551952] 9pnet_virtio: no channels available for device 127.0.0.1 [ 331.656800] FAULT_INJECTION: forcing a failure. [ 331.656800] name failslab, interval 1, probability 0, space 0, times 0 [ 331.692959] CPU: 1 PID: 25446 Comm: syz-executor.2 Not tainted 4.14.141 #37 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x40, 0x100) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x5, 0x7fff, 0x1ff, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x7}], 0x30) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0x8001, {r2, r3+10000000}, 0xffffffff}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file1\x00', 0xa001, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000400)="d4661416e9a7d7918a18a0bb6721086df87d1579364440295395492639aa233e1e7975f82edcd6d95b3e607ce95a4eb473f787be1f52c5b02ca96dac9d6459d1f50514e7713d292325aa03d6ccdfbac2ab52b71a72e39071226ddfdc74620e52dafd8fb731611eef5e406a2899d6a17ee1c1f45c965143b3c65773f405be242619f4bc51c0134318fc9dc7f681975bbf5a74f5feee81909d3d47aad57aa57bcb4bec7eb0ee0abfbdf02361ff2fa9701e0e2a21e5d527aa62e98252e74dc907761e894cab57797c8910cff81cffa30ba5944491057146f7b43680", 0xda, 0x1f}, {&(0x7f0000000500)="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", 0x1000, 0xfff}, {&(0x7f0000000280)="60c57ecc7aacb64fa2996ead112cb5b10a32b502636c04063a10f3ffef987397b53414e5191af9a1c67b543d211b09a23bbd7592d0796a8e6a4aaaf385d4c0e944e9084aba95699abac65032b8fc2f6fe143b1f9cdb612a687f263224fa54bb4368e0ba1ea31641ea9e2", 0x6a, 0xc46}, {&(0x7f0000001500)="a20a31aede9cd479835ae47bd7ca2f6e361141594cbe9b66eb78a4653cc95a462f60c77687d8e6fcfa8fd53bc5d43d04899350c7771c0440c9c3991ea4ebc70888897b84fd693233938aa1175abbe27b23c0d8146fa38a78be247ca167d920956796d584692e301c29b848f7d8c5ac1f70400197298a32001875e38164e2043f623bb5d0b150fc485100a268fba32bee45b570bc6df57d75abdaa2bc356848b74bb86ca3ea396d48acdf59c8cc1b0e3138f6b0a6f38fb969", 0xb8, 0x1}, {&(0x7f0000000340)="119fa3ca75ae12441d78106197b052223663e0dc263a24372fb5f6864f0c5e62c64a90066c57aad1d1d5ab63c391fda194c77a3ac05a9f75da77db6689fc3e9ef1d90ceae0da9e2bc0ca748be6a9ff4c18f7c2b081711c49b92373a6d3c47c9ed513743e59f5aa", 0x67, 0xfff}], 0x40004, &(0x7f0000001640)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00') ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x9f0000, 0x82b, 0x0, [], &(0x7f00000016c0)={0x9f0bfb, 0x5, [], @string=&(0x7f0000001680)=0x3c2c}}) 17:00:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0xa0006) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x402, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x4, 0x8001}) [ 331.700095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.709479] Call Trace: [ 331.712076] dump_stack+0x138/0x197 [ 331.715725] should_fail.cold+0x10f/0x159 [ 331.719886] should_failslab+0xdb/0x130 [ 331.723871] kmem_cache_alloc_node_trace+0x280/0x770 [ 331.729081] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 331.734540] __kmalloc_node_track_caller+0x3d/0x80 [ 331.739476] __kmalloc_reserve.isra.0+0x40/0xe0 [ 331.744150] __alloc_skb+0xcf/0x500 [ 331.747774] ? skb_scrub_packet+0x4b0/0x4b0 [ 331.752099] alloc_skb_with_frags+0x86/0x4b0 17:00:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x3f, 0x8000, 0x9, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x5}, {r0, 0x0, 0x405}, {r0, 0x0, 0xffff}, {r0, 0x0, 0x2}, {r0, 0x0, 0xe2f}, {r0, 0x0, 0xfff}, {r0, 0x0, 0x100000000}, {r0, 0x0, 0x3}]}) prlimit64(r1, 0x5a556eb2ba40438d, &(0x7f0000000200)={0x7fffffff, 0x755a}, &(0x7f0000000240)) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x500, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x7, 0x3, 0x8, &(0x7f0000ffa000/0x4000)=nil, 0x3ff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0xffff, 0x5, 0x9, {}, 0x5, 0x5}) [ 331.756504] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 331.756519] sock_alloc_send_pskb+0x5db/0x740 [ 331.756537] ? sock_wmalloc+0xf0/0xf0 [ 331.769726] ? _raw_spin_unlock+0x2d/0x50 [ 331.773878] unix_dgram_sendmsg+0x34c/0xf80 [ 331.778205] ? selinux_tun_dev_create+0xc0/0xc0 [ 331.782879] ? unix_stream_connect+0x11f0/0x11f0 [ 331.782899] ? security_socket_sendmsg+0x89/0xb0 [ 331.782909] ? unix_stream_connect+0x11f0/0x11f0 [ 331.782919] sock_sendmsg+0xce/0x110 17:00:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x0, @time, {0x4}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 331.782931] kernel_sendmsg+0x44/0x50 [ 331.782943] sock_no_sendpage+0x107/0x130 [ 331.782954] ? sock_kzfree_s+0x50/0x50 [ 331.782965] ? find_held_lock+0x35/0x130 [ 331.782991] kernel_sendpage+0x92/0xf0 [ 331.782999] ? sock_kzfree_s+0x50/0x50 [ 331.783010] sock_sendpage+0x8b/0xc0 [ 331.832489] ? timespec_trunc+0xb5/0x120 [ 331.836556] ? kernel_sendpage+0xf0/0xf0 [ 331.840624] pipe_to_sendpage+0x242/0x340 [ 331.844780] ? direct_splice_actor+0x190/0x190 [ 331.849372] __splice_from_pipe+0x348/0x780 [ 331.853696] ? direct_splice_actor+0x190/0x190 [ 331.858941] ? direct_splice_actor+0x190/0x190 [ 331.863526] splice_from_pipe+0xf0/0x150 [ 331.867593] ? splice_shrink_spd+0xb0/0xb0 [ 331.871842] generic_splice_sendpage+0x3c/0x50 [ 331.876440] ? splice_from_pipe+0x150/0x150 [ 331.880765] direct_splice_actor+0x123/0x190 [ 331.885176] splice_direct_to_actor+0x29e/0x7b0 [ 331.889881] ? generic_pipe_buf_nosteal+0x10/0x10 [ 331.894729] ? do_splice_to+0x170/0x170 [ 331.898706] ? rw_verify_area+0xea/0x2b0 [ 331.902775] do_splice_direct+0x18d/0x230 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x40, 0x100) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x5, 0x7fff, 0x1ff, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e, 0x0, 0x0, 0x7}], 0x30) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x0, 0x1, 0x8001, {r2, r3+10000000}, 0xffffffff}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file1\x00', 0xa001, 0x5, &(0x7f00000015c0)=[{&(0x7f0000000400)="d4661416e9a7d7918a18a0bb6721086df87d1579364440295395492639aa233e1e7975f82edcd6d95b3e607ce95a4eb473f787be1f52c5b02ca96dac9d6459d1f50514e7713d292325aa03d6ccdfbac2ab52b71a72e39071226ddfdc74620e52dafd8fb731611eef5e406a2899d6a17ee1c1f45c965143b3c65773f405be242619f4bc51c0134318fc9dc7f681975bbf5a74f5feee81909d3d47aad57aa57bcb4bec7eb0ee0abfbdf02361ff2fa9701e0e2a21e5d527aa62e98252e74dc907761e894cab57797c8910cff81cffa30ba5944491057146f7b43680", 0xda, 0x1f}, {&(0x7f0000000500)="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", 0x1000, 0xfff}, {&(0x7f0000000280)="60c57ecc7aacb64fa2996ead112cb5b10a32b502636c04063a10f3ffef987397b53414e5191af9a1c67b543d211b09a23bbd7592d0796a8e6a4aaaf385d4c0e944e9084aba95699abac65032b8fc2f6fe143b1f9cdb612a687f263224fa54bb4368e0ba1ea31641ea9e2", 0x6a, 0xc46}, {&(0x7f0000001500)="a20a31aede9cd479835ae47bd7ca2f6e361141594cbe9b66eb78a4653cc95a462f60c77687d8e6fcfa8fd53bc5d43d04899350c7771c0440c9c3991ea4ebc70888897b84fd693233938aa1175abbe27b23c0d8146fa38a78be247ca167d920956796d584692e301c29b848f7d8c5ac1f70400197298a32001875e38164e2043f623bb5d0b150fc485100a268fba32bee45b570bc6df57d75abdaa2bc356848b74bb86ca3ea396d48acdf59c8cc1b0e3138f6b0a6f38fb969", 0xb8, 0x1}, {&(0x7f0000000340)="119fa3ca75ae12441d78106197b052223663e0dc263a24372fb5f6864f0c5e62c64a90066c57aad1d1d5ab63c391fda194c77a3ac05a9f75da77db6689fc3e9ef1d90ceae0da9e2bc0ca748be6a9ff4c18f7c2b081711c49b92373a6d3c47c9ed513743e59f5aa", 0x67, 0xfff}], 0x40004, &(0x7f0000001640)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x00\x06\x00\x00\x00\x00\x00\xfa\x00') ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001700)={0x9f0000, 0x82b, 0x0, [], &(0x7f00000016c0)={0x9f0bfb, 0x5, [], @string=&(0x7f0000001680)=0x3c2c}}) 17:00:12 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x800000, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 331.906927] ? splice_direct_to_actor+0x7b0/0x7b0 [ 331.911778] ? rw_verify_area+0xea/0x2b0 [ 331.915850] do_sendfile+0x4db/0xbd0 [ 331.919580] ? do_compat_pwritev64+0x140/0x140 [ 331.924169] ? fput+0xd4/0x150 [ 331.927363] SyS_sendfile64+0x102/0x110 [ 331.931338] ? SyS_sendfile+0x130/0x130 [ 331.935312] ? do_syscall_64+0x53/0x640 [ 331.939285] ? SyS_sendfile+0x130/0x130 [ 331.939302] do_syscall_64+0x1e8/0x640 [ 331.947231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.952079] entry_SYSCALL_64_after_hwframe+0x42/0xb7 17:00:12 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x2, 0x400000) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) lchown(&(0x7f0000000100)='./file0/file0\x00', r1, r2) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x101, 0x3ff}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r3}, 0x8) 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) 17:00:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x5, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) [ 331.957268] RIP: 0033:0x459879 [ 331.960456] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 331.968172] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 331.975445] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 331.982717] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 331.989992] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 331.997271] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:12 executing program 2 (fault-call:4 fault-nth:49): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:12 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x440c80, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x6, 0x3, 0x8, 0xffffffff, 'syz0\x00'}, 0x1, 0x10000000, 0xffffffff, r1, 0x5, 0xdf7d, 'syz1\x00', &(0x7f00000000c0)=['\x00', '\x00', 'vmnet0wlan1[.\x00', 'keyringsecurity\x00', 'ynodev\x00'], 0x27, [], [0x10001, 0x1, 0x3, 0xfff]}) 17:00:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x92000, 0x0) write$apparmor_current(r1, &(0x7f0000000080)=@hat={'changehat ', 0x3, 0x5e, ['\x00', '-\xa5\x00', 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', '@@\\\x00', '!md5sumGPL@.,selinux\x00', 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', '/dev/snd/seq\x00']}, 0xa7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x2000000000, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00', 0xfffffdfffffffffe}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x1) 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) 17:00:12 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x200000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 17:00:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x101, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:12 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 17:00:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) [ 332.188664] FAULT_INJECTION: forcing a failure. [ 332.188664] name failslab, interval 1, probability 0, space 0, times 0 17:00:12 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x10010) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:12 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0x1e}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) [ 332.234003] CPU: 1 PID: 25496 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 332.241151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.241156] Call Trace: [ 332.241175] dump_stack+0x138/0x197 [ 332.241195] should_fail.cold+0x10f/0x159 [ 332.241232] should_failslab+0xdb/0x130 [ 332.241247] kmem_cache_alloc_node_trace+0x280/0x770 [ 332.241263] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 332.241280] __kmalloc_node_track_caller+0x3d/0x80 [ 332.241296] __kmalloc_reserve.isra.0+0x40/0xe0 [ 332.241309] __alloc_skb+0xcf/0x500 [ 332.241319] ? skb_scrub_packet+0x4b0/0x4b0 [ 332.241334] alloc_skb_with_frags+0x86/0x4b0 [ 332.293102] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 332.293122] sock_alloc_send_pskb+0x5db/0x740 [ 332.293140] ? sock_wmalloc+0xf0/0xf0 [ 332.310718] ? _raw_spin_unlock+0x2d/0x50 [ 332.314871] unix_dgram_sendmsg+0x34c/0xf80 [ 332.314885] ? selinux_tun_dev_create+0xc0/0xc0 [ 332.314905] ? unix_stream_connect+0x11f0/0x11f0 [ 332.314922] ? security_socket_sendmsg+0x89/0xb0 17:00:12 executing program 5: lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x88000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e01800000000000006f72743d3078303030303030303030303030303030302c74696d656f75743d3078303030303030303066666530303030302c00"]) [ 332.333361] ? unix_stream_connect+0x11f0/0x11f0 [ 332.333374] sock_sendmsg+0xce/0x110 [ 332.333387] kernel_sendmsg+0x44/0x50 [ 332.333405] sock_no_sendpage+0x107/0x130 [ 332.333416] ? sock_kzfree_s+0x50/0x50 [ 332.333442] kernel_sendpage+0x92/0xf0 [ 332.333450] ? sock_kzfree_s+0x50/0x50 [ 332.333463] sock_sendpage+0x8b/0xc0 [ 332.365146] ? timespec_trunc+0xb5/0x120 [ 332.369218] ? kernel_sendpage+0xf0/0xf0 [ 332.373289] pipe_to_sendpage+0x242/0x340 [ 332.377441] ? direct_splice_actor+0x190/0x190 17:00:12 executing program 1: prctl$PR_SET_FPEMU(0xa, 0xbe5ef2c477694c22) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 332.382025] __splice_from_pipe+0x348/0x780 [ 332.386348] ? direct_splice_actor+0x190/0x190 [ 332.390941] ? direct_splice_actor+0x190/0x190 [ 332.395518] splice_from_pipe+0xf0/0x150 [ 332.395532] ? splice_shrink_spd+0xb0/0xb0 [ 332.395551] generic_splice_sendpage+0x3c/0x50 [ 332.403804] ? splice_from_pipe+0x150/0x150 [ 332.403815] direct_splice_actor+0x123/0x190 [ 332.403829] splice_direct_to_actor+0x29e/0x7b0 [ 332.403844] ? generic_pipe_buf_nosteal+0x10/0x10 [ 332.403858] ? do_splice_to+0x170/0x170 [ 332.403872] ? rw_verify_area+0xea/0x2b0 [ 332.434740] do_splice_direct+0x18d/0x230 [ 332.438900] ? splice_direct_to_actor+0x7b0/0x7b0 [ 332.443751] ? rw_verify_area+0xea/0x2b0 [ 332.444537] 9pnet_virtio: no channels available for device 127.0.0.1 [ 332.447829] do_sendfile+0x4db/0xbd0 [ 332.447850] ? do_compat_pwritev64+0x140/0x140 [ 332.447866] ? fput+0xd4/0x150 [ 332.465803] SyS_sendfile64+0x102/0x110 [ 332.469779] ? SyS_sendfile+0x130/0x130 [ 332.473752] ? do_syscall_64+0x53/0x640 [ 332.477730] ? SyS_sendfile+0x130/0x130 [ 332.481705] do_syscall_64+0x1e8/0x640 [ 332.485599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.490448] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.495643] RIP: 0033:0x459879 [ 332.498829] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.506795] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 332.506803] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 332.516469] 9pnet_virtio: no channels available for device 127.0.0.1 [ 332.521317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 17:00:13 executing program 2 (fault-call:4 fault-nth:50): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:13 executing program 0 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0x0, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 17:00:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x1000, 0x6}, 0x76ee, 0x5}) 