op#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x2de) 09:14:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 370.275926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.370797] ISOFS: Unable to identify CD-ROM format. 09:14:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf706d614e5c9711d) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffff77) ftruncate(r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x8, 0x100010, r1, 0x4000000000000) recvfrom$netrom(r1, &(0x7f0000000000)=""/13, 0xd, 0x100, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 370.398881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.542504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:35 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00\x80a`\x12i\xad\xf3J\xa4\a\xbd\xf5z\xdc\xd2\xfe\xb5\xfb\xf5E\xc1\x92f\xff9k\xa5a\x93\xaf\x86\x7f\xea\xd7h>k\xf7\xff\xf8R\xa5\xe1_\x9eE\x9a\xd2\xc3\x06\xac\xe6\xd7\x94RV\x95\xa5\xb5D\xd9\f\x8f\xdf\x87\xacQR\xa1L\xb6\x91\xd7\x00M\x88\x1f#\xb1\xb9!X\xb2\xc7\xaaD\xda4T\xb8\x8f\x1a:\x17\xbe\xe05Q\x9c\xed\xebt\xa8\x16\x92\x10\xcd\x1f\t\xe3\xa1&\xbc\x1d\xca\x83a9\xdd\x1e\xba/\xd0\x04\x19<\xffN3\x1c\x93t\n\xad\xa6\aV\x8b\xe2\xc4\x11\x91\xc9\xc7\xe1\x13\x80q\xa4\xa0\xa8\xfc\t(\xaf\x96(\xcb\xb2\xf3\xfc\xb3H4\xb5vp\xb9G\xe3\xde\xc0\xa4c\x82K\xefvVB\x91\x8d\xdb\x88H\x8b\xddh\x8e\xd8\x87\xd0!\xb72\xaa$5\x17^E\xb4\xb0\xc7q>\xfc\x13O\x96\xcfG\xc5\xc9,C\xa5\xbc\x86N\xf1\x02\x8a@@\x84\xb4\xed\xe5\x12I\xb6\xf2\x8bx\xdc5\xd8\xd4\xd7\xcb\x8a\nk@\x93\x9alH\xb10X\xc2\xb1f\xde\x9d\x12\vKE+M\b:I\xbb\xd7)\xff\xff\xff\x7f\xa1\xffk\xf7\x03S~\n6\xee\xfdx7@\x8b\xecJv\x9ct\x04\xd8\x86\xef\xe9n>\x16[F\x0e6\xa5^N*\x16\x01$\x92*~h\xe8$\xd7N\x80\xa5\xf0\xcb\x8d2\x85\x13\x14iK\x9f\xc0\xd3\xcc\x87\x12mW\xd2Qi\x9f\xf2\x11\xbfJ.\x9e\xf8\xb8\x86M0a\b\xedM`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5\v\x96\xc8\tL\xcb;\xc1\xa5Ac\x81\x12\xe8uC\x11\xf8\'\aj\xf0j(\xbd\xa3\xa3\xb0YDu\x0fNSv\xc2=Roa\xd6cOp\xaa\"cc]\x83(\xdf\xa1J\xd7W\xa7\x18U\x01\xf9\xc6\x87jX\x8a&\xd1+zT\x16\xbc%\x8dx$\xe5\xe3\xb3A\x11\x02\x14f\x99\xc5\x9e\xbc\x04\xbdN\xb3]\xb8\x932\xe7\x02\x7f\xda\xef}DC\x8d\x95\x11\xe6E\x98O@\xc1e\x17\x83@\x1c\xc5x3\x15\xe5i\xe2\xbf\xb4\x04\xb0 \x10\xd6t7\'ZNF\xd3Z\xd8\xa4\xd7e\x1bs\xee\xb6\x14@\xe8M\xec\xb2\xeaX\xb0\xf3\xf6\x18\xe8]k\x0fh\x95\xfc>\xa8,\xc9\x81\x85\xf3=\xe8\x16\xdbn{V=\x9aj\xa7`1:\x0f\t\xae\f1\'\xd2\x06\xf3\xb7\xcf\xeb\x81\xd8?G\xe5\x01\xfe\xb5&\x9d\xf0', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 09:14:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/raw6\x00') ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x220000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0x9b0000, 0xffff6c7a, 0x0, [], &(0x7f0000000080)={0xa00906, 0x80000001, [], @string=&(0x7f0000000040)=0x47}}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4), 0xc776be179a0e2459) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r4, 0x50800) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r6) r7 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r8 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)) epoll_pwait(r11, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r15, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r16, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r16, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r17, r18, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r19, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r22 = dup3(r20, r21, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r25, r26, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r27, r28, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r4, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r28, @ANYRES64=r11, @ANYRESHEX, @ANYRESDEC=r12, @ANYRESOCT=r5, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r13], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r18, @ANYRESOCT=r26, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES64=r14, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64=r19], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r4, @ANYRES32=r24, @ANYRES32=r22, @ANYRES64], @ANYRESHEX=r15, @ANYRESHEX=r16, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r8, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r4], 0x0) sendfile(r7, r6, 0x0, 0x80005) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000140)=0x7, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200d5070000"], 0x2de) 09:14:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r3, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 370.969067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 371.035618] ISOFS: Unable to identify CD-ROM format. 09:14:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00146e"], 0x2de) 09:14:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:35 executing program 5: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffa7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 371.144278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r3, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 371.300597] audit: type=1800 audit(1570785275.433:194): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=17654 res=0 [ 371.309937] ISOFS: Unable to identify CD-ROM format. [ 371.393546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.422405] audit: type=1804 audit(1570785275.433:195): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir245197003/syzkaller.LgtaEG/19/file0" dev="sda1" ino=17654 res=1 09:14:35 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="022f5f4aaa0040"], 0x2de) personality(0x5000004) 09:14:35 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r3, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200d533000000"], 0x2de) [ 371.829671] ISOFS: Unable to identify CD-ROM format. 09:14:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:36 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0xc000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x826}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) 09:14:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:36 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 09:14:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) exit_group(0x7) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 372.057779] audit: type=1804 audit(1570785276.183:196): pid=18528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir245197003/syzkaller.LgtaEG/19/file0" dev="sda1" ino=17654 res=1 [ 372.162520] ISOFS: Unable to identify CD-ROM format. 