17:00:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) mkdir(&(0x7f0000000080)='./file0\x00', 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000340), 0x4) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000380)=@routing={0x3b, 0xc, 0x1, 0xfb8, 0x0, [@mcast1, @ipv4={[], [], @multicast2}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @remote, @loopback]}, 0x68) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000001c0)={0x4a, "b1f9e6860938091fad679ee4912743c2c935a22bceee6122a847385dad367d0abd59c48c409bad30f79dcedbd604160d0da046b23390df74fb4ac68e59e9b5b237a0a2317186dc67a43b4e0d244210ab5ea91b8fffb5808dc13bf29816ff5d1cf7d2970a5943ecfc31831fd6204e68a65d609339fe012ccb5be0e093547d35bd"}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:13 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xfffffffffffffffb, 0xb3f0, 0x9fe}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 332.521324] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 332.521330] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000a00)={0x0, 0x0, 0xfffffffffffffffd, 'Queue\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xff\x00\x00\t\x00\x00\x00\x00\x01\x00\x00\xe2\xff\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x1e}], 0xffffff14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0x0, 0x7a120, 0x8001}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) [ 332.663965] FAULT_INJECTION: forcing a failure. [ 332.663965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.675812] CPU: 1 PID: 25538 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 332.682913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.692277] Call Trace: [ 332.694873] dump_stack+0x138/0x197 [ 332.698516] should_fail.cold+0x10f/0x159 [ 332.702669] __alloc_pages_nodemask+0x1d6/0x7a0 [ 332.707328] ? fs_reclaim_acquire+0x20/0x20 17:00:13 executing program 4 (fault-call:1 fault-nth:0): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 332.707342] ? __alloc_pages_slowpath+0x2930/0x2930 [ 332.707365] cache_grow_begin+0x80/0x400 [ 332.720754] kmem_cache_alloc_node_trace+0x697/0x770 [ 332.725869] __kmalloc_node_track_caller+0x3d/0x80 [ 332.730802] __kmalloc_reserve.isra.0+0x40/0xe0 [ 332.735474] __alloc_skb+0xcf/0x500 [ 332.739102] ? skb_scrub_packet+0x4b0/0x4b0 [ 332.743431] alloc_skb_with_frags+0x86/0x4b0 [ 332.747843] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 332.752775] sock_alloc_send_pskb+0x5db/0x740 [ 332.757278] ? sock_wmalloc+0xf0/0xf0 [ 332.761090] ? _raw_spin_unlock+0x2d/0x50 [ 332.765252] unix_dgram_sendmsg+0x34c/0xf80 [ 332.769576] ? selinux_tun_dev_create+0xc0/0xc0 [ 332.774259] ? unix_stream_connect+0x11f0/0x11f0 [ 332.779026] ? security_socket_sendmsg+0x89/0xb0 [ 332.783786] ? unix_stream_connect+0x11f0/0x11f0 [ 332.788569] sock_sendmsg+0xce/0x110 [ 332.792280] kernel_sendmsg+0x44/0x50 [ 332.796084] sock_no_sendpage+0x107/0x130 [ 332.796954] FAULT_INJECTION: forcing a failure. [ 332.796954] name failslab, interval 1, probability 0, space 0, times 0 [ 332.800226] ? sock_kzfree_s+0x50/0x50 [ 332.800256] kernel_sendpage+0x92/0xf0 [ 332.800264] ? sock_kzfree_s+0x50/0x50 [ 332.800275] sock_sendpage+0x8b/0xc0 [ 332.800286] ? timespec_trunc+0xb5/0x120 [ 332.800295] ? kernel_sendpage+0xf0/0xf0 [ 332.800305] pipe_to_sendpage+0x242/0x340 [ 332.800317] ? direct_splice_actor+0x190/0x190 [ 332.800333] __splice_from_pipe+0x348/0x780 [ 332.848010] ? direct_splice_actor+0x190/0x190 [ 332.852600] ? direct_splice_actor+0x190/0x190 [ 332.857188] splice_from_pipe+0xf0/0x150 [ 332.861247] ? splice_shrink_spd+0xb0/0xb0 [ 332.865494] generic_splice_sendpage+0x3c/0x50 [ 332.870074] ? splice_from_pipe+0x150/0x150 [ 332.874390] direct_splice_actor+0x123/0x190 [ 332.878791] splice_direct_to_actor+0x29e/0x7b0 [ 332.883454] ? generic_pipe_buf_nosteal+0x10/0x10 [ 332.888290] ? do_splice_to+0x170/0x170 [ 332.892257] ? rw_verify_area+0xea/0x2b0 [ 332.896315] do_splice_direct+0x18d/0x230 [ 332.900459] ? splice_direct_to_actor+0x7b0/0x7b0 [ 332.905316] ? rw_verify_area+0xea/0x2b0 [ 332.909375] do_sendfile+0x4db/0xbd0 [ 332.913099] ? do_compat_pwritev64+0x140/0x140 [ 332.917678] ? fput+0xd4/0x150 [ 332.920883] SyS_sendfile64+0x102/0x110 [ 332.924853] ? SyS_sendfile+0x130/0x130 [ 332.928821] ? do_syscall_64+0x53/0x640 [ 332.932802] ? SyS_sendfile+0x130/0x130 [ 332.936778] do_syscall_64+0x1e8/0x640 [ 332.940659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.945507] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 332.950692] RIP: 0033:0x459879 [ 332.953877] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.961582] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 332.968850] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 332.976130] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 332.983400] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 332.990676] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 332.998941] CPU: 0 PID: 25551 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 333.006055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.015395] Call Trace: [ 333.015411] dump_stack+0x138/0x197 [ 333.015428] should_fail.cold+0x10f/0x159 [ 333.015443] should_failslab+0xdb/0x130 [ 333.026263] __kmalloc_track_caller+0x2ec/0x790 [ 333.034875] ? __sb_end_write+0xc1/0x100 [ 333.039034] ? strndup_user+0x62/0xf0 [ 333.039048] memdup_user+0x26/0xa0 [ 333.039058] strndup_user+0x62/0xf0 [ 333.039071] SyS_mount+0x3c/0x120 [ 333.053468] ? copy_mnt_ns+0x8c0/0x8c0 [ 333.053484] do_syscall_64+0x1e8/0x640 [ 333.053495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.066081] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.071272] RIP: 0033:0x459879 [ 333.074458] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.082185] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 333.089539] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 333.096806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.104073] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 17:00:13 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000780)='dax\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8) stat(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a00)=0x0) getresuid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) getresgid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0) r7 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/usbmon0\x00', 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/net/tun\x00', 0x100, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000cc0)='/dev/dsp#\x00', 0x4, 0x11cd54abd28c7a71) r10 = socket$rxrpc(0x21, 0x2, 0xa) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/full\x00', 0x111000, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f00000011c0)='syz1\x00', 0x200002, 0x0) r13 = socket$inet6(0xa, 0x6, 0x80000000) r14 = syz_open_dev$sndmidi(&(0x7f0000001200)='/dev/snd/midiC#D#\x00', 0x2, 0x40000) r15 = socket$alg(0x26, 0x5, 0x0) r16 = accept$unix(0xffffffffffffffff, &(0x7f0000001a00), &(0x7f0000001a80)=0x6e) r17 = syz_open_dev$vcsn(&(0x7f0000001ac0)='/dev/vcs#\x00', 0x90, 0x200) r18 = timerfd_create(0x2, 0x80000) r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b00)='./cgroup.net/syz1\x00', 0x200002, 0x0) r20 = syz_open_dev$media(&(0x7f0000001b40)='/dev/media#\x00', 0x7, 0x400000) r21 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001b80)='/selinux/member\x00', 0x2, 0x0) r22 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001bc0)=@id, &(0x7f0000001c00)=0x10, 0x800) r23 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003480)={0x0}, &(0x7f00000034c0)=0xc) r25 = geteuid() getresgid(&(0x7f0000003500), &(0x7f0000003540)=0x0, &(0x7f0000003580)) r27 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000035c0)='memory.max\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003600)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003640)={0x0, 0x0}, &(0x7f0000003680)=0xc) lstat(&(0x7f00000036c0)='./file1\x00', &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r32 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r33 = syz_open_dev$sndctrl(&(0x7f0000003780)='/dev/snd/controlC#\x00', 0x9, 0x40000) r34 = syz_open_dev$evdev(&(0x7f00000037c0)='/dev/input/event#\x00', 0xee5, 0x800) r35 = syz_open_dev$amidi(&(0x7f0000003800)='/dev/amidi#\x00', 0x8, 0x101000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003d00)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="a0d33d6ba774946500051d0efedc9e87dd370de869fc1c41659be440e5c2611653eb1ee595187b1dc18421", 0x2b}, {&(0x7f0000000240)="db90754927ea495bca537c07", 0xc}, {&(0x7f0000000280)="a69cff93e1ad0dc33bc63402846b0a302687978f206ea3d9f38eff7dc1a469f93ad1bc5a7afc2b344352d762e7dcaf10f8a6577af05a75688a751337421c26bfe18d9cd52246fb88629611c07158", 0x4e}, {&(0x7f0000000340)="f0f310ac5c58f7d90347b46c20cd", 0xe}, {&(0x7f0000000380)="bdf311a1ee5a5fbcae4fc783a6c81b6d7f4c7c8f0722e18111f5fa4214baaceaccf4740f69717647af8a2e68bdca29c0ef3235590084d3a497cff3b4bba9eb869349c62017f4114558df11f7f56d96a84cc4cc96755130c83176e87aab968f091fbb4c20ee4cb4ee32a2d7abaa6672d2cbec", 0x72}, {&(0x7f0000000400)="8d885bc8fe21d6c7baeee4687814a3cda0a62a4ad341c55ffd94b829b5eb7f8e3e73b3ae2e5bfdda00b91f38b94eda669d5cd9488fe0c9a284bc5b9008b27ac8a1ab4f4060f6c6ebaa73a0b5aa86f820d7a5f91ec01a60b6c0c892d305d3f9b2f60f5575f10414a17b74c437b4443eee5f66375880de639c1c38ab955a844d39ce702ce4e931b559fe9bb6d2f2d2a81033477695db8ad66a4f0b5a7c960e16f7a4decfe28338b81a5e6059", 0xab}, {&(0x7f00000004c0)="c89befd0e090b59576cce7d8b169f42a5dee07cbdea1362c13fe814480333e3e5365ab036a531e89efa9964043579ff6cd18fbf539b15a0f5add2f39ff7d69792b51c9b7a22f906d86e53f915994864c399cad76ec010dc60366596bdef7d8cfe3a5fc42f9f27558cd4adf97f0263209cee57ec2c4f117be57b350bf7279b211a27ad74826d0561e5ec65ba1f969beae237a8560abc0dc50f80f78eae7fb63451d223d351150457d04c4c749fa7eedb86e621cf3e75eb9a55b457921dfe6be23b88fca722d17fa138603ad56053981dc2f87492abab35ff537b242b9383f7707", 0xe0}, {&(0x7f00000005c0)="94a52f69543ce57f853345f361758104c247f35680f3d0a420c7b4f7933a4a3bf6b532c960e7c91204b7d46abd56312664e417d2d1bc35ae7574868c3b25e5519edd9f128e3bbd0c723891df9b974a3faf4b1fc03f57205908fd366840e52877b7a38978deb622f89cb84cf9f8814d334ac8982a", 0x74}, {&(0x7f0000000640)="92295d4d0895b5aa13f52677307584cd8f195a102d32d06879a1dac8e52a137635652b39ed5220c3f7c41ba4020eb3c549f90c36464986f3aba07a9cb9d0c9f555", 0x41}], 0x9, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r10, r11]}}], 0x78}, {&(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e40)="439352776584bd76f1965da443740612104d994f80987c6ce4", 0x19}, {&(0x7f0000000e80)="d4d3aab678bdca30ba6a1bb8317675b45debe2ff497775b0719b4fab4dcf0a0a40b60986aff94701ee7b4ae61c75a1149bee53ca60428ea3fdc3ededa38a74673e662556a4d2e47b617504d0cd385579f8", 0x51}, {&(0x7f0000000f00)="4cabfda574b9893f294e777ad1bd4928b6364d6daad6c72d", 0x18}, {&(0x7f0000000f40)="998c390fa65599ac870f140e68ce141a842af40730539e28953a4d9e410e5c9aad69fcafd5771db3ef407f10a387a766bbbde1afba4310bd48472ff6df52111c5a2ee7b091a69981d69debe987fcad", 0x4f}, {&(0x7f0000000fc0)="ae68bf8c08378cd909b08dd9a8", 0xd}, {&(0x7f0000001000)="674ec7f3677c2780ca737fbb796386aafb0b183a2780d983f3b9d5032bad4ee9d54dde8ec9208d9d4bd65c5391a9ebdf0080784ba12d34e6cbd72bb703b437a9f52cb2b3af260b15e2e2d25bbaef536a7fe47fb796706e32bfce9a73e5fadc8d814833e4fc02ddb6998e3f0d93a51798697e6d25716fc173663c8ec76b709e7bb59c8b81ddbf379c246dc8eb723b642dbe7c4f2583f1472b676529b9c5", 0x9d}, {&(0x7f00000010c0)="c713afe96beb2c0a1a063bc1dc7cd794ebbb5a5c29b4ca78babea667de8536c9e9a8b4e1c531b81b4956e57fc9fc1ab3c2d6e1200beff2a137828dc4e31a5da9449e7c49", 0x44}], 0x7, &(0x7f0000001240)=[@rights={{0x20, 0x1, 0x1, [r12, r13, r14, r15]}}], 0x20, 0x4}, {&(0x7f0000001280)=@file={0x2f4cea6d944e6055, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)="39e255a63f2885398b17926821", 0xd}, {&(0x7f0000001340)="43a7e95cd5fa0190a255df1a6271d4195943bc7605b5e0b25d8c70dfad4ce14f21e03748f5a5449fe9296c817c204b7e023795d3c33301a2dee275f1139a7bf79a8cc636746762740f7fd66a38e88b9e7c8fbbbfc0f059efd22083c0bd4472256b15484c0e7aa1b7dc9e3f6026985010bdc6c69a3363e27b12b2f9c4d047fe4d4ec2a9306cdaa7550122b062f018c6e8b61b9deaccb28e65a86231db46c49def404c86c541922e2019241ed443f54c09db228d1eb163ac2b76acdc3b5deb1bf26c", 0xc1}], 0x2, &(0x7f0000001c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23], 0x30, 0x800}, {&(0x7f0000001cc0)=@abs={0x7eae60ad1e36d2ff, 0x0, 0x4e23}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001d40)="2855e6c411b339d063107f5618e90c17c731e8f4a7bb301b8a2438f866399ed81fc46e58245d848a37582eb49018348f755d37086523b1158698f3a15dc9468032bfab0e237335940fb5567989824456dc8c0cab4018caf46fcda179c179397ac22a46fcddb69be805965a3971b3c95900a57f66dccb11553072e383a1b22fa255c09ec37b5ef68e037e7b79ca1d3b5cedd59c52e655465ca15446ad50e7b917062058db1b58c792e608062243e22670478393625266700b198fc6b0c7b2c1b410808b2d799c6b966a79cdf5b43b21bb2ed0cbdfda", 0xd5}, {&(0x7f0000001e40)="74a1d6e8916327c6d34f20161104ee3ead19eb60669bb3b5d3d43621dd2694bc0b08541191345539ece39e3e3380b2d209492f05fcbeb270bf852be0c5a2558eb07d72f12b31434fd33e369dd45919bd8c69d184d9b65a7f1067b9139cc346adf7b9d54f000f1b6c2548206b0a0802938a77ab8d1d5464d247693413709883b56b7aee3f0528ffd3119c4dfd0530ebeb78308be6ebe7e5", 0x97}, {&(0x7f0000001f00)="39c09e95923a2866bcf289817190", 0xe}, {&(0x7f0000001f40)="e24857dec44ef4422b81ee00f24b862d786ad060193f656e943fb2d457f9d8a24ee04cfda88d7c9a0b4b3f27059ecb61eb0a3b72ebb1bb4bfb6f4dbd48fe6634f70f7ddc1ce754ecb1cbba1e1567a7f1cf1eccde0d950bafff75b5cccda4b63e6666907e0358eb27d4f9f58781edf64e3087bd6c2d48b6a90ab0f5c12b584385650f5b7b40685d26c234c9fbd22c00d22596af9890fbb80c80d069119bb12ab99dc6b0baf3927cb3e211680a299bc741145c659950f299f11c3809cd6fc6c4d72f8354e2eb50c6c2fc6b57a758ca3af56892c680e3a1adb7a8", 0xd9}, {&(0x7f0000002040)="8d282d2d46c6aa69e6c6ead10629113fc604f990f5b8364b750fb029f1208abf041330675d1e2220ca93", 0x2a}, {&(0x7f0000002080)="0bbe11e6ed58a43e06fa6d645d4296a0f5c76f33b1f79550eca06570ce95dff8168408b1e30684e367ab406d762ff55c8584bae930e4c83fa1a62478820bf4bdaf39a6beed7dcc11c220d20d8e", 