09:14:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:36 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:36 executing program 5: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000002c0)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x14) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setxattr(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6f73322e2f6465762f0000000100000040ff5d97aa1804c404b4b9b0f4706ba07113e602b870865ec6"], &(0x7f00000004c0)='ifb0\x00', 0x5, 0x0) syncfs(r0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) inotify_init1(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) 09:14:36 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:36 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000037c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003800)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0)="0cb303f39e5a286440978923354141a4f223dcd8f4e2e578f1a907f20d7e519dc08f81495c0cfe8db30400ac6f80fae7c7350b1872591a8d1bb16256b448b913d8e3afe52eed02f2f4eb6214e8c83456cefb7e940c178a8762ef36d9f87605d3867c37676068f38b53e84dd45d85d96a8af7e8778980a5ce1c0ac24c11bd442ef318a7cb67766070188398af91b4c33b9d14b95a0842f29cae5338c526678b3691f71e3ba7811c6c614b3cab86e8ff35a5c564", 0xb3, r2}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x7, 0xa0, 0x4}) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, &(0x7f0000000240)=0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r6, 0x50800) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r7 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r7, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r8) r9 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r10 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, r10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040)) epoll_pwait(r13, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r15, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r16, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r17, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r18, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r18, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r19, r20, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r21, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r24 = dup3(r22, r23, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r25, r26, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r27, r28, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r29, r30, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r6, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r30, @ANYRES64=r13, @ANYRESHEX, @ANYRESDEC=r14, @ANYRESOCT=r7, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r15], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r20, @ANYRESOCT=r28, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r8, @ANYRES32=0x0, @ANYRES64=r16, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r21], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r6, @ANYRES32=r26, @ANYRES32=r24, @ANYRES64], @ANYRESHEX=r17, @ANYRESHEX=r18, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r10, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r6], 0x0) sendfile(r9, r8, 0x0, 0x80005) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="027dd3000000"], 0x2de) 09:14:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r15, r16, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 372.810430] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 373.011504] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 373.151343] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 373.322560] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:37 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 373.608287] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:37 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="66b8b9000f00d0c7442400b7fe0000c744240250260000c7442406000000000f011c240f78ba0000c0fe660f3834860a000000c4c275ac7c2c003e3e0f79970c00000066baf80cb8caae098cefb8000000000f23d00f21f835300000040f23f8ecc6f84c0f32f30fc736", 0x47}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05e2550100bc3c90d22329ef00"], 0x2de) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="2d9a85380eac9abcabc12d059a3829a13e8325f2db1b856cfa58b171e2dde96aedf3c2e55daec10932598dec8e1813c8d040fc7cf59590f2be9ed6f54840f81d9c1c8c0353a87f0626ea5e48a7bf79493b6d83c0b401fb29e5b706118b84785a19e4154dd1a3c35c4190aab175a59c0fdf79c63cff13cf00c47c62582bd161cfc6b7dfb56637f328ca038fe5a113f2c9a31ed94aa9508f8975c7499924da654915bd6ac48803e9f12144dafa4e352a9d9bc0adae88e40492284d4e0c88085df14c3825a8da68c53f4fc10d67be173140c4f2d0ff9bf3a4b25964fe8c182c20bf23732b52093d5449ea4113f70e3013f46f596e4c02903b5120", 0xf9) 09:14:37 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:37 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 373.817103] ISOFS: Unable to identify CD-ROM format. 09:14:37 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 373.839779] nla_parse: 6 callbacks suppressed [ 373.839784] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 373.906263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 09:14:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:38 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x5669a13da8c7d8ea, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x20000, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r15, r16, 0x0) pipe(&(0x7f0000000180)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 374.101813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.132481] ISOFS: Unable to identify CD-ROM format. 09:14:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 374.335547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.366568] ISOFS: Unable to identify CD-ROM format. 09:14:38 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xe6, 0x8000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000300)={0xfffffffa, 0x8, 0x2, 0xc3, &(0x7f0000000140)=""/195, 0x71, &(0x7f0000000240)=""/113, 0x13, &(0x7f00000002c0)=""/19}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000cff0001"], 0x2de) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) fstat(r2, &(0x7f00000003c0)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000340)="23a183965bfd9c6089faaea29037e77733e5a9", 0x13, 0x800, &(0x7f0000000380)={0xa, 0x4e20, 0xffffffff, @ipv4={[], [], @remote}, 0xfff}, 0x1c) accept$ax25(r3, &(0x7f0000000040)={{0x3, @bcast}, [@null, @rose, @bcast, @null, @bcast, @remote, @remote, @default]}, &(0x7f00000000c0)=0x48) 09:14:38 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:38 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 374.597431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 374.646058] ISOFS: Unable to identify CD-ROM format. 09:14:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:38 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 374.813074] ISOFS: Unable to identify CD-ROM format. [ 374.828740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:39 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 375.088224] ISOFS: Unable to identify CD-ROM format. 09:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xd309d4cbe444e838) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xfffff001, 0xd7, "2896bd9229cb52bb097a1c9a7d7a13ee2ab6db9623fbd7a47fc86992138a496bedefdb82a35c165af2de3e347c23d222209d6eac6fcf090c0453dfc8ab1fea64071b8d7b761ce478de44a583490f7540110f1eae64a84088b123e95bad22d5d05a670eca0ced088c0388a2172dea689cfc1c02da651a242166a1f8f6a7dffb831b0f27faf7e2a2f9dcae6d7b6ae7bf991654045167e688d6a8595bf788ab4152aae14fc4db1b466c92755517ce0a38c0f8567c4f70c82218cf4e009b54ce0e15ab82aa9525b6e828b7ddeee43f7b5c3ecdbaeb102c1d9e"}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02008f1cd5b8"], 0x2de) 09:14:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 375.477951] ISOFS: Unable to identify CD-ROM format. [ 375.485091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:39 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 375.692332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.723063] ISOFS: Unable to identify CD-ROM format. 09:14:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)="7321f6ab139678693c9f0038429f874baf02197aee65554c87014c74461b1ebd443adcb62569397c2541d3f8e791bd970538fdab8a39873acdce2b67f3c3dc2986a674c00af81279db528758fb1d1cbf7c42bc2342fbce894afda774146581d51daf6a1f6d9a95a4238434a7b00e94ad8beee41caa9b5b0734eee7ef3c04a2ec6b35714fb2a50691650bed8a5206c6c45def62142a5c474558e31fc11a4dc1cea0bfce6945891fc94f88c353dbcee9e51aef624e51") setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x2, 0x5, [0x8, 0x1, 0x0, 0x0, 0x7]}, 0x12) 09:14:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x401, 0x40341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x873}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x108001, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r5, 0xe, 0x1, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x800, @mcast2, 0x9}, @in={0x2, 0x4e20, @multicast2}], 0x2c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c00f5000000"], 0x2de) 09:14:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 376.004804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.027898] ISOFS: Unable to identify CD-ROM format. [ 376.170334] ISOFS: Unable to identify CD-ROM format. 09:14:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r15, r16, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r18, r19, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 376.364070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.367699] ISOFS: Unable to identify CD-ROM format. 09:14:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 376.543202] ISOFS: Unable to identify CD-ROM format. 09:14:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="a4bb885e6361f90ee2f70169955515df9a90c96e22794b4c63e057de4338715191980fffa73d5be2481d7d6b320700040000000000bb9b05d6f5b37d9394d287ae2e17d94d9ae4c947ff9e70e268144916b344eb0cb81501f453b21790fc2a5455168473c4e3fe597267e5dbf2c80f6ca10784b287a46245d6d0db9c301f384029969a692235213dca0f5847de0bede7a111b0d0e9da0eb90f79489c8a85f75c1376328216b4776b31b439420519a8d52a9135308bc930e79f8eef9b2463376e0a3a0c1c5ccefe7248c6c92f70587a85f472618ab1776827bb416482e05af9f407"], 0x2de) 09:14:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:40 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 376.847916] ISOFS: Unable to identify CD-ROM format. 09:14:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x2, @rand_addr="0a77f9c0260d44deee4cacb49ba0b558", 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x3c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='wlan1\x00', 0xffffffffffffffff}, 0x30) write(r1, &(0x7f0000000080)="4468f3db50504caaf99f1dd31e06ae01774b2d8543d362ae05fd151f72f5b7b2e2ebd7f6db60df5de93ef7c5ab0590ea4bccac5d30bcd4559c58c896cb14d44c725c7accbcd95c87c6b06c07770742ebf70b3288e68a59a8835ba021bdd09974442b2620b3442fa22441aa02d89af84b12a503a618953df4b35e98f1685e5f26f5b42d8441a4bc809b42d0639a5917b7a21c4b4c7b76aff9b2692d8f1ea42a6fb5b0ee0e1f113c275e07349495b28fdc5d47a154c0987695689fa0f5ab750401d20797", 0xc3) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:41 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:41 executing program 5: bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000), 0x4) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000240)={0xffffff7f, 0x0, 0x141b7a6}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x77359400}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x80c, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x60, &(0x7f0000ffa000/0x4000)=nil, 0x3}) write(r1, &(0x7f0000000600)='4', 0x4100) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r4) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000200)={0x1, 0x400}) 09:14:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 377.224950] ISOFS: Unable to identify CD-ROM format. 09:14:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 377.317336] audit: type=1800 audit(1570785281.443:197): pid=18943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="loop5" ino=137 res=0 09:14:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r3 = fcntl$dupfd(r1, 0x406, r2) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x20}, @empty, 0x1, 0x1, 0x0, 0x400, 0xff, 0x1000000, r4}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x1}, 0xc1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(0x0, 0x0, 0x395) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = semget(0x3, 0x0, 0x402) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000002c0)=""/152) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x1ff}, 0x4) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) accept$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x8) write(r7, &(0x7f0000000600)="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", 0x1e0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x7fffffa7) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000003c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x200006, 0x0, 0x0, 0x0, 0xffffffffbfffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) [ 377.529475] ISOFS: Unable to identify CD-ROM format. 09:14:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9846589b8ba7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c712e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec8768500"/184, @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/72], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 377.878197] audit: type=1800 audit(1570785282.003:198): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16525 res=0 [ 377.921981] audit: type=1804 audit(1570785282.033:199): pid=18994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir245197003/syzkaller.LgtaEG/30/file0" dev="sda1" ino=16525 res=1 09:14:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000080)=0xda6, 0xffffffffffffffa7) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0xce23, 0x0, @loopback, 0x2000003}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/72], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x79009a31d7f95099, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x57, 0x7, {"8e4c34a0455e767b93ebcec4eef36747"}, 0x7, 0x80000000, 0x200}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 378.176625] ISOFS: Unable to identify CD-ROM format. 09:14:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/72], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 378.329043] ISOFS: Unable to identify CD-ROM format. 09:14:42 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x9fc76beebfa369a5, 0x8) ioctl$BLKRRPART(r0, 0x125f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r1, r1) dup(r1) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x10002, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000002f00000026bd700000000000ce6f5df17e4ad3d7b2ed16322582542b338cd5c7cd59faa7feae306371e5d3f732e17322860de2a80b7529bbac3497c2174556eedbbfc3b53159d4ceaa16cf945766f5dbf56f80ca5e82fee7f340f4a361a4ee2511d406f3f8fb4ed2e2c81a7cab633ea6c8d40febea1ef30f96b70c09826d436f753f59fab492a9e612761f3615c1242f03d9fa9e85d202beb2"], 0x1}}, 0x4004) write$P9_RREADDIR(r2, &(0x7f0000000800)={0x1c5, 0x29, 0x1, {0x6, [{{0x42, 0x3, 0x3}, 0x100, 0x9f, 0x4d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}, {{0x48, 0x3}, 0xffffffff, 0x1d, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0x3ff, 0x9, 0x7, './file0'}, {{0x20, 0x0, 0x4}, 0x6c5, 0xe4, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x3ff, 0xa1, 0x7, './file0'}, {{0x10, 0x0, 0x1}, 0x5, 0x0, 0x53, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0'}, {{0x9, 0x1, 0x7}, 0x2e, 0x63, 0x56, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0'}]}}, 0x1c5) 09:14:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:42 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x79009a31d7f95099, 0x2}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/84], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 378.598226] ISOFS: Unable to identify CD-ROM format. 09:14:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/84], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:43 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8e846efc47165809, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/84], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:43 executing program 5: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r3, 0x50800) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_pwait(r10, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r15, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r16, r17, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r18, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r21 = dup3(r19, r20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r26, r27, 0x0) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r28, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r28, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r28, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r28, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r28, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r28, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r29 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r29, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r29, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r29, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r29, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r29, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r29, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000001a00)=ANY=[], 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000001c0)={[{0x1, 0x81, 0x6, 0x27, 0x7, 0x40, 0x7f, 0x8d, 0x81, 0x7, 0x40, 0x7, 0x9}, {0x125, 0x4, 0x6, 0x1, 0x3, 0x9, 0x8, 0x0, 0x9, 0x0, 0x3f, 0xfc, 0x8}, {0x0, 0x0, 0x2, 0x1f, 0x1, 0xfa, 0x9, 0xf4, 0x8, 0x1, 0x0, 0x40, 0x7}], 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000000)=""/81, 0xffffffd5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 09:14:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 379.049622] ISOFS: Unable to identify CD-ROM format. [ 379.063364] audit: type=1804 audit(1570785283.193:200): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir245197003/syzkaller.LgtaEG/32/memory.events" dev="sda1" ino=16881 res=1 09:14:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 379.118145] audit: type=1800 audit(1570785283.223:201): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="memory.events" dev="sda1" ino=16881 res=0 09:14:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 379.194132] audit: type=1804 audit(1570785283.223:202): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir245197003/syzkaller.LgtaEG/32/memory.events" dev="sda1" ino=16881 res=1 09:14:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @broadcast}, &(0x7f0000000080)=0x80, 0x474e28bd58dabe2f) r2 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r3, 0x20, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 379.251513] nla_parse: 9 callbacks suppressed [ 379.251519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 379.346723] ISOFS: Unable to identify CD-ROM format. 09:14:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/90], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x831}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8bb, 0x208000) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x14, 0xe6, &(0x7f0000000140)="a4ca5c759ef0a1813d8ad2e94a5a808c4facbcae5e8562d190a2f5e8c7f99932f92a9ad3f2fe20d9235b53fe70f02ee4532773ce50da3ee3ab44713214bddbfe356a4645c35088aecf367186c3f01eb43a9a3722f5b37fdd182768949ba6185d3a8de11d14a86a4055bea3cff0b6ad4c9a60a2c3fea0091be62c2d2def25f8ce847fea0452726de78516e25a1d997a01792a39e40baabd407eb1615eb2b3a64c8099a3f5e752c8f4350fe5a1b89dadbd5599154e0a13455811887e2dc5972501c98b241469e398a1d3de9174c47a62f358a6043192e0a06056e56de088bc10345ce11c200be7"}) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0xa9, 0x0) r3 = socket$isdn(0x22, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r9, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r9, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2dd284bb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400d0}, 0x14) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='overlay\x00', 0x4, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@xino_on='xino=on'}, {@default_permissions='default_permissions'}, {@xino_auto='xino=auto'}, {@nfs_export_on='nfs_export=on'}, {@metacopy_off='metacopy=off'}, {@xino_off='xino=off'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fowner_gt={'fowner>', r5}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 09:14:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 379.574962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.583329] ISOFS: Unable to identify CD-ROM format. 