0x4d}, {&(0x7f0000002100)="64fa5d74d6056a6c2d155ae18b1085791db112b9a3410825bbadec20589f9978bcb20c8da146d26a884e5052364ed9ecedd66609afeca6d7cc7f6794cf2e0dee74f57d0c52b82d4cc10245030ac8aec0bbf2253f6c7c0994e253482f9469644445382fde78bcdd52194ba3476addf957b7ebbea144fde6b5551711edf3a4d75330c090943c687828e845998a2dd1b3b466af56ea13530ef3e81b39196339dcfc386c6113053b97654fd1f3d7dfe03402a77a09d06ccd44032064d0178468a51a5d262a362e0ec3af47088df8dc09cfb3f5599ab69ce60a05e96f55d1eabdd5e5211657194d310389135296b89d0116e1446bd37cf869a567d534e04cde3ffe7d3e20cac659c6601569a0e52102d1f7587c64eda8fa037dd53d8d2e9947faa5c42bf2080c92468fe971b9557a9cf3abe4b8e3b8ab590331dca5fb3a010e824a4939aa1f646fe3e3b654a99c4ee8bbe0d9a8930be4b344874b199f0fda0fb9c8247687bfcaf5abe370246157a11abc3e5e39cdb91cd4c7ec64108579ebfd14e8aa4d791717e5c963f610d1577a4b1a660b1c2b93bd940e8e0fd781d694433a52841e774b0714ccf1d5a4a30fcb95161bed654295fdda464ff4cae822e570d0fd6d0c75ead09443fcc858025020de46641171047ff47124775675c8ec2fa593b1cc991fe6c3e4ca2cd0b052551bbbbbc3fef660dc5c13dd27bcbf5ec8a669c6f2366c046fe7ad5fc6c38af5ff73a2f98d093c5006b81efd05660fd60542639871ec20eb979e9f8f546975a3fdfc2f26f3bc4833a3eb121629f794b226cbaa9250316972cde8902243d383c973bc0c033ff982e0690de23bf5a5d727b62b1ac04944d40507e1e91eb0b56073809beb9433e5d58841630bfed09e1e1081b041b434fa10465a5b63a73175b260d8af3ad700d581b382c6038ca02f76776526a85908db019938e675c15b4f111d85e05df2fa0d7643b7b8841e61d428edd2a334fa5a602594200eb9b799693f6e308dc36a28b459ca172ecd7bf852df69f043c5b69995d10298bb5dea4c609b0f531a015948177cf009f917f3be15ebe96bb85597b8fb6b5873e297aa42768eb336a7879ec99ab175d4dbb4f263e6285a0c83dc4814ea30668735c7e2ad4d6f9dcfe14b334c6645bba13484a9953dd8cb74e8ba040b14d2a04df01d16a03d492b6bc4cdc073949c3ceec65135891808631651fc0a817d194da6c2d442505e46bc48b9fc1119c6a9c1ae02e467f4ee438e0dc89590585ed7dd95d4a99be74257738b1da3ed98eddec8f1b45e9584d670ed61e73184203a80a018f1aae642f5d812c64ee28932b06e0c7eeb2afd0c74ef20f8949925167195360ead63678f85357f8eed607358942ddeb1f5d5a51ca9efb85a2da1ab14752e70e2fcf73171092337e33b5d2cc1b6c064bf2dcaebf924e171a4965453dd668fc8f81ec609c862b8fab500cf70841d3e01554d28e79f0d5fb198a678840bd5109b46691fb1babce9787bebca415986efaf5af8593e3823165ccc7575fd00e5862c7f85ffb17a468f2ee730a47d030275affd60ce44d2609b11d1d48bbff6df980c249c2517f9140d08d7b84a8914bdce2005c5c0daa95f354cffab526dfe3ab141604e9239d16991418b3cee894ca1927bc9a8ebd3927cf47e3f35aff31e015fabb181d6a16907a0e3a96eea707da31be9adfa2d9f8c191c8f3de10e2cce07b675ed670adbb26de870bce328cc0aebfad79919ab3406ad96b630d0a1956d68da8839159c061acf0ac7679405a2809529b036e6889860e781885e8c946507c350f84a34ee253b0b42665201894f6154aa47807d3d27ddf0508b9eeafa2ad1aab25f0f0e05c250de7c8f3e5c10a13864a027ca14e418039a26d9bc41a163d62b88886ab8e3a69ed4326977cecebd147cd690269679bdc6662ffbe63cc75c796e5be991940b11bb6014d1b95873545aa7556ce8d88e89fe216f1a8bb3015f7344235555cca76d2719fd042d4bde9ed444f65375e5f82876aa3405294541fa9d1e41e06be6be8b10dca860420cf52388bb3e4e7102b760ba726bb735a6786bee97f0c2ab813d7efed3d6644839f328f277c86478d2cffec9f5fbf6385274812be2c88fab43b593765e2121d3d3bd3a824b31cc3c98aa21dd8bbc6caf991925dd003542a2e1cccb8d39fa48d74016c71675cfcee47532fb9a2a2c3afbeb279fc0f68ab8f4e3e5ccad1270de79ff5d52befe886355e4b4216b3f96d7bddf07251766d48224c245562127d10a151a6d621a978f47b534a3ddca8045d700cb22ab24a444cfafed9f41207e61e4fbb5ac4c79b870b037b97caa1f1a11ad7831dc7e2a6b439bd5078a4945e89aeb0555f45ae563f47e4dae0adf903e75ca79a348df835b7175d97496726e06d81c35cdc345fd12cd3f403a2b90ecaced7935cdcceb0320c762ea971ab174c87a426f802f8d29bcb7f5876c5ce6de331fd5109aa7f162a4b829b20a0ba0685b36873326dbc022be5d9237961747106bdc615683c7db3be1f7e24e133a13287e6e66da990a97c8f8eae33cd08059e4a9c83729e56de4ceccebbd36ef50e469829ae81d23b8318bbace24d29f18eb7a43c8a0ae1a94cabb9987c278f2ebcef07607fe6cc28288ba40170b68ad5aa63da3b02f97aa7f74266a90da7ca45adee80de797d8891b83ffceebc54cec147c31700affcff6e07df62c177fbf3c7bcd899ba9500989d215e3cb930db0ba208ee36bc2562ca6b9ca856deb5e363154a8b3c3a7ec9847615d5b5aeb970b52325dd89e01bf58fd293cb458fc5fd34c4ce6f1007ea7d2a8222793598cb03b792119d3e4e305f571dfa3d14c110cc12eda83ffdb384d20ef387c3658f72e0eaa32824a9d6160cc742179df649ec979f5222723b8cb1e6e4ba64f96792f68e50673f4869335a40c5205f82eb8ba9665794e7e2dbb0e10711c0d5f5b9731648f05ee1ada6479d23a91a5e414534a796887338e499b649c746b551616ed66c45a2313c95aade2b69785e75f89f082baec3578e7df38eb8770ad7196eaf5397450aea0f4081447e283ff28db7a8a87dfa831b9c18ea24f83fe2c499e7c7f8f6d64735ee70c1f72663010aee97bb84eb7cff51042b5b475d7709909d46115b5a193da0e1f29f99aa8b8baf38501a0299a85aa9352db3983fd75044aa3f52408331950f66b0003adf6d9ae274d93d7f562b8c5c266016dcfe85be9ccc406c6cb5fbbcc0e6bc275a5b2f168cebcd7a7cdd1a2a51da18823b9972e8fb91e8bada3de03a4860fd4113101ec3a37aa705edc1a00ffb7e8bc00d6a5243be02eb5e6ae4202c1602cb24d901eab180e700414c0e46e9ba6577511ecacf91552c7a271e681107fcf43fa26fdbb1f3c4790f70dcfb4d794373c48c913bc50a21cb05873d4bf8a6d8f5d91a76f146ddd913f62d6b26f64a0930977a3fc65063c31b49648ae597fc11d34055743fd9e93f705380441085f50424f5d141ede28b298682a93c3b764299c4ee565e40c81f00d2f3ef1f03245eeb8f62c10917331d33ef354ed6576879927c5c3e63952f4558241cf0da4c770941d7f07aa53b780abc30a1826e4a51cd853a5d2c3c4fb8f15b45132f22502900f75c22e69613efa52c62a17c23fd924d502f53f8ae2129457cc6d77880c772b4f8b780f52b904a90f62cb03fc0e179321198bcc9f05cb1604dfb27bc7f26f71dc455f07eb9bb10de39444c9fc42cf8fa11df1f5d672b8211b8f322c403a5f7732a6f3fbc6456b07c68bde0a2776b4bb4b89bdd07d6d1f0f559b4a6913093939d8ecbd189fb8e1317b3dedd7943a427553ba6e6df07637f7ab204508e0c216e0b24f66d06af3b769f3a90df29ec89c2b72199cfc3fcbb66410122259ad4db0ecdd117b86d0ed54baf387f825776640e1e5e2c10a74f215735aafb87ddbcd0ea8415bb6671269387e3df3ffc15f7a083bce7c2a9f7a1083c72e953fc266ddb39a2d1a095a489b359499e91567e793b8dc9e2f9ebcc9111af9edd8c7ca405dc484b727de2fc2875717dffbc2927fbb25c721bb8c7bbd4992b2d05cf5a2f85fc6dc56881af89b8861b5e2c8e5784727ae3c7f4707d4ad9d8c1adca06ceb96cde574ac42a614ae6da048da3a1adfd01f3e03fd417a042dc731a63f70fb3de64277b4733346bda623925bef84503117550cfb99059f0aa9bd63fa3feb42029878a9dd1baa2f80599d704d4a73c2b7ee62d295b0f54a8ccd2512f3b184a11ac1539f3162ae62650ffb1b5880c16a952d6dd81e7c3ba223f6e55a324c33e9ced7e7cbe174ee5a6506daf851a50e46012c354ccfc575610daa1007cb75422b030367d9597d1dda3ebe5939366097c0d3861d42dd367bff6f3e551d26a2c827075819d9a695955bae4e3d43ee37e12db530b7e55dab7debc468147bac9921cbcf36472bbae4a1c236ce75c93e76da741b879d7c9f30fc5bdebd9718766934fbd89d49b7bdb142767136eb98dfe006b72e2a6ff1ba76a28231f6c102f81548b1a2ec474a8e8f7551cdbe317040080a74f84cfdd599cdfe00e5c3713a963aa100182387c6e841f90c8aa55acb478e83b43e4467074afb0ca006f212be8bdc7c9f02f14dd9053ca3f110d1382dd87f8f8ec991760eebba1f7edfd22f0a71f3cb2a7d9e67a6b00b395342dcd716d5703a0a7e081a5c1e9be35c4bdb3dd1a472ea1626c34316ff1f2c45cb006279fa758235cacc9f924c731a1a1a0974bd4a4882f06d21370a20efb202d05c930f11ad9aee9f6d98fbbf89569fd0a163b09e9df05e08823f6026b961e5fd2da093b9a099e22a493f83f9370e413c47523cf7d4b69ddaf93a38a9b93957a37af32cb15f7f9ce36c562556ec4ffe3f8351e485b8a8d1f88ceef3a9e254d145b84ed8e1f3d7db315e110f6c491bf10f1650e4419cfead6c5813da2c21e8f79c6e24271d5f2019473fd1c3463048ceb9283274a8e7fb6e4b0c2adbb38da2214f73925b99c5f65c70222f51d646b7a71ed703de6c497bcd750b082b811e00dc2503648bfaf544fc42d2aa623fb6aa44fc0040d155c0b23ca2f6b2f777c9cb63b6e84b8a1b1734a1048895d9c6f569b912f112562b7e179df61d6bd0f5fad57f2a1625cd3e0cb3181edaf955875b92d6f8b5b6c65b449769c58639796faee4bca6aa9ab555ace3f18b3ecf0f269b1b6e8f0d346c08fccc9ce59222980017114d009681889d8f948a23f83c186f24b9a896f99819ce7a8787f4fd46fcbaeb48fe4c7cc63f1c67e55d02af714c9f26cd18395a34fb7103bea6117989ccf30e0c51bf84df8e5a1c111a340ad4b20a287dc7b433869b91515af9b690f78f7488a7ba05a5c01155ae9e2999bbfde4515510d31810758a70e1779948b76cbee04c9885664f4844e776bd741973e1a1f87f1fe6a0963dfbc59bf55c20c99993a439c235ea57cc8760d975f18109fdfdf38469d156c9a6d76698b7379352619a1569e67a8b4b1eebd5bb0de02f6d2b578b1579b552592196c00a3730b78581aa61c1afd4b2cfcc8b37954f1572dfe25715530b2f97e47b3e2740c30ab4ce54ce2f52e1e66ef2872fe18b31966884256e0c1a322b567453cbd1208002ab5a025c0722278a042908a9c6696826f58df80586118b199fb02d64dd0cc6eee041109806000bca45daedee9b0ae5e9f050fc8303024f489912c1d66211b9ec136f427d6c447f2141a75f37fa10ee3d650cb54d7cc487e73d568a46c9fd7f96b688afa7c6a526558c66e8577e48bca8f85ac6d807fb3da89bb63389e1e62429cc2c", 0x1000}, {&(0x7f0000003100)="e176bb54c4be5a5ae6b43c9bf28ddfc4ec077c5e1ccb746e5b48c0fdabe5b08a95a6b845e8243f9d5df42759c3a338e1cd1104518f2a8a34518883ec3798ac768bf19eb8b7e51b8b0407790361e8c1600b05acd5f2a1224cead2f20b24d75a21e1b6c218e36f97565be2c8934aa71ac3980cf4d88148b2adf92928b3d4551a69e19a5c417c4191d884389edda5b089b799f81f40bbf064ee5dd22ead2e0768b46acd31c339658211c1fd512caf503633216f9bd77a46f6ea68a7ca7b12e9fc9b154f4f", 0xc3}, {&(0x7f0000003200)="5f65f79bdde44f87b2a225ed151ad9c02eb28298e23bab097039c5c2d4640396a6adae5a814627d44ecd94be60afc162595a3defce218126bae6134dfd2c7a458ea5f2005833a0de593640a82befdb5f4facb5df6bcc938201686ba70c221e2d20220d85e17cfb8f36069a68bec8bb73952114f73cdfc58184857a52775499d31201f2c5a1f6cdd9912c95729135f6b2aab6816127439cf58dfa", 0x9a}, {&(0x7f00000032c0)="03a17a01fbc2db53fc0821cbdf8bb20d8bbfbbd6300d93751af5e5bd83a913983ff76c1e6dbbd95996df2be02fe397edb66212029c0fb4ef245e4f114a666daaef0c4728fa3d73450e90861dbbbf9a65153f778dc3d4ccb120807d7f891508de8d5fa928821cff104fa081f517cd41a6c432e66b7fe5f94738e7ab8ed4c9b0f23f238387981aa98d7033b18f82c4de6184916874b2749c3ac356bfdb4fd95e033b9caffe644026df1f1d052abd365ce610ee51a8a05fdf13c7761e4b9db662e9d24f135a609af2457782e0ffc6ef52e462ac65f71ea2a33b692ba256dc2df0f525b013f2dedebcf096a69e8980c322", 0xef}], 0xa, &(0x7f0000003880)=ANY=[@ANYBLOB="1c000000000000000100000002000003", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r27, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36], 0x80, 0x4004044}, {&(0x7f0000003900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003980)="6328cce8f0ad308871e56b4956bb779b65fa50f5a19bea147a35b0c5c9ea138cf3fcbe74367e82939a660c0ba2f2081aa03f0d863b00ab4db79f3c3dc3634e28c0718acb7cc3937ec5ddf87d2df081f31ac488c4b6e8f85313a57924e9623e796fea9a8e9fb6870a6e30cdacde71bc6184", 0x71}, {&(0x7f0000003a00)="4f687317c9a7f87e5033ad9d11dd1acd41a2b643fdc270d68b909dd2e425210dc2be39f038f6e225ffd48e18c047c9440db36946206c2c6014b2ba42b341de0c02fefb7c8393359834936ac0b837deb3b8465746341f68cbcc55469a19d35e3f16e417922956ee202b878bb1ca33b17f0d72045b07db7c1bb754e1851feb2b2e49d8ccf47f12fb05db921186eacf6e9fe0e5350960cda5a7a9353cfabcca9677d8fcf55882af58b057e64195572495b60be11377d74e0161e54968931509049c02", 0xc1}, {&(0x7f0000003b00)="15b6651c5a4373fe326d80b34b6ee716cc9d998375ab0fddfc89217d0ba0471b16e08685ee61a11176dea2ea4848506c058742b4e7402219c949499ec93c65866fae57accbfb77e71ebbf9b4d13eba1bb729860c46c651f83bc74004a090b511a498b4b64e0e719c98d47805706f23300edb991d8f2a76e5f4ee37be69bec65c24fe291cf7bb5044c27764cc3a8b21b075a9afc866796e07335a88a50aac9764d79fde65e69dd200141b74", 0xab}, {&(0x7f0000003bc0)="f900f06dd9c71f0c4137125077a975be715c8f2b1168547682a810b4999055b45a6d637650c196091eb2f20c51be447b63d31004565df8b655ec180cddd915692b896b4fded71a3dd1e993c9a648ff91b8e1617dec615eade5a9acab13e5fcd8a87eccc1fb190200fe5fd5e49703d65133a507842270705e1c7205c972112a3c28b8008129dd4166fc070bc6d44486335ccaa2b64c0b9efbcc161687be801c4bcf00ec7bb9f99ed41617262b4135b57c8b71bbf3664a6f95ef1269c693bcc8330e7aee9c16e2a7cf018b6021982fed69c236d587ff8380cda4e6cf8f7cd774f1c8348cf1ab", 0xe5}], 0x4, 0x0, 0x0, 0x1}], 0x5, 0x4000) r37 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCLINUX7(r37, 0x541c, &(0x7f0000000000)={0x7, 0x25d}) connect(r37, &(0x7f00000000c0)=@ethernet={0x6, @local}, 0x80) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {0x0, 0x6}, 0x76ee, 0x5}) 17:00:13 executing program 2 (fault-call:4 fault-nth:51): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:13 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/126, 0x7e) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 333.111340] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 333.178461] FAULT_INJECTION: forcing a failure. [ 333.178461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.190299] CPU: 0 PID: 25563 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 333.197403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.206756] Call Trace: [ 333.206776] dump_stack+0x138/0x197 [ 333.206797] should_fail.cold+0x10f/0x159 [ 333.206814] __alloc_pages_nodemask+0x1d6/0x7a0 [ 333.206825] ? fs_reclaim_acquire+0x20/0x20 17:00:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x76ee, 0x5}) [ 333.206845] ? __alloc_pages_slowpath+0x2930/0x2930 [ 333.217194] cache_grow_begin+0x80/0x400 [ 333.217212] kmem_cache_alloc_node_trace+0x697/0x770 [ 333.217234] __kmalloc_node_track_caller+0x3d/0x80 [ 333.217247] __kmalloc_reserve.isra.0+0x40/0xe0 [ 333.250190] __alloc_skb+0xcf/0x500 [ 333.253825] ? skb_scrub_packet+0x4b0/0x4b0 [ 333.258162] alloc_skb_with_frags+0x86/0x4b0 [ 333.262578] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 333.267514] sock_alloc_send_pskb+0x5db/0x740 [ 333.272011] ? sock_wmalloc+0xf0/0xf0 [ 333.272028] ? _raw_spin_unlock+0x2d/0x50 [ 333.272044] unix_dgram_sendmsg+0x34c/0xf80 [ 333.284287] ? selinux_tun_dev_create+0xc0/0xc0 [ 333.284312] ? unix_stream_connect+0x11f0/0x11f0 [ 333.284331] ? security_socket_sendmsg+0x89/0xb0 [ 333.284342] ? unix_stream_connect+0x11f0/0x11f0 [ 333.284353] sock_sendmsg+0xce/0x110 [ 333.284363] kernel_sendmsg+0x44/0x50 [ 333.310748] sock_no_sendpage+0x107/0x130 [ 333.314899] ? sock_kzfree_s+0x50/0x50 [ 333.318804] kernel_sendpage+0x92/0xf0 [ 333.322693] ? sock_kzfree_s+0x50/0x50 [ 333.326576] sock_sendpage+0x8b/0xc0 [ 333.330295] ? timespec_trunc+0xb5/0x120 [ 333.334358] ? kernel_sendpage+0xf0/0xf0 [ 333.338412] pipe_to_sendpage+0x242/0x340 [ 333.342565] ? direct_splice_actor+0x190/0x190 [ 333.347155] __splice_from_pipe+0x348/0x780 [ 333.351482] ? direct_splice_actor+0x190/0x190 [ 333.356073] ? direct_splice_actor+0x190/0x190 [ 333.360664] splice_from_pipe+0xf0/0x150 [ 333.364735] ? splice_shrink_spd+0xb0/0xb0 [ 333.368981] generic_splice_sendpage+0x3c/0x50 [ 333.373567] ? splice_from_pipe+0x150/0x150 [ 333.377885] direct_splice_actor+0x123/0x190 [ 333.377900] splice_direct_to_actor+0x29e/0x7b0 [ 333.377915] ? generic_pipe_buf_nosteal+0x10/0x10 [ 333.377928] ? do_splice_to+0x170/0x170 [ 333.386995] ? rw_verify_area+0xea/0x2b0 [ 333.387008] do_splice_direct+0x18d/0x230 [ 333.387021] ? splice_direct_to_actor+0x7b0/0x7b0 [ 333.387036] ? rw_verify_area+0xea/0x2b0 [ 333.387049] do_sendfile+0x4db/0xbd0 [ 333.416573] ? do_compat_pwritev64+0x140/0x140 [ 333.421146] ? fput+0xd4/0x150 [ 333.424333] SyS_sendfile64+0x102/0x110 [ 333.428289] ? SyS_sendfile+0x130/0x130 [ 333.432260] ? do_syscall_64+0x53/0x640 [ 333.436236] ? SyS_sendfile+0x130/0x130 [ 333.440197] do_syscall_64+0x1e8/0x640 [ 333.444067] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.448893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.454063] RIP: 0033:0x459879 [ 333.457233] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 333.464920] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 333.472169] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 17:00:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x5}) 17:00:13 executing program 5: chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) 17:00:13 executing program 4 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 333.479417] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.486682] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 