09:14:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/90], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 379.737175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000000d0000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdde}, 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond0\x00'}, 0x18) 09:14:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/90], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 379.940316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.953519] ISOFS: Unable to identify CD-ROM format. 09:14:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 380.094073] ISOFS: Unable to identify CD-ROM format. 09:14:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/93], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:44 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0xffffff89, 0x4) r26 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r26, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r27, &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x40, 0x101, 0x8401, 0x46, 0x0, 0x5, 0x8, 0x200, r27}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={r28, 0x2, 0x6, [0x5, 0x3f, 0x1, 0xa, 0x5, 0xf779]}, 0x14) [ 380.375427] ISOFS: Unable to identify CD-ROM format. 09:14:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 380.398110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/93], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 380.546124] ISOFS: Unable to identify CD-ROM format. [ 380.566491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80, 0x80800) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='ex\x8f\x00') keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r2, 0xd7, 0x8a}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'sha384-arm64\x00'}}, &(0x7f0000000180)="e7d1a10245daa21a22180d04dd30449b6a435724a38a73e7acd7d3cc000bb2e0342370b5bda0aa2bfc56c83b8bce3547e032c92f5352f18257a7c09be9e29bba2503ddc6704ebd8bff930970064c92af1a90634ef660b3c6a345023cfb483921fe6004ae4967b7b670177d9536f0f9376a8aba74e5b978b5a2431ad6e284f71879dbff7fe6a77825745ac4ece25943a03d93902e3bf1c0517591dee6fc23df59ed564e398b3d8f75d99528c6557c9598db8458d74fd8be382bf20b3102d79ff52c58f99adf3e1e77e66de0c5036e1ea89d3a88766d0971", &(0x7f0000000280)=""/138) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e22, 0x10000, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, r4, 0x1, 0x0, 0x0, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2008401c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) r5 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x8, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) 09:14:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x0) 09:14:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/93], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:44 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600d5000000"], 0x2de) 09:14:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 380.882541] ISOFS: Unable to identify CD-ROM format. [ 380.898725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/95], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r1, &(0x7f0000000480)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '.#GPLvboxnet1'}, 0x25, 0xfffffffffffffffb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/208, &(0x7f0000000640)=0xd0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$FUSE_INIT(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) socket$packet(0x11, 0x0, 0x300) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000820}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000007b1c628488554e667c051c54065d8cba8c55c9c781c8307891188b3c6e6977321b3d8b680df0660a97808370199aa9f50b8295d5e3a867014fcd0a9b1de3298b6", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000"]}, 0x1, 0x0, 0x0, 0x4000}, 0xc490d273bf9eb065) sendmmsg(0xffffffffffffffff, 0x0, 0xd3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 09:14:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 381.091724] ISOFS: Unable to identify CD-ROM format. 09:14:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 381.132995] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/95], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 381.305962] ISOFS: Unable to identify CD-ROM format. 09:14:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 381.328215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.484364] ISOFS: Unable to identify CD-ROM format. 09:14:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/95], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 381.780247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 381.943451] ISOFS: Unable to identify CD-ROM format. 09:14:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r15, r16, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r20 = dup3(r18, r19, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r25, r26, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r2, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r26, @ANYRES64=r9, @ANYRESHEX, @ANYRESDEC=r10, @ANYRESOCT=r3, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r11], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r16, @ANYRESOCT=r24, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES64=r12, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r17], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r2, @ANYRES32=r22, @ANYRES32=r20, @ANYRES64], @ANYRESHEX=r13, @ANYRESHEX=r14, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r6, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r2], 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r28, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r28, 0x50800) setsockopt$sock_int(r28, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r29 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r29, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r30 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r30) r31 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r32 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r32, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r31, 0x4c00, r32) r33 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r34 = openat$cgroup_int(r33, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r35 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r35, 0x1, r34, &(0x7f0000000040)) epoll_pwait(r35, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r36, 0x8912, 0x400200) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r37, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r37, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r38, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r39 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r39, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r39, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r40 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r40, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r40, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r42 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r41, r42, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r43, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r46 = dup3(r44, r45, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r46, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r48 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r47, r48, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r50 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r49, r50, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r52 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r51, r52, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r30, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r28, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r52, @ANYRES64=r35, @ANYRESHEX, @ANYRESDEC=r36, @ANYRESOCT=r29, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r37], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r42, @ANYRESOCT=r50, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r30, @ANYRES32=0x0, @ANYRES64=r38, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r43], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390c3011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r28, @ANYRES32=r48, @ANYRES32=r46, @ANYRES64], @ANYRESHEX=r39, @ANYRESHEX=r40, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r32, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r28], 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r46, 0xc00c642d, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r27, r53, 0x8}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:46 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb, 0x222a6d8102856fd9) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='ex\x8f\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'\b\x00', 0x0}, 0x0, 0x0, r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="ab5419967b576d88fc966e2170c3921a064bd3d773ae08f6cc6de98293cf6323868b2797a2ca4fd89677980167719839a850dc1f36d725acebeae8fddc2be6800087450684342d7ce90115356f26990b3a2759c3f976aafb592db0ae8c3c6159872d6ceafa2858390a7c9e7540c93fcefc89deff836ff4fae1a99ca8152984d24bcb33b8f8779589941340afa8e1263918cea78f57bf6a5fa366be581078cb0a97779aaf0e1a941b02420cdc8d39cb3829a46733d18970b7cc8e9fb3a1dff3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x1000000000e6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x11}}}}, &(0x7f0000000000)=0xffffffffffffff73) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8000, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x3, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) 09:14:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 382.244173] ISOFS: Unable to identify CD-ROM format. [ 382.385304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=19328 comm=syz-executor.5 09:14:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="02eca2314061e1d37821ff375295fe3e5b00d5000000"], 0x2de) 09:14:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r16, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r26 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r26, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r26, 0x50800) setsockopt$sock_int(r26, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r27 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r27, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r28 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r28) r29 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r30 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r30, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r29, 0x4c00, r30) r31 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r32 = openat$cgroup_int(r31, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r33 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r33, 0x1, r32, &(0x7f0000000040)) epoll_pwait(r33, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r34, 0x8912, 0x400200) r35 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r35, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r35, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r36 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r36, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r37, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r37, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r38 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r38, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r38, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r40 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r39, r40, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r41, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r43 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r44 = dup3(r42, r43, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r44, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r46 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r45, r46, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r48 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r47, r48, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r50 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r49, r50, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r28, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r26, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r50, @ANYRES64=r33, @ANYRESHEX, @ANYRESDEC=r34, @ANYRESOCT=r27, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r35], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r40, @ANYRESOCT=r48, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r28, @ANYRES32=0x0, @ANYRES64=r36, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r41], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r26, @ANYRES32=r46, @ANYRES32=r44, @ANYRES64], @ANYRESHEX=r37, @ANYRESHEX=r38, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r30, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r26], 0x0) accept$packet(r27, &(0x7f0000000200), &(0x7f0000000040)=0xab9467b4a2f56718) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 382.667352] ISOFS: Unable to identify CD-ROM format. 09:14:46 executing program 0 (fault-call:8 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 382.838120] ISOFS: Unable to identify CD-ROM format. 