333.493932] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:14 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file1\x00', 0x0, 0x10}, 0x10) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x0, 0x6, 0x80, 0x10000, 0x3, 0x5eb, 0xe76, 0x81, 0xff, 0x2, 0x3, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x10000, 0x2, 'client1\x00', 0xffffffff80000000, "ac59d83c9b404b0e", "67593281c483fb542ba17ce02599ab3419a4183255068fe11f1a24c01644f6e4", 0x7fffffff}) truncate(&(0x7f0000000240)='./file1\x00', 0x43b5) 17:00:14 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030303030302c74696d656f75743d3078303030303030303066666530303030302c0057fce596299cd9ce8cadf24bfae017795e8ecac43a5da7bad6c448b84f32f302d3b223a17dbae434adfaf4236434ac9c25c8ef882f22c42665ff99951868f78cc8cb4d54e26f4ae9ac770e58153baf8917962b25cbe26a20d227dd48773bef0edd05572d8e1588e1c6a86c0e2ce695a00ea75b00"/193]) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4800, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xf000000000000000, 0x40f5, 0x8}) 17:00:14 executing program 2 (fault-call:4 fault-nth:52): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0, {}, 0x0, 0x5}) [ 333.623101] FAULT_INJECTION: forcing a failure. [ 333.623101] name failslab, interval 1, probability 0, space 0, times 0 [ 333.645885] FAULT_INJECTION: forcing a failure. [ 333.645885] name failslab, interval 1, probability 0, space 0, times 0 17:00:14 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xff, 0x800) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f00000000c0)={{0x0, @addr=0xa24}, 0x8, 0x0, 0x4}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 333.685568] CPU: 0 PID: 25583 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 333.692696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.692702] Call Trace: [ 333.692720] dump_stack+0x138/0x197 [ 333.692739] should_fail.cold+0x10f/0x159 [ 333.692756] should_failslab+0xdb/0x130 [ 333.692768] kmem_cache_alloc+0x2d7/0x780 [ 333.692779] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 333.692794] ? __might_fault+0x110/0x1d0 [ 333.692813] getname_flags+0xcb/0x580 [ 333.692825] ? __might_fault+0x110/0x1d0 [ 333.692840] user_path_at_empty+0x2f/0x50 [ 333.692853] do_mount+0x12b/0x27d0 [ 333.692869] ? copy_mount_string+0x40/0x40 [ 333.733412] ? _copy_from_user+0x99/0x110 [ 333.733428] ? memdup_user+0x58/0xa0 [ 333.733441] ? copy_mount_options+0x1fe/0x2f0 [ 333.761679] SyS_mount+0xab/0x120 [ 333.765132] ? copy_mnt_ns+0x8c0/0x8c0 [ 333.769028] do_syscall_64+0x1e8/0x640 [ 333.772918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 333.777769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 333.782965] RIP: 0033:0x459879 [ 333.786150] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.802357] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 333.802364] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 333.802370] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 333.802376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 17:00:14 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket(0xc50600ebe16d5ecd, 0x800, 0x8000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000140)) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='dax\x00', 0x2000021, 0x0) 17:00:14 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000, 0x5, &(0x7f0000000580)=[{&(0x7f0000000140)="d5008c9bcb4a680d5e68bebea75ec4f9b1169af96804555aa89d360f2bbd030837951131bd8b0c01b5c7a21c92d9742a2b4889ef521533f4957b4def1defa986609c4c", 0x43, 0x80000001}, {&(0x7f00000001c0)="d605eb64685264a90c3cf518ff57801bc1c6d1222c979415b605510d1fe79a8a601717ab258e7aef548260650f285b224297aef24f63a4d8d1dba459ed66a4bcb49af8825bbd68b36fa4b2d8bf985f67ac0acd043985344ddb6400c3adaf75b025709e353bc74da427f55b31be4386924aeb1663e819b5fb3fd0de22ab783b23711c901c6c1361e26966b0e990a8", 0x8e, 0xfffffffffffffff8}, {&(0x7f0000000340)="0e60d301a77ff9748a6fc3274895c02a76dfc7146fddcfde1e0a736cebcba0e74209aeeb8be35f15952005564bb01b2869cfe71ed455cd7943509d82629c34e696b50fdb1185d9fe062c7cad6417ec66e342daf192fd453c253a76e92a84517158de34b033b8eadeef4c8dec474e6c772ee21c60d557dbfdae3cb982bbfe6dcd099a19a7015eae5b562054b5bdf21e0215d2163f6cf38bf25fa7618038bef9758c1dccea9d78da7b635dd26e52291b0153faefc3d5451eaa", 0xb8, 0x40000000000000}, {&(0x7f0000000400)="019ad04fbbacbe99e9a53d558b7204fcbdb6f9fc1567458f74e7f532215e764000c4e8dfb18e8072616474f1b3ddf058e68ab4e7f4318b55651e64cf6c4b64f20fb5c26c90afe6785e0bc398b536c94508aea1741cd8be1c604d1085485a98a3ee796f7764f686010035b619f5cab254989702f1b72ad1d08f6de2dc41f44c3a08f0fc3315f07f3fac6068f36274ab3df1a1baf2e82becc11dbb0c73ed66721e70c2b65d23252a67f79bd65156ac7b2e710a7671cd17fee602301c4ef813fa2d856e33", 0xc3, 0x3}, {&(0x7f0000000500)="6d1408c7729f6e02aafce46a81dd58bef4882f33d35e224021bb2d0ef280d6ab64078265df3300df33f4286a804c7cf5b2c5680e91b3e3b565d8e1382e44333177e8e58c23e7b9199a27d0d76d846b0cd2d5e9a028094ecad5e1979fc85ca6200d84ac10b3f8a166d3103ad4d1182154b4d7968bafcbfc40781b8b", 0x7b, 0x800}], 0x800, &(0x7f00000002c0)='}&Huser&^keyring,cgroup\x00') [ 333.802382] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 333.846807] CPU: 1 PID: 25592 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 333.854014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.864022] Call Trace: [ 333.866712] dump_stack+0x138/0x197 [ 333.870353] should_fail.cold+0x10f/0x159 [ 333.874510] should_failslab+0xdb/0x130 [ 333.878493] kmem_cache_alloc_node_trace+0x280/0x770 [ 333.883603] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 333.889061] __kmalloc_node_track_caller+0x3d/0x80 [ 333.893999] __kmalloc_reserve.isra.0+0x40/0xe0 [ 333.898672] __alloc_skb+0xcf/0x500 [ 333.902299] ? skb_scrub_packet+0x4b0/0x4b0 [ 333.906623] alloc_skb_with_frags+0x86/0x4b0 [ 333.911041] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 333.915969] sock_alloc_send_pskb+0x5db/0x740 [ 333.920477] ? sock_wmalloc+0xf0/0xf0 [ 333.924281] ? _raw_spin_unlock+0x2d/0x50 [ 333.928437] unix_dgram_sendmsg+0x34c/0xf80 [ 333.932759] ? selinux_tun_dev_create+0xc0/0xc0 [ 333.937441] ? unix_stream_connect+0x11f0/0x11f0 [ 333.942211] ? security_socket_sendmsg+0x89/0xb0 [ 333.946969] ? unix_stream_connect+0x11f0/0x11f0 [ 333.951727] sock_sendmsg+0xce/0x110 [ 333.955445] kernel_sendmsg+0x44/0x50 [ 333.959248] sock_no_sendpage+0x107/0x130 [ 333.963397] ? sock_kzfree_s+0x50/0x50 [ 333.967306] kernel_sendpage+0x92/0xf0 [ 333.971194] ? sock_kzfree_s+0x50/0x50 [ 333.975083] sock_sendpage+0x8b/0xc0 [ 333.978803] ? timespec_trunc+0xb5/0x120 [ 333.982868] ? kernel_sendpage+0xf0/0xf0 17:00:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) [ 333.987081] pipe_to_sendpage+0x242/0x340 [ 333.991237] ? direct_splice_actor+0x190/0x190 [ 333.995834] __splice_from_pipe+0x348/0x780 [ 334.000155] ? direct_splice_actor+0x190/0x190 [ 334.004750] ? direct_splice_actor+0x190/0x190 [ 334.009414] splice_from_pipe+0xf0/0x150 [ 334.009427] ? splice_shrink_spd+0xb0/0xb0 [ 334.009450] generic_splice_sendpage+0x3c/0x50 [ 334.009461] ? splice_from_pipe+0x150/0x150 [ 334.017735] direct_splice_actor+0x123/0x190 [ 334.031002] splice_direct_to_actor+0x29e/0x7b0 [ 334.035694] ? generic_pipe_buf_nosteal+0x10/0x10 [ 334.040810] ? do_splice_to+0x170/0x170 [ 334.044810] ? rw_verify_area+0xea/0x2b0 [ 334.049484] do_splice_direct+0x18d/0x230 [ 334.049497] ? splice_direct_to_actor+0x7b0/0x7b0 [ 334.049515] ? rw_verify_area+0xea/0x2b0 [ 334.049528] do_sendfile+0x4db/0xbd0 [ 334.066366] ? do_compat_pwritev64+0x140/0x140 [ 334.066383] ? fput+0xd4/0x150 [ 334.066396] SyS_sendfile64+0x102/0x110 [ 334.066406] ? SyS_sendfile+0x130/0x130 [ 334.074161] ? do_syscall_64+0x53/0x640 [ 334.086046] ? SyS_sendfile+0x130/0x130 [ 334.090037] do_syscall_64+0x1e8/0x640 [ 334.093928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.098783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.103971] RIP: 0033:0x459879 [ 334.107164] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.114876] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 334.122152] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 334.129419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.136694] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 334.143965] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:14 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) 17:00:14 executing program 4 (fault-call:1 fault-nth:2): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) 17:00:14 executing program 2 (fault-call:4 fault-nth:53): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8800, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000540)={@loopback, @initdev, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000680)={@initdev, @broadcast, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000880)={@local, @local, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000a80)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001f80)={'nlmon0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001fc0)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000020c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002240)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002280)={@mcast1, 0x0}, &(0x7f00000022c0)=0x14) getsockname$packet(r0, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002340)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003c80)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4}}, &(0x7f0000003d80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fddbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="0402020038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400a2000000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400d867000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c000400a80001c800ffffffff030300000001000600040204000000090051ff0900000000000703010000000300e805ff0f0000070007008100000008000100", @ANYRES32=r5, @ANYBLOB="740002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004003f00000008000100", @ANYRES32=r7, @ANYBLOB="800102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400090000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400008000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c000400090060de7f00000001040401ba0000004081003e220000004ff40200366c830ba00000010900000008000100", @ANYRES32=r10, @ANYBLOB="f00002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696ef2b0d6b13d73d7ac034a743c15e16b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000008000100", @ANYRES32=r14, @ANYBLOB="3c02020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r16, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400fdff7e0101000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000700000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r18, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c00040020000783da0f000001000802050000000500080609000000"], 0x760}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x2000000, 0x7]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r19 = getpgrp(0xffffffffffffffff) syz_open_procfs(r19, &(0x7f0000000240)='oom_score\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) 17:00:14 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/103) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$vsock_dgram(r3, &(0x7f0000000500)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getresgid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x820000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x34a}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@pcr={'pcr', 0x3d, 0x2f}}]}}) [ 334.296982] FAULT_INJECTION: forcing a failure. [ 334.296982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.308833] CPU: 1 PID: 25629 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 334.308842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.325291] Call Trace: [ 334.327891] dump_stack+0x138/0x197 [ 334.331537] should_fail.cold+0x10f/0x159 [ 334.335699] __alloc_pages_nodemask+0x1d6/0x7a0 [ 334.340374] ? fs_reclaim_acquire+0x20/0x20 17:00:14 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x5, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='dax\x00', 0x2000000, 0x0) [ 334.344700] ? __alloc_pages_slowpath+0x2930/0x2930 [ 334.349745] cache_grow_begin+0x80/0x400 [ 334.353903] kmem_cache_alloc+0x6a6/0x780 [ 334.358057] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 334.363031] getname_flags+0xcb/0x580 [ 334.366847] ? __might_fault+0x110/0x1d0 [ 334.370924] user_path_at_empty+0x2f/0x50 [ 334.375291] do_mount+0x12b/0x27d0 [ 334.378843] ? copy_mount_string+0x40/0x40 [ 334.383073] ? _copy_from_user+0x99/0x110 [ 334.387233] ? memdup_user+0x58/0xa0 [ 334.390958] ? copy_mount_options+0x1fe/0x2f0 [ 334.395474] SyS_mount+0xab/0x120 [ 334.398932] ? copy_mnt_ns+0x8c0/0x8c0 [ 334.402831] do_syscall_64+0x1e8/0x640 [ 334.406720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.411572] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.416850] RIP: 0033:0x459879 [ 334.419348] FAULT_INJECTION: forcing a failure. [ 334.419348] name failslab, interval 1, probability 0, space 0, times 0 [ 334.420044] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.420057] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 17:00:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72bb540000303030303030303030303030303030302c74696d656f75743d3078b000329f45f27fa6cbe917c7f57e30506a305e2ad4ebbbb768754156c8403e01499565198310cadd9e961a404e7497a7406a4a70b52a917b72a1425f2272caf9b334e4685d39e3e3bba4753730078a91459683b7d0bbd1fecfe33fc871b92e5c7216b0c7aa37"]) 17:00:14 executing program 3: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0xffffffffffffffff, {}, 0x0, 0x2000000000000000}) semget$private(0x0, 0x2, 0x508) 17:00:14 executing program 4 (fault-call:1 fault-nth:3): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 334.420063] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 334.420069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.420080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 334.420085] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 17:00:15 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2cd, 0x200000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0x0, 0xe, 0x0, 0x7, 0x9, 0x9, 0x7, 0x7ff, 0x480000000, 0x770a, 0x800}, {0xf000, 0xd000, 0xe, 0x5, 0x1, 0xbe90, 0x0, 0x1, 0xe01d, 0x5, 0x1f, 0x200}, {0x5000, 0x2, 0x9, 0x1ff, 0x9, 0x6, 0x2, 0x5, 0xff, 0x3, 0x5, 0x8}, {0xd000, 0x6000, 0x10, 0x20, 0x9, 0x1, 0xe8, 0x7, 0xe6, 0x8d41, 0x8000, 0x3}, {0x6000, 0x0, 0xe, 0x3, 0x9, 0x0, 0x800000, 0xd1, 0x8, 0x5, 0x7662, 0x94aa}, {0x12000, 0x5000, 0xf64566255bcfdf55, 0x101, 0x2, 0x77a6, 0x10001, 0x0, 0x1f, 0xe8, 0xfff, 0xa27}, {0x1, 0x2000, 0xc, 0x8, 0x7, 0x72, 0x20, 0x7f, 0x4, 0x80000000, 0x1f, 0x4}, {0x5000, 