09:14:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x116) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 382.926438] FAULT_INJECTION: forcing a failure. [ 382.926438] name failslab, interval 1, probability 0, space 0, times 0 [ 382.949372] CPU: 0 PID: 19371 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 382.956428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.956434] Call Trace: [ 382.956452] dump_stack+0x138/0x197 [ 382.956474] should_fail.cold+0x10f/0x159 [ 382.972031] should_failslab+0xdb/0x130 [ 382.972045] kmem_cache_alloc_node+0x287/0x780 [ 382.972055] ? get_pid_task+0x98/0x140 [ 382.972070] copy_process.part.0+0x17d5/0x6a00 [ 382.972087] ? save_trace+0x290/0x290 [ 382.972098] ? proc_fail_nth_write+0x7d/0x180 [ 382.972105] ? proc_cwd_link+0x1b0/0x1b0 [ 382.972119] ? __f_unlock_pos+0x19/0x20 [ 382.980211] ? find_held_lock+0x35/0x130 [ 382.980229] ? __cleanup_sighand+0x50/0x50 [ 382.980240] ? lock_downgrade+0x740/0x740 [ 382.980257] _do_fork+0x19e/0xce0 [ 382.980269] ? fork_idle+0x280/0x280 [ 382.980282] ? fput+0xd4/0x150 [ 382.980296] ? SyS_write+0x15e/0x230 [ 382.980310] SyS_clone+0x37/0x50 [ 382.980321] ? sys_vfork+0x30/0x30 [ 382.988779] do_syscall_64+0x1e8/0x640 [ 382.988789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.988807] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 382.988815] RIP: 0033:0x459a59 [ 382.988820] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 382.997197] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:14:47 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb, 0x222a6d8102856fd9) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='ex\x8f\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'\b\x00', 0x0}, 0x0, 0x0, r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="ab5419967b576d88fc966e2170c3921a064bd3d773ae08f6cc6de98293cf6323868b2797a2ca4fd89677980167719839a850dc1f36d725acebeae8fddc2be6800087450684342d7ce90115356f26990b3a2759c3f976aafb592db0ae8c3c6159872d6ceafa2858390a7c9e7540c93fcefc89deff836ff4fae1a99ca8152984d24bcb33b8f8779589941340afa8e1263918cea78f57bf6a5fa366be581078cb0a97779aaf0e1a941b02420cdc8d39cb3829a46733d18970b7cc8e9fb3a1dff3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x1000000000e6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x11}}}}, &(0x7f0000000000)=0xffffffffffffff73) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8000, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x3, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) 09:14:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 382.997204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.997210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 382.997216] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 382.997222] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 383.073054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=19381 comm=syz-executor.5 [ 383.279881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=19391 comm=syz-executor.5 09:14:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x6, 0x1000, 0xde, &(0x7f0000000000)="22749a870d7e5e15626f28d43862beff8f6f90bce5786023131fb36fa0023e32204343d3c750a882743dd8331c7cc1d1023a3e6cc07cbce905e65b6420a10df6eab349f8d63c17808257453c9b6aaee4c0a45e5420b38e5eb01800200df3ce89e6d80c95b1f6c8a1fa66edcb8662ca2afc8e46c706df24464c25d86657273e6d6b0d8539bd79cc7007dc69dda5fdc07e9b47eb0b835a0f082b03f6e80d7fe31f906a3bd250f51e30597ba33d7d6b6550ed35ad4468f8fdeda9f81e83bdba7cd2f05940c1f22fd988c2511816f44f52049e708544cf0734308151beec9979", 0xdf, 0x0, &(0x7f0000000100)="045b6401bf44023810e20962d3f6080a3b08be589614f4e07bdd44fe4fe03a01fcf11ff214742aaea3d16c9a5d989ff337af65cb2f4ff3fadcb8ef6d1d77dbff5c7fcc1bf29169d7bc4b515ee940cb363507ec2cae1e66919d9adcf670fb2c2448fd6b227988592efa91d433cafbbbc59008cb4ab9cc1e2db677afa24389d374e8f1dee4901c0e39c6daed2b6e01dbc21305e9da27c0446ed06c1fb14b9c4731e8ffca271237120a15ef9430293e9a841e9b5e2061b6b660e59a68abe613f42614d84101392e29ef43b1cbc1c4dfa97feda78bb3c0e87bff1db14727d27f57"}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:47 executing program 0 (fault-call:8 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 383.546808] FAULT_INJECTION: forcing a failure. [ 383.546808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.592755] CPU: 1 PID: 19403 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 383.599811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.609166] Call Trace: [ 383.611760] dump_stack+0x138/0x197 [ 383.615390] should_fail.cold+0x10f/0x159 [ 383.619535] ? __might_sleep+0x93/0xb0 [ 383.623424] __alloc_pages_nodemask+0x1d6/0x7a0 [ 383.628085] ? __alloc_pages_slowpath+0x2930/0x2930 [ 383.633093] ? rcu_read_lock_sched_held+0x110/0x130 [ 383.638107] copy_process.part.0+0x26a/0x6a00 [ 383.642610] ? save_trace+0x290/0x290 [ 383.646395] ? proc_fail_nth_write+0x7d/0x180 [ 383.650872] ? proc_cwd_link+0x1b0/0x1b0 [ 383.654927] ? __f_unlock_pos+0x19/0x20 [ 383.658884] ? find_held_lock+0x35/0x130 [ 383.662942] ? __cleanup_sighand+0x50/0x50 [ 383.667157] ? lock_downgrade+0x740/0x740 [ 383.671294] _do_fork+0x19e/0xce0 [ 383.674732] ? fork_idle+0x280/0x280 [ 383.678447] ? fput+0xd4/0x150 [ 383.681630] ? SyS_write+0x15e/0x230 [ 383.685328] SyS_clone+0x37/0x50 [ 383.688676] ? sys_vfork+0x30/0x30 [ 383.692202] do_syscall_64+0x1e8/0x640 [ 383.696079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.700909] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 383.706090] RIP: 0033:0x459a59 [ 383.709261] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 383.717036] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 383.724285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.731535] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:14:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4894, 0x4000) write$rfkill(r1, &(0x7f0000000040)={0x77, 0x8, 0x2, 0x1, 0x1}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:47 executing program 0 (fault-call:8 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 383.738784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 383.746034] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r0, 0x50800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r9, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r13, r14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r18 = dup3(r16, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r19, r20, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r24, @ANYRES64=r7, @ANYRESHEX, @ANYRESDEC=r8, @ANYRESOCT=r1, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r9], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r14, @ANYRESOCT=r22, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r15], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080d6a11ea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=r20, @ANYRES32=r18, @ANYRES64], @ANYRESHEX=r11, @ANYRESHEX=r12, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r4, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r0], 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000000)={0x6, 0x78641401, 0x69, 0x20, 0x2, @discrete={0x6, 0x5}}) r25 