0x101000, 0x1e, 0x21, 0xb516, 0x5, 0x80bf, 0x2, 0x8, 0x8, 0x511, 0x3f}, {0x3000, 0x68195caca42409d9}, {0x2, 0x1f001}, 0x40000020, 0x0, 0x5000, 0x80, 0x7, 0x800, 0x4000, [0x7, 0x9, 0x9, 0x16d4]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$KDDISABIO(r1, 0x4b37) r2 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000000)) 17:00:15 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000640)={0x0, 0x2}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r1, &(0x7f00000006c0)=0x3) sendmmsg$inet_sctp(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="a92e50f505e806e80fe7445dbc46fc5371e512b43a872513a7ac37f8d608c561da75a604b3d64b2a265d0c33d57957e0c627d00a03125a09c8f9f5c038a4a5dcd26a3c2c699aaf85b0f66d88fc8856207700703d3d4468d75e4a72f9738289df47953bbd07877630e4a74482cf1428ce532984a1d63cf866d68f8cfe443aca62419b2ca16d013e88af5104f16273c578d612f8797ce4b285a9a058cc72", 0x9d}, {&(0x7f0000000280)="f9eaddf9cc405b720ee1b4d27852b46dd285c6d36e0fb19c3699ff3b76a4de6ddb7a6b2c3bcd0e5a87b4101d7997a20a72e1d050a12fd361279c951946d8aa627b587a6d48f41bf225476733a55105b161894f952cd1daa4dc7ed83d677661e28e73136be6c5bb3f4ede81b88daaee956ce4c4b16e649d453cb4a8bd524b41b8f27d2637d2c28a7279f107feecf94dd5bf7913c2dc6ec335e65d50e85668e89cfd06881ae5ab", 0xa6}, {&(0x7f0000000340)="8facc00b9029eb6673af5ca49297988a82d9fed0ae598fa1f9e0090c444e49b8932ede887dd447d0070ab2da95e30c21fd0c6c2bcf13cec7f55ec2f1c8edcf18140264aa48843f9f567d31af4e93e97ec50d95d557874fc6e744335eed4d44d7a1dfbeebaa50cbde8bc18c0f1151046819866cfb43dcbd8b3892cecdd549b7bacb16994a4fcd0266a9daeb11bf5b8340bad1a7e7c3d52d5a7178600ff878f3b00e37d5a425f2fae996a7aff611096abf62ece58d6c524f40912436b829cf65e2a8687107d5594a1d244972f1cf", 0xcd}], 0x3, &(0x7f0000000500)=[@authinfo={0x18, 0x84, 0x6, {0xfffffffffffffe01}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="e343fe18380bdc4a598da10ef29463c1"}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0x2, 0x4, 0x5, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x24}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8001, 0x8000, 0x7, 0xe7, 0x7d, 0x557d, 0x6}}, @init={0x18, 0x84, 0x0, {0x98, 0x3, 0x1, 0x81}}], 0xd0, 0x8000}], 0x1, 0x4000) mkdir(&(0x7f00000000c0)='./file0\x00', 0x20) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40002, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000100)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 334.568199] FAULT_INJECTION: forcing a failure. [ 334.568199] name failslab, interval 1, probability 0, space 0, times 0 [ 334.615219] CPU: 0 PID: 25653 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 334.622363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.631714] Call Trace: [ 334.631733] dump_stack+0x138/0x197 [ 334.631757] should_fail.cold+0x10f/0x159 [ 334.642101] should_failslab+0xdb/0x130 [ 334.646119] kmem_cache_alloc+0x2d7/0x780 [ 334.646133] ? lock_downgrade+0x6e0/0x6e0 [ 334.646150] alloc_vfsmnt+0x28/0x7d0 [ 334.646162] vfs_kern_mount.part.0+0x2a/0x3d0 [ 334.646177] do_mount+0x417/0x27d0 [ 334.666187] ? copy_mount_string+0x40/0x40 [ 334.670434] ? memdup_user+0x58/0xa0 [ 334.674151] ? copy_mount_options+0x1fe/0x2f0 [ 334.678648] SyS_mount+0xab/0x120 [ 334.682088] ? copy_mnt_ns+0x8c0/0x8c0 [ 334.682103] do_syscall_64+0x1e8/0x640 [ 334.682112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.682130] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.682139] RIP: 0033:0x459879 [ 334.682144] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 334.682155] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 334.682160] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 334.682165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.682174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 334.739861] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 334.756775] CPU: 1 PID: 25630 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 334.756782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.756786] Call Trace: [ 334.756803] dump_stack+0x138/0x197 [ 334.756821] should_fail.cold+0x10f/0x159 [ 334.756837] should_failslab+0xdb/0x130 [ 334.756850] kmem_cache_alloc_node+0x287/0x780 [ 334.756866] ? __lock_acquire+0x5f7/0x4620 [ 334.756882] __alloc_skb+0x9c/0x500 [ 334.756892] ? skb_scrub_packet+0x4b0/0x4b0 [ 334.756921] alloc_skb_with_frags+0x86/0x4b0 [ 334.756934] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 334.756950] sock_alloc_send_pskb+0x5db/0x740 [ 334.756971] ? sock_wmalloc+0xf0/0xf0 [ 334.756989] ? _raw_spin_unlock+0x2d/0x50 [ 334.757003] unix_dgram_sendmsg+0x34c/0xf80 [ 334.757015] ? selinux_tun_dev_create+0xc0/0xc0 [ 334.757036] ? unix_stream_connect+0x11f0/0x11f0 [ 334.757053] ? security_socket_sendmsg+0x89/0xb0 [ 334.757063] ? unix_stream_connect+0x11f0/0x11f0 [ 334.757073] sock_sendmsg+0xce/0x110 [ 334.757085] kernel_sendmsg+0x44/0x50 [ 334.757098] sock_no_sendpage+0x107/0x130 17:00:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000040)=0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@empty, 0x5, r3}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 17:00:15 executing program 5: getresuid(&(0x7f0000002480)=0x0, &(0x7f00000024c0)=0x0, &(0x7f0000002500)) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x7, &(0x7f00000023c0)=[{&(0x7f0000000140)="5b86e5b6063b744f611b37c39183701b00fdc4f78c022f99cc08dc308845b4f3febc4722b6d8bdacc1158f8c3903020209ff0e519e83290638650e12c856fbc8ee6be6c4d4eed205e94fe398c1dd907e", 0x50, 0x43}, {&(0x7f0000000340)="80ac5381db8f0c9adc2a9629e25bfb9db1185a3dee78b061bcfb2b1edcb86f2b6d47a70c651f14ce9314ac60ffcd84e136e65908be1adaa897fd83d633bfd8f5f96c9ce8f0fddd7dc90e69b9f4e423351c10d8c3bc445e28061b415aa00f2de5accd4eea5dca9dd53e9d0708740efd516959a070e4da4c9ab9205f10828b0393233474baea41cee825f939bd13968bf78a63eb5d5d8b463186022de891de7fe986e6b467fbabbb55dd092909af21ce18c5cc872b68f94e1bb7d8ce8404692fe5eaf309b01211703b38b0c2eecd7346fcead8ab2091c8e6ae423774fd52c61e599b0accb097b6edf48aa35960f5f8e928ab8610d51002e1398999631cc302ddb76586cd64ee641ecc1a3cfad81da2203fb23e40b3dd4249610568318447368eaee8f6d02338077b8a9c6aff1678b4b589dbc1f265e3b2cf08a93c16bd482d0ff48c9151cb16840bfb2ff5ddea5b0f6933f2ceccfd8380649646dbf2deb26179ee97470423eeafcd99ba68a25f4c510f5f84f2c0ce9029b4b49c331bf73498505b7b3d445c284c508ef081619e12cc2068aca6453e9888d7e828736dd1645300d668408e7cd8d02c8891a975f8e244136352e41f974bb750318c0e10b49bf4b851d09587582937dd8de42891fde07780dfad942b52de9463583a22f24058704ad251bc866b6982d6ce517ae32d2e54d2e3d5e14c6ec7041f9b529cf78ae8ab796ce2d4dddcdd615e671e40a09e911263f8ef291750d40a641b9111c8fc07b66f291ce2c68668d14106a8271e0a42f4f7a33e752fd4263b107a99ee0882407eec1a97ed894861aca13bef6e1005904d175ed725522f5b940cb279d97ae8b9d886eae04650a88d8f1b40c0dd05d43aadfe2a06f284f39c9e108a94e5877e17bb7c7da62cfe25eda5f747c849941ac4b9798741d446037702f4e78b7358945deac119d5488f363c7505a1f7922d61b588891de740034ac136f832a3d20316070f29bf31a0cf7d62e88c8ece941685c3984621aa71066b3376d196ae43381488e40aa314214f1593ad7c885273e006d6e368d5353c19e3f6afb45cd17f63740bad3d59ca8948481a835afca47ca5a7abb7c33f386aff45d52b7d1540edc4a408c0f84decf9d92a6145459dcb53ff95704db35a01c803584f4f80843d1d2471d0614d92ae0b26c68b132f9a1df24efe7b29a798a0a8c39a4b42e52bd4528bd4076d057ce5a5894193796127ee74b1978bda18382920fa2debd7f021a8f2624c0ac85ce720d715bcfb1729adf593fc0033cc44573e9892e2d8bdaea184df07dc48d4ae061893a05c8882fd24dd695eb4a3c71db4e8a14612b7a00c4c7de970dfc32f762164ec64f1fa8fd0b29b46324f67176eaeb2f16e60a6169c29c2ea8b4b1d13f3c15fefcd2eb78405c2180fe24ae0a84cb74a595fe79e6b95a5fcbf44455ad7bad015c3b9f2b322384505467745b91e118f3eea2093ff6ab4e70bb530409c640893d4c0c3297db3b9613dd1eaa41c88a0a5e2174bb8bfc49d7fbfbe945706bb20051788346ddb251dd1ff214a53c5a3452274fa7aeecbaaaf8137157d37a9f5968a6d7d85a1fca9aa046b74f11ce66b66f5a5fcf55e4bf895f238b771b84efb03341bf0a762ff2cdd9948c7fda440016c9a5d50ab3bf70b91c39bfe163c7f1fe7dc45c8e1f38f7af89d0f95e4972a6033852c6bc2fcf1943477fd5752188c2ab1fefa3849d3a1d3e0cd2a82bdaa8dc1597d14e8e001900a19649823c44a0be39414dab0175b059d5e657357055005979a3596a5f34530ac6b913671a43f35a2c22200d9909c5da40c8c372a21facde4f4a111180e7a29ac55dc18095d7e54e2de432f0d67827c8cf9837b213bf3d9e285b304db2bf7a04f4a67a576e57388272cb4c6312ddf653b4df0f3a0c56b3b6e905542316b2a1d8f82ee506295560102fd0facbc43947126a754feddbd29ef6d34cff46dc35acd79bfeaf12f19f9dddfb952ee7f2757a391956146384de206015605fd1f49f6b17fb11bb66d39ce058d941ba58317364f27a6afb6eafc916626b8878508632c3674a5ccf09a69ec0530dd182bb5ac567653bb23ecafefdef2a563db1ff56634aa92f489c08ccec772eaa87a542aa5db18bab80ff89523f716503bd3ad6c93f018b43ee2457a334d25b39eb3c836027bc72ed049fa942548065256aac346ec473c69f08976a70ae4294406588e750a0909f95ff0224a59c595c39090349e6d0d9919b6bc6d066c5807cca4e4a3d209e37ba612627787c1c61bd5de760e2618cb4afbe14ab038e51f43f63ea519fb231f4d56d58835c7a74f7512923bfacc5043ff250db20a2e1d5a8df701098fb897410e86dbfcbcdcd436827d849b693a38e61c4110551fdb90539d26076d8d318d241ccf51b03c01c0fe714ab008151f72e3e1ffa9ddc53322a686fdb025050aaa60d5e1791141e2b750576b2583152114f84e0b45f4da5e673dd9f5da7ecbc6576561872c3c51bd310fc9df8505cb00659de6aa7d530d0ed1a217fe2c809c8e60226b10524d782a125eae5839ca1f8b32f30ffba5cea14dadb272b85151e30d198e1a1d371b0c335297a683c11a416e769a13235ef713e79464a92ad86b414cf973abf77e2913725772f0a2013b8996173a90e73748d41cc6f668ddf7de4f9ec2756f57881874d233b30337984fbd28764dcba232ed929346fc315355c148614fcdcff9a989d44522f63d12ab06e4bbaf379158ee8073a24f5d5dae324bcc96199d226a3103f5e447ccc12d7c499ff85caab49fbea112d257c1016e5a5cc559b4e3098954a7ba825c1114bacca592c96577da95cb6b415bdc942f11bd13023d78b889e46c8c2c27406e3f30fad79e14bd09e513a2e2aa8a8b379c5efa2a89e236b5c48c59333e09a038c9d086b18900bb979711dd43e8e116178e8b716480cce2a846cb1e917d912b9f57d59370464942c4200fa6f7a8dafbc4824efd1644e6498f54cc32568c37deabb4e4fd85d8d53c1228e9d9c4a446c07c258e55ca718b11df68603132ddfa64cd49bf88bb253ce6ffdf60e1fec07eb75df7099026c4c83180472a935538ec58dcc0c2e48a60b66fe9e686b51690409d29c3e1f64fd9ed9f2adda3bb650735686b333b244172e462649803b4e23bda048ac2ffd39645c318a9008927f469ba21ccd493aa5429169cb409173b5ed6d8dde90915c35c5d290a73fdb591874715915e12b3ac274d3a2395f99a398b68bd7ade95479e87082b39d9d836c3dfe36a88fd824c67104afbc618b56e6a1e6660b026357af58cbc3460917810221f25a0326e82b30e878594c431b38cc0f9efe5cf059431545f369eafa44c4c4cf7b4d9eac5a40754c816aa842f39d12040655edaf6aae1659a1439f7a7237a3752eeb6a56ed55e597455a47f21da0d2fd27f8aacd7859a106bc83eca011c167ced3112165de0b923d1943b6245a4a522a63ccd510207982e26d75a2a1ae064b0c888e7b38ecbc51c80e5f1272f1215eb8f81ce2cd1492b1a74df345ad1bc201c28b46e8e07c15a4f90bebb10e34c3377ba87b0b752202a55f2b679e36cadb2a00fa3f8cf1afcb41ca8180d619ccbec35052a9773ee0c45fe78be67d845ff2b9d2e70af893c0c12903d8064d6ee7897d8d6b13b2c8a6bdca92c69ffdecfa1091624a1c271c4e1021f885521ab3a26447c637a0134617f40c711c4fe4c4e152019ec2030540e358f09f374f3a894b7ee2ff682401186249e31deab4d5f49bc93055e490596a3c63093ef9acfd08fb901bd1f3304cd33f947c2d941374dc6edf99fac64aa2904ad190a57b40b03ea10c20e24c82dd798acdecf68b8ddcab711d7fcafde1a7806e6051e06fb146c5204ba29540f4864d81d218f8e0cf7d08f904347c889e69b7590d1e63fb0c6333a329e1edda76bcb861151801459f03c570edf88b0a6e08c771504b4b5a92662c9f263c83150412292fcf304f595b7383f3f86523d3b9202a6293186715d20cc7049b40dd90974394b3cdfa8d600990ed778a08b4191d207001d1631d24305b3e8e7dc67ecfd7fac7adaa55f7db26094a9efb8ccc3790b5f47152b68154ce89446e84eac81aa9b0ee955d417121eaecd81ca7bce13610a3d93d38bae7cd9716515b726b26bbefa2ccc1dbbbc4f24fa6049a0db20e2c0667350e608ce486e05690153adf28e9233afbe36027841f664af4f375cbac3feb2f37c9f01a7e6123c0d04893117620db81122e74c9f333ff3bc90cc3b0c170bb4b739367696e5328b18aa9dbf16c65336bd2010a13daf7e7bc74f51ae8c50f0bdc8ac3f3523144fbb35e0fd3086c47df7e29310442b8c0fd440422ea32b501803cfee581973e9e6bde64a542a15d30b67644bd244a666a5b8f1899165ddc248987cfba68b706792107d5a0af05b13f14925272b7309e84b2671619a88ec0ae5cc99a82ff64d778a14fc5f9525bdf65bedf96c8c14a4267c242e9471867d1c3133d81bfbe6119876f59c4618a2527f4e8d95a9707cb8177cb841061ecd4b532e30be0dce3d441170cf34868d1c3f9ae4f4c7f291ae199347bb537e216c9a13bfe641e54e3ff5ec359ef8673e67523c030f39171ad1df52337285c9978e8f6167a45bd7537b3c3902108275918a5b401cd8e8b080f950d71d805205a43c6b7a707d3b6b3a1bf8f1ba8166d7125fd2547ec755758a0f9ddcf21a7347b8f9df64dff5fec9982e4b27a07c2744fc57f83b997ddbed0fe7a880e0b74d768e9cf39fbaa7ddf41db883572cd9f22327b042842d131e8d4d279fc957ce688b3a93a002f37ec13b2ce028b20eadf064c463b93d4c075f969b33ebe32ec3533be5e762f8895d94239e13850146499577487f5f87916a7f14fba3bd123185cc14e7a3e4e451558eb2bfa14efb1d30a029e386b948d3daaa99b22dbaf6720579243e5ae0b9a5443cdd1ef9c3667bdb013ccdcdee44afcecf97b96651149a0320c3e30c7ab34740a30da2c94db8c498873df049f94e5b937079930fca603363592350b16d1ba68f29cfb94f42bfdd8681a5b396cbfdad203b716db25def566ad09d33cd23d1077144f47631f5b018ff1ffd79cf5bed1cf018e51638628b1a5c0cf380086e03f050b71263a6ccda0bf961ea35a46246d578c8ed955a6801d2f32943d1b3003342f6c05ec3703cef858daf65bcc1571dfad612d17f576c38874eef1f07f0b4d2401bf5b7af0f1dd2a0140da866fbbb6e5feda9666744792bb938d226dd2641a71f0e6526a06b0b4f23aee0d60443b7d62d777dba25c8899a228e913bb1d0909f156c83da8f00a5450a6e640e4afc503ba69fb0c9f1c2203f8aa97073c24bea1f7787e9cb7ecbfec809364a3866358bc841dcea138a5ae0ca71059fa60a3c9d287e1aa13fb6d7213b3068eae73f904b51106e82bb7dd3e2897a3104a2124da98ae4ef068ab1629e928e4ed20e04860926e041895ec6558428229ec9b68b0930c39178c76b605371659b9dd19d7edc488bdcd801370cb47eea5b5eff0627a11ed3c311e302098e4c238238cb3ca3a4087ffa986b4a6d614c2e0af9d4675e9c263712f8a0aa00ca7f0cb4ae93ec77ff2c4d4f1c08059e578ffe89ed8b9b445a9a76153de1c61eea9ba604ac5cf9d620ab6fbb3d9bb34d3f35621e8b3a1a69a545ab54eeb2a99a4e7b984713f2569e6b0ddca674031e0e7be3d3085eaa4af6adf5d9993ac24edc76c466882021b8f322d27b8af79be46f3bdd304dd54b31dc4a1add1ed08fa9b5d955fefa122e832cc484700229b3546d70ce93", 0x1000, 0x7}, {&(0x7f00000001c0)="f0954c4ba0b540395e657c6dd26f00925858b387c0f003773996ae11b51a7f3a5167834e2b27130e48c1aadcb9ff85578c5702f15b7a2bb3a5c8f5c1214eebf7ef1a06a7ba874e735b", 0x49, 0x47c659d0}, {&(0x7f0000001340)="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", 0x1000, 0x9}, {&(0x7f0000000240)="bb616741f10462d4118c7e4118fe94222d873f56a192bc113f2e76", 0x1b, 0x3}, {&(0x7f0000002340)="b7cc1cde88a0c97bbe7b917d920c5e705b51dc9885e034c77f4514fb8c1dec7f8dd8b7cc447c727b9717f64a8489037b2e8182a9b8787a4ac5661aeb3a768c69ddc2abf5d6db", 0x46, 0x7fffffff}, {&(0x7f00000002c0)="8c7cc82bd33a86bc90317f084300089239fee9d325c57a71bce5d1da90", 0x1d, 0x100}], 0x1, &(0x7f0000002540)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@user_xattr='user_xattr'}], [{@uid_lt={'uid<', r0}}, {@subj_role={'subj_role', 0x3d, 'security'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000002680)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = getgid() getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000002d80)={'TPROXY\x00'}, &(0x7f0000002dc0)=0x1e) fchownat(r2, &(0x7f00000026c0)='./file0\x00', r0, r3, 0x400) execve(&(0x7f0000002ac0)='./file1\x00', &(0x7f0000002c40)=[&(0x7f0000002b00)='uid<', &(0x7f0000002b40)='\x00', &(0x7f0000002b80)='noacl', &(0x7f0000002bc0)='vmnet0posix_acl_access!Tproc^+cgroup&-/\x00', &(0x7f0000002c00)='appraise'], &(0x7f0000002d40)=[&(0x7f0000002c80)='eth1\x00', &(0x7f0000002cc0)='\x00', &(0x7f0000002d00)='mime_type\x00']) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000002700)={0x0, @bt={0x100000000, 0x5e, 0x1, 0x2, 0x4, 0xffffffffffffff00, 0x7fff, 0x1, 0x2, 0x5, 0x70c5, 0x4, 0x2, 0x1, 0x13, 0x2}}) mkdir(&(0x7f0000002ec0)='./file1\x00', 0x83) syz_mount_image$f2fs(&(0x7f00000027c0)='f2fs\x00', &(0x7f0000002800)='./file0\x00', 0x100000001, 0x2, &(0x7f0000002980)=[{&(0x7f0000002840)="9f0b489349b9b4610c38cfd081c0cece8a93b4fe146af3525789c4bf9e39217856e7d3be87f83789e3e99aa7ce2ecf535182d7e5dbfabd4e55fe47ad51970b604e03b8cd037979455b2749502fa49f80b30b54f2996170a9510724fd0d8e5d3a34fb5d5dadbd87800aa8a57b53d401c4d0b631860da1cbdaf74a36865123c2b2294211209f48a4328d91960d0f803923b2ad36530eea2d9574f230b4bba5fcf07ca69c4c621a3bd9c87ece34c3a7a8f45c66b86d663d85b4f5c391c86185c2bbf8365f77", 0xc4, 0xc0c}, {&(0x7f0000002940)="13745ce7c6016a47e85a7d99248bc3db32193d4fb7", 0x15}], 0x40, &(0x7f00000029c0)={[{@noacl='noacl'}, {@test_dummy_encryption='test_dummy_encryption'}, {@extent_cache='extent_cache'}], [{@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_gt={'euid>', r0}}, {@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'subj_role'}}, {@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x77, 0x36, 0x655cf6ce452f742a, 0x36, 0x35, 0x32], 0x2d, [0x32, 0x64, 0x65, 0x61], 0x2d, [0x35, 0x0, 0x30, 0x66], 0x2d, [0x0, 0x0, 0x693339b3f7b578c0, 0x37], 0x2d, [0x30, 0x34, 0x64, 0x34, 0x61, 0x65, 0x33, 0x33]}}}]}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,port=0x0200000000000000,timeout=0x00000000ffe00000,\x00']) write$vhci(r2, &(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, "b07126d361b9845b"}, 0x9) setxattr$security_evm(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)='security.evm\x00', &(0x7f0000002640)=@md5={0x1, "55e2be6a61c0a4fac7b46f6d1586e7ff"}, 0x11, 0x2) 17:00:15 executing program 2 (fault-call:4 fault-nth:54): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:15 executing program 4 (fault-call:1 fault-nth:4): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 334.757108] ? sock_kzfree_s+0x50/0x50 [ 334.757117] ? finish_task_switch+0x178/0x650 [ 334.757139] ? retint_kernel+0x2d/0x2d [ 334.757151] kernel_sendpage+0x92/0xf0 [ 334.757159] ? sock_kzfree_s+0x50/0x50 [ 334.757171] sock_sendpage+0x8b/0xc0 [ 334.757181] ? kernel_sendpage+0xf0/0xf0 [ 334.757191] pipe_to_sendpage+0x242/0x340 [ 334.757203] ? direct_splice_actor+0x190/0x190 [ 334.757218] __splice_from_pipe+0x348/0x780 [ 334.757228] ? direct_splice_actor+0x190/0x190 [ 334.757249] ? direct_splice_actor+0x190/0x190 [ 334.757258] splice_from_pipe+0xf0/0x150 [ 334.757270] ? splice_shrink_spd+0xb0/0xb0 [ 334.757292] generic_splice_sendpage+0x3c/0x50 17:00:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4a00, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x1000) 17:00:15 executing program 2 (fault-call:4 fault-nth:55): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 334.757299] ? splice_from_pipe+0x150/0x150 [ 334.757310] direct_splice_actor+0x123/0x190 [ 334.757323] splice_direct_to_actor+0x29e/0x7b0 [ 334.757337] ? generic_pipe_buf_nosteal+0x10/0x10 [ 334.757351] ? do_splice_to+0x170/0x170 [ 334.757363] ? rw_verify_area+0xea/0x2b0 [ 334.757375] do_splice_direct+0x18d/0x230 [ 334.757386] ? splice_direct_to_actor+0x7b0/0x7b0 [ 334.757403] ? rw_verify_area+0xea/0x2b0 [ 334.757416] do_sendfile+0x4db/0xbd0 [ 334.757435] ? do_compat_pwritev64+0x140/0x140 [ 334.757450] ? fput+0xd4/0x150 [ 334.757463] SyS_sendfile64+0x102/0x110 [ 334.757473] ? SyS_sendfile+0x130/0x130 [ 334.757482] ? do_syscall_64+0x53/0x640 [ 334.757494] ? SyS_sendfile+0x130/0x130 [ 334.757506] do_syscall_64+0x1e8/0x640 [ 334.757514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 334.757530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 334.757538] RIP: 0033:0x459879 [ 334.757544] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.757555] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 334.757561] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 334.757566] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 334.757572] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 334.757578] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 334.999204] FAULT_INJECTION: forcing a failure. [ 334.999204] name failslab, interval 1, probability 0, space 0, times 0 [ 334.999219] CPU: 0 PID: 25674 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 334.999226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.999231] Call Trace: [ 334.999247] dump_stack+0x138/0x197 [ 334.999267] should_fail.cold+0x10f/0x159 [ 334.999285] should_failslab+0xdb/0x130 [ 334.999302] kmem_cache_alloc_node+0x287/0x780 [ 334.999320] ? __lock_acquire+0x5f7/0x4620 [ 334.999335] __alloc_skb+0x9c/0x500 [ 334.999346] ? skb_scrub_packet+0x4b0/0x4b0 [ 334.999364] alloc_skb_with_frags+0x86/0x4b0 [ 334.999378] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 334.999394] sock_alloc_send_pskb+0x5db/0x740 17:00:15 executing program 4 (fault-call:1 fault-nth:5): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 334.999417] ? sock_wmalloc+0xf0/0xf0 [ 334.999445] ? _raw_spin_unlock+0x2d/0x50 [ 334.999462] unix_dgram_sendmsg+0x34c/0xf80 [ 334.999476] ? selinux_tun_dev_create+0xc0/0xc0 [ 334.999499] ? unix_stream_connect+0x11f0/0x11f0 [ 334.999522] ? security_socket_sendmsg+0x89/0xb0 [ 334.999534] ? unix_stream_connect+0x11f0/0x11f0 [ 334.999546] sock_sendmsg+0xce/0x110 [ 334.999560] kernel_sendmsg+0x44/0x50 [ 334.999576] sock_no_sendpage+0x107/0x130 [ 334.999587] ? sock_kzfree_s+0x50/0x50 [ 334.999616] kernel_sendpage+0x92/0xf0 17:00:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$packet(r2, &(0x7f0000000040)=""/24, 0x18, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000702000e002f4eba9d6465762f7377726164696f23001f000000"], 0x1b) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = fcntl$getown(r3, 0x9) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000003c0)={0x15b0, 0x1, 0x100000001, 0x400, 0x8, 0x1, 0x4}) fcntl$setownex(r3, 0xf, &(0x7f0000000340)={0x1, r4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), 0x4) bind$x25(r3, &(0x7f0000000480)={0x9, @null=' \x00'}, 0x12) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x9, 0x1, 0xf1a3, 0x0, 0x9, 0x4, 0x6, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1000, 0x7f, 0x49f280, 0x8, 0x7}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r5, 0x0, 0x401}, &(0x7f00000002c0)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x0, @remote, 0x29e}, @in6={0xa, 0x4e24, 0x7ff, @mcast2, 0x8}, @in={0x2, 0x4e20, @rand_addr=0xf367}, @in={0x2, 0x9, @empty}], 0x58) [ 334.999626] ? sock_kzfree_s+0x50/0x50 [ 334.999639] sock_sendpage+0x8b/0xc0 [ 334.999649] ? timespec_trunc+0xb5/0x120 [ 334.999659] ? kernel_sendpage+0xf0/0xf0 [ 334.999670] pipe_to_sendpage+0x242/0x340 [ 334.999684] ? direct_splice_actor+0x190/0x190 [ 334.999701] __splice_from_pipe+0x348/0x780 [ 334.999712] ? direct_splice_actor+0x190/0x190 [ 334.999736] ? direct_splice_actor+0x190/0x190 [ 334.999747] splice_from_pipe+0xf0/0x150 [ 334.999761] ? splice_shrink_spd+0xb0/0xb0 [ 334.999783] generic_splice_sendpage+0x3c/0x50 [ 334.999791] ? splice_from_pipe+0x150/0x150 [ 334.999803] direct_splice_actor+0x123/0x190 [ 334.999817] splice_direct_to_actor+0x29e/0x7b0 [ 334.999833] ? generic_pipe_buf_nosteal+0x10/0x10 [ 334.999847] ? do_splice_to+0x170/0x170 [ 334.999858] ? rw_verify_area+0xea/0x2b0 [ 334.999872] do_splice_direct+0x18d/0x230 [ 334.999884] ? splice_direct_to_actor+0x7b0/0x7b0 [ 334.999902] ? rw_verify_area+0xea/0x2b0 [ 334.999916] do_sendfile+0x4db/0xbd0 [ 334.999937] ? do_compat_pwritev64+0x140/0x140 [ 334.999953] ? fput+0xd4/0x150 [ 334.999967] SyS_sendfile64+0x102/0x110 [ 334.999978] ? SyS_sendfile+0x130/0x130 [ 334.999988] ? do_syscall_64+0x53/0x640 [ 335.000001] ? SyS_sendfile+0x130/0x130 [ 335.000012] do_syscall_64+0x1e8/0x640 [ 335.000021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.000037] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.000045] RIP: 0033:0x459879 [ 335.000050] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 335.000062] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 335.000067] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 335.000074] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.000080] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 335.000086] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 335.016241] FAULT_INJECTION: forcing a failure. [ 335.016241] name failslab, interval 1, probability 0, space 0, times 0 [ 335.069037] CPU: 1 PID: 25678 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 335.074571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.082832] Call Trace: [ 335.082847] dump_stack+0x138/0x197 [ 335.082865] should_fail.cold+0x10f/0x159 [ 335.082879] should_failslab+0xdb/0x130 [ 335.082891] kmem_cache_alloc_trace+0x2e9/0x790 [ 335.082902] ? lock_downgrade+0x6e0/0x6e0 [ 335.082920] sget_userns+0xfe/0xc30 [ 335.082930] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 335.082944] ? kernfs_sop_show_options+0x190/0x190 [ 335.082957] kernfs_mount_ns+0xe9/0x790 [ 335.082972] cgroup_do_mount+0x9e/0x270 [ 335.082984] ? init_cgroup_root+0x310/0x310 [ 335.082993] ? ns_capable_common+0x12c/0x160 [ 335.083006] cgroup_mount+0x789/0x8b0 [ 335.090143] ? __lockdep_init_map+0x10c/0x570 [ 335.090156] ? cgroup_attach_task+0x6c0/0x6c0 [ 335.090172] mount_fs+0x97/0x2a1 [ 335.090187] vfs_kern_mount.part.0+0x5e/0x3d0 [ 335.090201] do_mount+0x417/0x27d0 [ 335.090220] ? copy_mount_string+0x40/0x40 [ 335.098135] ? memdup_user+0x58/0xa0 [ 335.098144] ? copy_mount_options+0x1fe/0x2f0 [ 335.098158] SyS_mount+0xab/0x120 [ 335.126957] ? copy_mnt_ns+0x8c0/0x8c0 [ 335.126977] do_syscall_64+0x1e8/0x640 [ 335.126987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.156034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.156044] RIP: 0033:0x459879 [ 335.156050] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.164015] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 335.174486] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 335.174492] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 335.174497] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.174503] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 335.174509] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 335.281526] FAULT_INJECTION: forcing a failure. [ 335.281526] name failslab, interval 1, probability 0, space 0, times 0 [ 335.317217] FAULT_INJECTION: forcing a failure. [ 335.317217] name failslab, interval 1, probability 0, space 0, times 0 [ 335.327868] CPU: 0 PID: 25694 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 335.343316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.343322] Call Trace: [ 335.343340] dump_stack+0x138/0x197 [ 335.343358] should_fail.cold+0x10f/0x159 [ 335.343372] should_failslab+0xdb/0x130 [ 335.711116] kmem_cache_alloc_node_trace+0x280/0x770 [ 335.711131] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 335.721672] __kmalloc_node_track_caller+0x3d/0x80 [ 335.726596] __kmalloc_reserve.isra.0+0x40/0xe0 [ 335.731261] __alloc_skb+0xcf/0x500 [ 335.734882] ? skb_scrub_packet+0x4b0/0x4b0 [ 335.739202] alloc_skb_with_frags+0x86/0x4b0 [ 335.743610] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 335.748535] sock_alloc_send_pskb+0x5db/0x740 [ 335.753031] ? sock_wmalloc+0xf0/0xf0 [ 335.756832] ? _raw_spin_unlock+0x2d/0x50 [ 335.760977] unix_dgram_sendmsg+0x34c/0xf80 [ 335.765290] ? selinux_tun_dev_create+0xc0/0xc0 [ 335.769956] ? unix_stream_connect+0x11f0/0x11f0 [ 335.774740] ? security_socket_sendmsg+0x89/0xb0 [ 335.779485] ? unix_stream_connect+0x11f0/0x11f0 [ 335.784231] sock_sendmsg+0xce/0x110 [ 335.787941] kernel_sendmsg+0x44/0x50 [ 335.791738] sock_no_sendpage+0x107/0x130 [ 335.795888] ? sock_kzfree_s+0x50/0x50 [ 335.795917] kernel_sendpage+0x92/0xf0 [ 335.795927] ? sock_kzfree_s+0x50/0x50 [ 335.795937] sock_sendpage+0x8b/0xc0 [ 335.795949] ? timespec_trunc+0xb5/0x120 [ 335.803697] ? kernel_sendpage+0xf0/0xf0 [ 335.803709] pipe_to_sendpage+0x242/0x340 [ 335.803722] ? direct_splice_actor+0x190/0x190 [ 335.803739] __splice_from_pipe+0x348/0x780 [ 335.803750] ? direct_splice_actor+0x190/0x190 [ 335.837015] ? direct_splice_actor+0x190/0x190 [ 335.841603] splice_from_pipe+0xf0/0x150 [ 335.845691] ? splice_shrink_spd+0xb0/0xb0 [ 335.849932] generic_splice_sendpage+0x3c/0x50 [ 335.854529] ? splice_from_pipe+0x150/0x150 [ 335.860391] direct_splice_actor+0x123/0x190 [ 335.864807] splice_direct_to_actor+0x29e/0x7b0 [ 335.869475] ? generic_pipe_buf_nosteal+0x10/0x10 [ 335.874314] ? do_splice_to+0x170/0x170 [ 335.878282] ? rw_verify_area+0xea/0x2b0 [ 335.882338] do_splice_direct+0x18d/0x230 [ 335.886480] ? splice_direct_to_actor+0x7b0/0x7b0 [ 335.891320] ? rw_verify_area+0xea/0x2b0 [ 335.895476] do_sendfile+0x4db/0xbd0 [ 335.899382] ? do_compat_pwritev64+0x140/0x140 [ 335.903959] ? fput+0xd4/0x150 [ 335.907173] SyS_sendfile64+0x102/0x110 [ 335.911138] ? SyS_sendfile+0x130/0x130 [ 335.915102] ? do_syscall_64+0x53/0x640 [ 335.919068] ? SyS_sendfile+0x130/0x130 [ 335.923036] do_syscall_64+0x1e8/0x640 [ 335.926916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.931759] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.936937] RIP: 0033:0x459879 [ 335.940133] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 335.947834] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 335.955096] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 335.962362] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.969627] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 335.976894] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000100)=0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) [ 335.984174] CPU: 1 PID: 25696 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 335.993810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.993814] Call Trace: [ 335.993827] dump_stack+0x138/0x197 [ 335.993840] should_fail.cold+0x10f/0x159 [ 335.993852] should_failslab+0xdb/0x130 17:00:16 executing program 2 (fault-call:4 fault-nth:56): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 335.993862] kmem_cache_alloc_trace+0x2e9/0x790 [ 335.993870] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 335.993878] ? sget_userns+0xfe/0xc30 [ 335.993886] ? rcu_read_lock_sched_held+0x110/0x130 [ 335.993898] selinux_sb_alloc_security+0x46/0x220 [ 335.993907] security_sb_alloc+0x6d/0xa0 [ 335.993914] sget_userns+0x196/0xc30 [ 335.993923] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 335.993933] ? kernfs_sop_show_options+0x190/0x190 [ 335.993941] kernfs_mount_ns+0xe9/0x790 [ 335.993953] cgroup_do_mount+0x9e/0x270 [ 335.993960] ? init_cgroup_root+0x310/0x310 [ 335.993968] ? ns_capable_common+0x12c/0x160 [ 335.993977] cgroup_mount+0x789/0x8b0 [ 335.993987] ? __lockdep_init_map+0x10c/0x570 [ 335.993995] ? cgroup_attach_task+0x6c0/0x6c0 [ 335.994005] mount_fs+0x97/0x2a1 [ 335.994015] vfs_kern_mount.part.0+0x5e/0x3d0 [ 335.994025] do_mount+0x417/0x27d0 [ 335.994037] ? copy_mount_string+0x40/0x40 [ 335.994046] ? memdup_user+0x58/0xa0 [ 335.994053] ? copy_mount_options+0x1fe/0x2f0 [ 335.994063] SyS_mount+0xab/0x120 [ 335.994068] ? copy_mnt_ns+0x8c0/0x8c0 [ 335.994078] do_syscall_64+0x1e8/0x640 [ 335.994084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 335.994096] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 335.994102] RIP: 0033:0x459879 [ 335.994106] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.994114] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 335.994118] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 335.994122] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.994126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 335.994130] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 336.121115] FAULT_INJECTION: forcing a failure. [ 336.121115] name failslab, interval 1, probability 0, space 0, times 0 [ 336.121129] CPU: 0 PID: 25715 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 336.121137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.121140] Call Trace: [ 336.121158] dump_stack+0x138/0x197 [ 336.121175] should_fail.cold+0x10f/0x159 [ 336.121194] should_failslab+0xdb/0x130 [ 336.121209] kmem_cache_alloc_node_trace+0x280/0x770 [ 336.121224] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 336.121241] __kmalloc_node_track_caller+0x3d/0x80 [ 336.121255] __kmalloc_reserve.isra.0+0x40/0xe0 [ 336.121268] __alloc_skb+0xcf/0x500 [ 336.121279] ? skb_scrub_packet+0x4b0/0x4b0 [ 336.121296] alloc_skb_with_frags+0x86/0x4b0 [ 336.121311] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 336.121328] sock_alloc_send_pskb+0x5db/0x740 [ 336.121350] ? sock_wmalloc+0xf0/0xf0 [ 336.121368] ? _raw_spin_unlock+0x2d/0x50 [ 336.121383] unix_dgram_sendmsg+0x34c/0xf80 [ 336.121395] ? selinux_tun_dev_create+0xc0/0xc0 [ 336.121418] ? unix_stream_connect+0x11f0/0x11f0 [ 336.121437] ? security_socket_sendmsg+0x89/0xb0 [ 336.121448] ? unix_stream_connect+0x11f0/0x11f0 [ 336.121459] sock_sendmsg+0xce/0x110 [ 336.121471] kernel_sendmsg+0x44/0x50 [ 336.121485] sock_no_sendpage+0x107/0x130 [ 336.121497] ? sock_kzfree_s+0x50/0x50 [ 336.121526] kernel_sendpage+0x92/0xf0 [ 336.121534] ? sock_kzfree_s+0x50/0x50 [ 336.121547] sock_sendpage+0x8b/0xc0 [ 336.121556] ? timespec_trunc+0xb5/0x120 [ 336.121566] ? kernel_sendpage+0xf0/0xf0 [ 336.121576] pipe_to_sendpage+0x242/0x340 [ 336.121589] ? direct_splice_actor+0x190/0x190 [ 336.121606] __splice_from_pipe+0x348/0x780 [ 336.121617] ? direct_splice_actor+0x190/0x190 [ 336.121634] ? direct_splice_actor+0x190/0x190 [ 336.121651] splice_from_pipe+0xf0/0x150 [ 336.121665] ? splice_shrink_spd+0xb0/0xb0 [ 336.121690] generic_splice_sendpage+0x3c/0x50 [ 336.121699] ? splice_from_pipe+0x150/0x150 [ 336.121712] direct_splice_actor+0x123/0x190 [ 336.121727] splice_direct_to_actor+0x29e/0x7b0 [ 336.121746] ? generic_pipe_buf_nosteal+0x10/0x10 [ 336.121760] ? do_splice_to+0x170/0x170 [ 336.121772] ? rw_verify_area+0xea/0x2b0 [ 336.121786] do_splice_direct+0x18d/0x230 [ 336.121797] ? splice_direct_to_actor+0x7b0/0x7b0 [ 336.121814] ? rw_verify_area+0xea/0x2b0 [ 336.121828] do_sendfile+0x4db/0xbd0 [ 336.121848] ? do_compat_pwritev64+0x140/0x140 [ 336.121861] ? fput+0xd4/0x150 [ 336.121873] SyS_sendfile64+0x102/0x110 [ 336.121882] ? SyS_sendfile+0x130/0x130 [ 336.121890] ? do_syscall_64+0x53/0x640 [ 336.121902] ? SyS_sendfile+0x130/0x130 [ 336.121913] do_syscall_64+0x1e8/0x640 [ 336.121922] ? trace_hardirqs_off_thunk+0x1a/0x1c 17:00:17 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0xd, 0x12, 0x9, 0xd, 0x8, 0x8, 0x0, 0x10c, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000000c0)=""/131) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) 17:00:17 executing program 4 (fault-call:1 fault-nth:6): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) 17:00:17 executing program 2 (fault-call:4 fault-nth:57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:17 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x48) link(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0/file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001700)='dax\x00', 0x0, 0x0) mount(&(0x7f0000001a00)=ANY=[@ANYBLOB="2f369a6de60e8bbbda8ed6788e6400"], &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='openpromfs\x00', 0x0, &(0x7f00000019c0)='nfs\x00') syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x85a, 0x8, &(0x7f0000001600)=[{&(0x7f0000000100)="470bd445ac341aad3cab4052eaf544c27e229308dbaa9d60cbece4c79073f05284184b7334653842da24d5066492456ac605fee1e3de16e64234c588518540002a95ae4aa6055b9e71f7bd0cf7a4fffa", 0x50, 0x2}, {&(0x7f0000000180)="87add4e51c7c3b897eb3b75d7221c6ea3cbaf5f65b78f2d8ad0c53a52f714560f417b2ee01a4e03fcdffade55f92545cc55b9bb7de69d719e2f1b85c288c32e18685f3489ceb81dc1ba4d2e6fdee78fd35239e28cf38e82c4b5ba768bb16884acd1fade07fb1e50ed5cb9f4575cee0cc323b8bca5a39277963f75fc6baea1eb876bb19f9304030c7c6117e40bd2823d014bb599f6bcb245ff8926333b919c72595f3d92446d2cb31f995543349ab74a3595552651ac4fa967f3ac5d0e1da818ba2fc0293858649e3920655c473c6c754ee2ba978a5549f854157ec31d1e030a81400665d", 0xe4, 0x6}, {&(0x7f0000000280)="d1147b2e2ee3e8a9dd9f7362449b836b5080f28ec930cccc68366c069c77ed13191769d7a4d681976b8dcc724c93e8731a4957af323d8bfb861a92311ca713effc0ea1791bb93e35d7377396b04dc83a3671228ebce0a19742baad90d8fd25efd09534697d3b1327023b314f436f31afc00796258291a23081eed60c50a373b2", 0x80, 0xffffffff}, {&(0x7f0000000340)="dbf9c4a66ddca8790c26a5a5fa055542330f7dd3f40b772ea6502febb94131cea74bd1621fbc086ecdc11071afc378d0ab29544a1f03fd92659bfe4bd46fe97024a9a71803ae5f620884b3c5c8b0ff2fe80190596ac31ab11debf7ae04a24c39b707fe11a83f969f5fc5073bde858cc2c26f6825c7770399cd276254ba43e77637cfe0f8a4ae69c79b6f4f44e1f2863c28e660b28ba757b0fdb40c3c05dc0c1e522bb1c81b9a811bf4c2073770c3655efc01bcc4d1ac34e74fae90f10c616101eaadd79be2ac11d0e0edb75f5eee03bd28bcb396dae37785dd767d2d2dd75ea4395ead8a3b", 0x19, 0x101}, {&(0x7f0000000440)="f9437f76bbcdf7268e22e2ce81613d86", 0x10, 0x864}, {&(0x7f0000000480)="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", 0x1000, 0x80000000}, {&(0x7f0000001480)="ac83dcca8091f56c7b29e698e03bd4f0e2d177e1bfc91737dea97adf6a4dca053a5895d3c706c7b93b2fc57670b6f53232bb60ae3894ad5483f469b17db6becdbafcf07fde2173c40dfc95aa5baa65fa6d863a4e80da739f1cf794f977df1a50929d58d02e9a59b06467032235e8515c9e21d330886c9f06d320b70a481847c69251b11142870eb9d765d4d9f62c62d2a2f2ae9ad4683a19480d", 0x9a, 0x20}, {&(0x7f0000001540)="5f4da7f26292260f43a0924441d84d3716c365b55cf99f29dd101eada92a241bb975bad67a5072d022368771b669dd3e8795837575689df1a935f817b17e12eaf93e4c3b2cb31abc77b3602d81ffc49ac314e9450a49c700fd0f3fcbe2b2d0acae55139bd80406dfd35a592d4ec325037406b54cc9207d58553a3890c60d5846ee262d001131144fbcbad14e15cf43eb02763ce5d8c9e0c0c21985352cfdcd26869d74d52e8f80185a", 0xa9}], 0x0, &(0x7f00000016c0)='dax\x00') r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7, 0xb81eb829d7ca221a) accept4(r0, &(0x7f00000017c0)=@nfc, &(0x7f0000001840)=0x80, 0x80800) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000001780)={0x0, 0x1aca494f, 0x8000, &(0x7f0000001740)=0x9}) 17:00:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9e1, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x9, 0xffffffff, 0xcb, 0xb6c0, 0x2}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x4, 0x84}, @window={0x3, 0x2, 0x2}], 0x20000000000001a4) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), 0x4) bind(r0, &(0x7f00000001c0)=@sco={0x1f, {0xe8f, 0x1, 0x0, 0xff, 0x6, 0x6}}, 0x80) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000003c0)={0x1, 0x1000, 0x2, 0x143, 0x3, [{0x9, 0x5, 0xf8d, 0x0, 0x0, 0x80}, {0x2b, 0x52db, 0x2, 0x0, 0x0, 0x2000}, {0x10001, 0x9, 0x0, 0x0, 0x0, 0x280}]}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) bind$isdn(r3, &(0x7f00000002c0)={0x22, 0x3ff, 0x0, 0xffffffff7fffffff, 0xfffffffffffffffa}, 0x6) [ 336.121936] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 336.121944] RIP: 0033:0x459879 [ 336.121950] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 336.121961] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 336.121967] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 336.121973] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 336.121980] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 336.121986] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 17:00:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000002740)='/dev/snd/seq\x00', 0x0, 0xa98b0670cc8edc0d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000002640)={0x7fff, 0x6, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x101000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002400)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xfffffe68) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000240)=[{&(0x7f0000000400)="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", 0x1000, 0xa33}, {&(0x7f0000000100)="a794d13762282e6deda287e76966c18d6813a8effdfd52a6b38c3529ba66bb51af786e3d6984bf6fffe272216e02fb2de4f508531c237c47694fd4ec11c27d3c65b218e5d1d38b8afaf761585e1627a37ea183fc46a01ad389cdb9bfa744d9c740e68047a83766099afadc6069ac45b00f3181299e288ab3f7bbc29ecc8db71a9c97d5b65b2edc8e7c22231ce4b8141826af47ddc00f3d29724f289c95f048031fef24a01237105b1c07dc63d79faefd602eb3e951978a7b918de6cee7d41362298a7825e90696784b1623f9e3afa112bb2918cd2af83ec7a3b51621566a751f2cd3210e8a1039", 0xe7}, {&(0x7f0000001400)="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", 0x1000, 0x7}, {&(0x7f0000000200)="161907c2d53cdfed0315d8bfe2bb2fe23f6b8d0d87209ae9d3f4871f1887820d22", 0x21, 0x100}], 0x800000, &(0x7f0000002500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="2c69c7ac9506", @ANYRESDEC=r2, @ANYBLOB=',context=staff_u,\x00']) [ 336.730964] FAULT_INJECTION: forcing a failure. [ 336.730964] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 336.742800] CPU: 0 PID: 25726 Comm: syz-executor.2 Not tainted 4.14.141 #37 [ 336.742809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.742813] Call Trace: [ 336.742832] dump_stack+0x138/0x197 [ 336.742853] should_fail.cold+0x10f/0x159 [ 336.742869] __alloc_pages_nodemask+0x1d6/0x7a0 [ 336.742879] ? fs_reclaim_acquire+0x20/0x20 [ 336.742891] ? __alloc_pages_slowpath+0x2930/0x2930 [ 336.742913] cache_grow_begin+0x80/0x400 [ 336.742926] kmem_cache_alloc_node_trace+0x697/0x770 [ 336.759732] __kmalloc_node_track_caller+0x3d/0x80 [ 336.768739] hfs: unable to change iocharset [ 336.770034] __kmalloc_reserve.isra.0+0x40/0xe0 [ 336.770047] __alloc_skb+0xcf/0x500 [ 336.770059] ? skb_scrub_packet+0x4b0/0x4b0 [ 336.823479] alloc_skb_with_frags+0x86/0x4b0 [ 336.827878] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 336.832795] sock_alloc_send_pskb+0x5db/0x740 [ 336.837292] ? sock_wmalloc+0xf0/0xf0 [ 336.841082] ? _raw_spin_unlock+0x2d/0x50 [ 336.845216] unix_dgram_sendmsg+0x34c/0xf80 [ 336.849522] ? selinux_tun_dev_create+0xc0/0xc0 [ 336.854192] ? unix_stream_connect+0x11f0/0x11f0 [ 336.858948] ? security_socket_sendmsg+0x89/0xb0 [ 336.863690] ? unix_stream_connect+0x11f0/0x11f0 [ 336.868521] sock_sendmsg+0xce/0x110 [ 336.872215] kernel_sendmsg+0x44/0x50 [ 336.876007] sock_no_sendpage+0x107/0x130 [ 336.880136] ? sock_kzfree_s+0x50/0x50 [ 336.884015] kernel_sendpage+0x92/0xf0 [ 336.887882] ? sock_kzfree_s+0x50/0x50 [ 336.891751] sock_sendpage+0x8b/0xc0 [ 336.895446] ? timespec_trunc+0xb5/0x120 [ 336.899502] ? kernel_sendpage+0xf0/0xf0 [ 336.903548] pipe_to_sendpage+0x242/0x340 [ 336.907679] ? direct_splice_actor+0x190/0x190 [ 336.912357] __splice_from_pipe+0x348/0x780 [ 336.916674] ? direct_splice_actor+0x190/0x190 [ 336.921273] ? direct_splice_actor+0x190/0x190 [ 336.925834] splice_from_pipe+0xf0/0x150 [ 336.929888] ? splice_shrink_spd+0xb0/0xb0 [ 336.934114] generic_splice_sendpage+0x3c/0x50 [ 336.938687] ? splice_from_pipe+0x150/0x150 [ 336.942992] direct_splice_actor+0x123/0x190 [ 336.947383] splice_direct_to_actor+0x29e/0x7b0 [ 336.952041] ? generic_pipe_buf_nosteal+0x10/0x10 [ 336.956870] ? do_splice_to+0x170/0x170 [ 336.960830] ? rw_verify_area+0xea/0x2b0 [ 336.964874] do_splice_direct+0x18d/0x230 [ 336.969005] ? splice_direct_to_actor+0x7b0/0x7b0 [ 336.973833] ? rw_verify_area+0xea/0x2b0 [ 336.977878] do_sendfile+0x4db/0xbd0 [ 336.981579] ? do_compat_pwritev64+0x140/0x140 [ 336.986323] ? fput+0xd4/0x150 [ 336.989497] SyS_sendfile64+0x102/0x110 [ 336.993453] ? SyS_sendfile+0x130/0x130 [ 336.997407] ? do_syscall_64+0x53/0x640 [ 337.001366] ? SyS_sendfile+0x130/0x130 [ 337.005322] do_syscall_64+0x1e8/0x640 [ 337.009192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.014028] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.019201] RIP: 0033:0x459879 [ 337.022370] RSP: 002b:00007f33acfa3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 337.030639] RAX: ffffffffffffffda RBX: 00007f33acfa3c90 RCX: 0000000000459879 [ 337.037905] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003 [ 337.045156] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.052409] R10: 0000000100000000 R11: 0000000000000246 R12: 00007f33acfa46d4 [ 337.059672] R13: 00000000004c7065 R14: 00000000004dc6d0 R15: 0000000000000006 [ 337.076901] hfs: unable to parse mount options 17:00:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x2, 0x718e244c27d11467, 0x80, 0x87, r2}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) prctl$PR_GET_SECCOMP(0x15) [ 337.085145] FAULT_INJECTION: forcing a failure. [ 337.085145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 337.097039] CPU: 1 PID: 25738 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 337.104141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.113495] Call Trace: [ 337.116099] dump_stack+0x138/0x197 [ 337.119741] should_fail.cold+0x10f/0x159 [ 337.123897] __alloc_pages_nodemask+0x1d6/0x7a0 [ 337.123910] ? fs_reclaim_acquire+0x20/0x20 [ 337.132884] ? __alloc_pages_slowpath+0x2930/0x2930 [ 337.137905] cache_grow_begin+0x80/0x400 [ 337.141967] kmem_cache_alloc_trace+0x6b2/0x790 [ 337.146619] ? lock_downgrade+0x6e0/0x6e0 [ 337.150756] sget_userns+0xfe/0xc30 [ 337.154366] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 337.159020] ? kernfs_sop_show_options+0x190/0x190 [ 337.163935] kernfs_mount_ns+0xe9/0x790 [ 337.167896] cgroup_do_mount+0x9e/0x270 [ 337.171857] ? init_cgroup_root+0x310/0x310 [ 337.176160] ? ns_capable_common+0x12c/0x160 [ 337.180569] cgroup_mount+0x789/0x8b0 [ 337.184354] ? __lockdep_init_map+0x10c/0x570 [ 337.188832] ? cgroup_attach_task+0x6c0/0x6c0 [ 337.193401] mount_fs+0x97/0x2a1 [ 337.196855] vfs_kern_mount.part.0+0x5e/0x3d0 [ 337.201338] do_mount+0x417/0x27d0 [ 337.204877] ? copy_mount_string+0x40/0x40 [ 337.209096] ? memdup_user+0x58/0xa0 [ 337.212791] ? copy_mount_options+0x1fe/0x2f0 [ 337.217279] SyS_mount+0xab/0x120 [ 337.220723] ? copy_mnt_ns+0x8c0/0x8c0 [ 337.224682] do_syscall_64+0x1e8/0x640 [ 337.228557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.233389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.238562] RIP: 0033:0x459879 [ 337.241737] RSP: 002b:00007f82e6943c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.249428] RAX: ffffffffffffffda RBX: 00007f82e6943c90 RCX: 0000000000459879 [ 337.256682] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 337.263933] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 337.271200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69446d4 [ 337.278453] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 17:00:17 executing program 4 (fault-call:1 fault-nth:7): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) 17:00:17 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200001, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)) 17:00:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d72646d612c706f62743d3078303030303030303030303030303030302c72713d3078303030303030050000003030303038312c00bc6dea455a0d66afac77ff09a734452c10a759cbe59e03bb46f7b36ca36cb625614fc6a6f05a00e627e57f30296cb4afa5d25301e189d2b29796938303e370b2c6abb86ef09b"]) acct(&(0x7f00000000c0)='./file0\x00') 17:00:17 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x85, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xa, 0x9, 0x0, 0x7}, 0xa) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='da*\xd6', 0x0, 0x0) [ 337.431547] FAULT_INJECTION: forcing a failure. [ 337.431547] name failslab, interval 1, probability 0, space 0, times 0 [ 337.463785] CPU: 0 PID: 25759 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 337.470921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.480361] Call Trace: [ 337.482960] dump_stack+0x138/0x197 [ 337.486596] should_fail.cold+0x10f/0x159 [ 337.490750] should_failslab+0xdb/0x130 [ 337.494737] __kmalloc+0x2f0/0x7a0 [ 337.498283] ? __list_lru_init+0x6b/0x660 [ 337.502440] __list_lru_init+0x6b/0x660 [ 337.506434] sget_userns+0x4e0/0xc30 [ 337.510233] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 337.510248] ? kernfs_sop_show_options+0x190/0x190 [ 337.510260] kernfs_mount_ns+0xe9/0x790 [ 337.510277] cgroup_do_mount+0x9e/0x270 [ 337.519847] ? init_cgroup_root+0x310/0x310 [ 337.519858] ? ns_capable_common+0x12c/0x160 [ 337.519872] cgroup_mount+0x789/0x8b0 [ 337.519885] ? __lockdep_init_map+0x10c/0x570 [ 337.519895] ? cgroup_attach_task+0x6c0/0x6c0 [ 337.549315] mount_fs+0x97/0x2a1 [ 337.552690] vfs_kern_mount.part.0+0x5e/0x3d0 [ 337.557204] do_mount+0x417/0x27d0 [ 337.560759] ? copy_mount_string+0x40/0x40 [ 337.564399] 9pnet: Could not find request transport: rdÀ„ [ 337.564998] ? memdup_user+0x58/0xa0 [ 337.574234] ? copy_mount_options+0x1fe/0x2f0 [ 337.578738] SyS_mount+0xab/0x120 17:00:17 executing program 5: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d7264c0842c706f72743f5fac78303030303030303030303030303030303030303c303066666530343030302c00000000000000000000000000e5dfb08b3f5066db8f7efb032ab23d257440572aaaa29cfc6c64501138cf4ce5fe3e86d39beceafccef8f9f1e9467e1924f5078da7c54659f7c89562d08a583125250a2208781c44bb0fd67e0f1fcd216f58f073b3e576322016d8f94005892d590faf5c4eb2867209e29355cd8dd77a4fe4e9cd9e6d03620c"]) 17:00:18 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/dlm-monitor\x00', 0x84507, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000b40)={0x2e, @local, 0x4e22, 0x2, 'lblcr\x00', 0x3, 0x1, 0x3f}, 0x2c) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r2 = accept4$inet(r1, &(0x7f0000000a00), &(0x7f0000000a40)=0x10, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000740)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x4018, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xffffffff}}], [{@obj_role={'obj_role', 0x3d, 'ppp0bdevnodev'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@hash='hash'}]}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/load\x00', 0x2, 0x0) r5 = geteuid() getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x7d32db0de5bcb73e, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30308f1e0000000000003030303030303030323030c2a8b621d047526d3fce30302c757365720400643d", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',default_permissions,obj_role=:eth0,fscontext=root,uid>', @ANYRESDEC=r8, @ANYBLOB=',dont_hash,obj_role=9p\x00,rootcontext=staff_u,rootcontext=root,\x00']) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x3}, [{0x2, 0x2, r8}, {0x2, 0x1, r8}, {0x2, 0x3, r5}, {0x2, 0x1, r8}, {0x2, 0x6, r5}, {0x2, 0x5157c013e4a4f926, r8}, {0x2, 0x0, r8}, {0x2, 0x2, r5}, {0x2, 0x1, r8}], {0x4, 0x5}, [{0x8, 0x7, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x74, 0x2) [ 337.582189] ? copy_mnt_ns+0x8c0/0x8c0 [ 337.586085] do_syscall_64+0x1e8/0x640 [ 337.589972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.594829] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.600017] RIP: 0033:0x459879 [ 337.603205] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.610917] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 337.618182] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 17:00:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) r3 = fcntl$getown(r0, 0x9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x541002, 0x0) ptrace$peek(0x5670794a8ac40073, r3, &(0x7f0000000040)) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) 17:00:18 executing program 3: futex(&(0x7f0000000080)=0x2, 0x81, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x1) r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) 17:00:18 executing program 4 (fault-call:1 fault-nth:8): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) [ 337.618189] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.618195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 337.618201] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 17:00:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x0, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, [""]}, 0x68}}, 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 337.745361] FAULT_INJECTION: forcing a failure. [ 337.745361] name failslab, interval 1, probability 0, space 0, times 0 [ 337.819173] CPU: 1 PID: 25781 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 337.826502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.835952] Call Trace: [ 337.838559] dump_stack+0x138/0x197 [ 337.842205] should_fail.cold+0x10f/0x159 [ 337.846452] should_failslab+0xdb/0x130 [ 337.850434] __kmalloc+0x2f0/0x7a0 [ 337.853984] ? lock_downgrade+0x6e0/0x6e0 [ 337.858972] ? register_shrinker+0xbd/0x220 [ 337.863300] register_shrinker+0xbd/0x220 [ 337.867446] sget_userns+0x9bf/0xc30 [ 337.871163] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 337.875840] ? kernfs_sop_show_options+0x190/0x190 [ 337.880771] kernfs_mount_ns+0xe9/0x790 [ 337.884753] cgroup_do_mount+0x9e/0x270 [ 337.888727] ? init_cgroup_root+0x310/0x310 [ 337.888765] ? ns_capable_common+0x12c/0x160 [ 337.888778] cgroup_mount+0x789/0x8b0 [ 337.897494] ? __lockdep_init_map+0x10c/0x570 [ 337.897509] ? cgroup_attach_task+0x6c0/0x6c0 [ 337.897527] mount_fs+0x97/0x2a1 [ 337.897542] vfs_kern_mount.part.0+0x5e/0x3d0 [ 337.897556] do_mount+0x417/0x27d0 [ 337.921704] ? copy_mount_string+0x40/0x40 [ 337.925945] ? memdup_user+0x58/0xa0 [ 337.929663] ? copy_mount_options+0x1fe/0x2f0 [ 337.935355] SyS_mount+0xab/0x120 [ 337.938813] ? copy_mnt_ns+0x8c0/0x8c0 [ 337.942715] do_syscall_64+0x1e8/0x640 [ 337.946607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 337.951543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 337.951552] RIP: 0033:0x459879 [ 337.951557] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.951567] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 337.951573] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 337.951578] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.951583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 337.951589] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 337.953505] kasan: CONFIG_KASAN_INLINE enabled [ 337.965920] kasan: GPF could be caused by NULL-ptr deref or user memory access 17:00:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4480, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x9fa, 0x46f, 0x1, 0x1, 0x6f9, 0x734242d2, 0x4, 0x4413, 0x0, 0x0, 0x6, 0x4, 0x3, 0xc2a, 0x1, 0x4}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) 17:00:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0xbfb88f9f2dc331fe) r1 = accept4(r0, &(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, &(0x7f0000000380)=0x80, 0x0) bind$vsock_stream(r1, &(0x7f0000000480)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{}, 0x0, 0x0, 0x80de}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0xfffffffffffffffc, 0x8}, {0xffff, 0x7}, {0x3ff, 0xcc}, {0x8001, 0x21}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r4 = gettid() tgkill(r3, r4, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000280)='security.SMACK64EXEC\x00', &(0x7f00000002c0)='/dev/snd/seq\x00', 0xd, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3f, 0x200) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000}) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000180)=0x5) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)={r6, r7, 0xdf2}) 17:00:18 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma,port=px0000000000000000ltimeout=0x00000000ffe00000,\x00m']) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xee5935b1a1999bbe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x2}) 17:00:18 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1f4) 17:00:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="bd", 0x1}], 0x1) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [], @multicast1}, 0x1ff}], 0x3c) sendfile(r0, r2, 0x0, 0x100000000) dup2(r2, r1) [ 338.017493] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 338.023721] Modules linked in: [ 338.026917] CPU: 1 PID: 25781 Comm: syz-executor.4 Not tainted 4.14.141 #37 [ 338.034024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.043602] task: ffff8880a908c580 task.stack: ffff8880a0c98000 [ 338.049668] RIP: 0010:cgroup_kill_sb+0x2e/0x330 [ 338.054332] RSP: 0018:ffff8880a0c9fac0 EFLAGS: 00010246 [ 338.059692] RAX: 0000000000000000 RBX: 00000000fffffff4 RCX: 0000000000000000 17:00:18 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_WIE_OFF(r0, 0x7010) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0xc00, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@obj_user={'obj_user'}}, {@obj_role={'obj_role', 0x3d, 'dax\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsroot={'smackfsroot'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_gt={'euid>', r4}}]}}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='dax\x00', 0x0, 0x0) [ 338.066960] RDX: dffffc0000000000 RSI: ffffffff81a9ab2c RDI: ffff88808c72a5b0 [ 338.074224] RBP: ffff8880a0c9fae0 R08: ffff8880a908c580 R09: ffff8880a908ce20 [ 338.080336] kobject: 'loop1' (ffff8880a495d6a0): kobject_uevent_env [ 338.081486] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88808c72a580 [ 338.081492] R13: ffffffff877add80 R14: ffff88808c72a580 R15: dffffc0000000000 [ 338.081500] FS: 00007f82e6965700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 338.087912] kobject: 'loop1' (ffff8880a495d6a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 338.095147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.095153] CR2: 00007f4d2d8fcc88 CR3: 000000007bae0000 CR4: 00000000001406e0 [ 338.095160] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.095165] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.095168] Call Trace: [ 338.095184] deactivate_locked_super+0x74/0xe0 [ 338.095193] sget_userns+0x9d9/0xc30 [ 338.095202] ? kernfs_sop_show_path+0x1b0/0x1b0 [ 338.095211] ? kernfs_sop_show_options+0x190/0x190 [ 338.095222] kernfs_mount_ns+0xe9/0x790 [ 338.172141] cgroup_do_mount+0x9e/0x270 [ 338.172152] ? init_cgroup_root+0x310/0x310 [ 338.180434] ? ns_capable_common+0x12c/0x160 [ 338.180447] cgroup_mount+0x789/0x8b0 [ 338.180459] ? __lockdep_init_map+0x10c/0x570 [ 338.180469] ? cgroup_attach_task+0x6c0/0x6c0 [ 338.180483] mount_fs+0x97/0x2a1 17:00:18 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x100010084) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000300)={'trans=rdma,', {'port'}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xffe00000}}]}}) [ 338.180497] vfs_kern_mount.part.0+0x5e/0x3d0 [ 338.180507] do_mount+0x417/0x27d0 [ 338.180526] ? copy_mount_string+0x40/0x40 [ 338.180537] ? memdup_user+0x58/0xa0 [ 338.180546] ? copy_mount_options+0x1fe/0x2f0 [ 338.180558] SyS_mount+0xab/0x120 [ 338.180566] ? copy_mnt_ns+0x8c0/0x8c0 [ 338.180578] do_syscall_64+0x1e8/0x640 [ 338.180587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 338.180601] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 338.180608] RIP: 0033:0x459879 [ 338.180613] RSP: 002b:00007f82e6964c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 338.180623] RAX: ffffffffffffffda RBX: 00007f82e6964c90 RCX: 0000000000459879 [ 338.180629] RDX: 00000000200002c0 RSI: 0000000020000200 RDI: 0000000000000000 [ 338.180634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 338.180639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f82e69656d4 [ 338.180644] R13: 00000000004c5eb7 R14: 00000000004da918 R15: 0000000000000003 [ 338.180656] Code: e5 41 55 41 54 49 89 fc 53 48 83 ec 08 e8 7b 2a 06 00 4c 89 e7 e8 f3 f3 52 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 c4 02 00 00 48 8b 18 48 b8 00 00 00 00 00 fc [ 338.180849] RIP: cgroup_kill_sb+0x2e/0x330 RSP: ffff8880a0c9fac0 [ 338.207692] ---[ end trace ebe2785004224587 ]--- [ 338.215057] kobject: 'loop5' (ffff8880a4ab6960): kobject_uevent_env [ 338.217344] Kernel panic - not syncing: Fatal exception [ 338.228340] kobject: 'loop5' (ffff8880a4ab6960): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 338.230772] Kernel Offset: disabled [ 338.361838] Rebooting in 86400 seconds..