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r25, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r25, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r25, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r25, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r25, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 383.939740] FAULT_INJECTION: forcing a failure. [ 383.939740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.968718] CPU: 1 PID: 19426 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 383.975820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.985187] Call Trace: [ 383.987785] dump_stack+0x138/0x197 [ 383.991429] should_fail.cold+0x10f/0x159 [ 383.995586] ? __might_sleep+0x93/0xb0 [ 383.999485] __alloc_pages_nodemask+0x1d6/0x7a0 [ 384.004185] ? __alloc_pages_slowpath+0x2930/0x2930 [ 384.009201] ? rcu_read_lock_sched_held+0x110/0x130 [ 384.014314] copy_process.part.0+0x26a/0x6a00 [ 384.018833] ? save_trace+0x290/0x290 [ 384.022635] ? proc_fail_nth_write+0x7d/0x180 [ 384.027125] ? proc_cwd_link+0x1b0/0x1b0 [ 384.031259] ? __f_unlock_pos+0x19/0x20 [ 384.035234] ? find_held_lock+0x35/0x130 [ 384.039288] ? __cleanup_sighand+0x50/0x50 [ 384.043505] ? lock_downgrade+0x740/0x740 [ 384.047639] _do_fork+0x19e/0xce0 [ 384.051080] ? fork_idle+0x280/0x280 [ 384.054775] ? fput+0xd4/0x150 [ 384.057947] ? SyS_write+0x15e/0x230 [ 384.061656] SyS_clone+0x37/0x50 [ 384.065033] ? sys_vfork+0x30/0x30 [ 384.068567] do_syscall_64+0x1e8/0x640 [ 384.072442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.077282] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 384.082462] RIP: 0033:0x459a59 [ 384.085649] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 384.093345] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 384.100599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.107854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 384.115127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 384.122395] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:48 executing program 0 (fault-call:8 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:48 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb, 0x222a6d8102856fd9) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='ex\x8f\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'\b\x00', 0x0}, 0x0, 0x0, r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="ab5419967b576d88fc966e2170c3921a064bd3d773ae08f6cc6de98293cf6323868b2797a2ca4fd89677980167719839a850dc1f36d725acebeae8fddc2be6800087450684342d7ce90115356f26990b3a2759c3f976aafb592db0ae8c3c6159872d6ceafa2858390a7c9e7540c93fcefc89deff836ff4fae1a99ca8152984d24bcb33b8f8779589941340afa8e1263918cea78f57bf6a5fa366be581078cb0a97779aaf0e1a941b02420cdc8d39cb3829a46733d18970b7cc8e9fb3a1dff3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x1000000000e6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x11}}}}, &(0x7f0000000000)=0xffffffffffffff73) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8000, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x3, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) [ 384.275940] FAULT_INJECTION: forcing a failure. [ 384.275940] name failslab, interval 1, probability 0, space 0, times 0 [ 384.292265] CPU: 1 PID: 19444 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 384.299405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.299468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=19443 comm=syz-executor.1 [ 384.308756] Call Trace: [ 384.308778] dump_stack+0x138/0x197 [ 384.308796] should_fail.cold+0x10f/0x159 [ 384.308812] should_failslab+0xdb/0x130 [ 384.308826] __kmalloc_track_caller+0x2ec/0x790 [ 384.308842] ? check_preemption_disabled+0x3c/0x250 [ 384.308854] ? prepare_creds+0x3e/0x380 [ 384.308863] ? selinux_cred_prepare+0x49/0xb0 [ 384.308875] kmemdup+0x27/0x60 [ 384.308885] selinux_cred_prepare+0x49/0xb0 [ 384.308896] security_prepare_creds+0x7d/0xb0 [ 384.308908] prepare_creds+0x2cf/0x380 [ 384.308920] copy_creds+0x7b/0x4f0 [ 384.308928] ? lockdep_init_map+0x9/0x10 [ 384.308942] copy_process.part.0+0x868/0x6a00 [ 384.308957] ? save_trace+0x290/0x290 [ 384.308968] ? proc_fail_nth_write+0x7d/0x180 [ 384.308977] ? proc_cwd_link+0x1b0/0x1b0 [ 384.308988] ? __f_unlock_pos+0x19/0x20 [ 384.309006] ? __cleanup_sighand+0x50/0x50 [ 384.309015] ? lock_downgrade+0x740/0x740 [ 384.309031] _do_fork+0x19e/0xce0 [ 384.309046] ? fork_idle+0x280/0x280 [ 384.309059] ? fput+0xd4/0x150 [ 384.309070] ? SyS_write+0x15e/0x230 [ 384.309084] SyS_clone+0x37/0x50 [ 384.309093] ? sys_vfork+0x30/0x30 [ 384.309106] do_syscall_64+0x1e8/0x640 [ 384.309114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.309137] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 384.309146] RIP: 0033:0x459a59 [ 384.309151] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 384.309163] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 384.309169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.309176] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 384.309182] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 384.309188] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:48 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) lstat(&(0x7f0000000f00)='./file0\x00', 0x0) socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb, 0x222a6d8102856fd9) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001400)='ex\x8f\x00') add_key$keyring(0x0, &(0x7f00000000c0)={'\b\x00', 0x0}, 0x0, 0x0, r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="ab5419967b576d88fc966e2170c3921a064bd3d773ae08f6cc6de98293cf6323868b2797a2ca4fd89677980167719839a850dc1f36d725acebeae8fddc2be6800087450684342d7ce90115356f26990b3a2759c3f976aafb592db0ae8c3c6159872d6ceafa2858390a7c9e7540c93fcefc89deff836ff4fae1a99ca8152984d24bcb33b8f8779589941340afa8e1263918cea78f57bf6a5fa366be581078cb0a97779aaf0e1a941b02420cdc8d39cb3829a46733d18970b7cc8e9fb3a1dff3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x1000000000e6) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x11}}}}, &(0x7f0000000000)=0xffffffffffffff73) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8000, 0x1}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x3, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r0, r6, 0x0, 0x102000002) 09:14:48 executing program 0 (fault-call:8 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 384.603327] nla_parse: 6 callbacks suppressed [ 384.603333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.641056] FAULT_INJECTION: forcing a failure. [ 384.641056] name failslab, interval 1, probability 0, space 0, times 0 [ 384.652779] CPU: 1 PID: 19457 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 384.659819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.669001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=19456 comm=syz-executor.5 [ 384.669171] Call Trace: [ 384.669190] dump_stack+0x138/0x197 [ 384.669208] should_fail.cold+0x10f/0x159 [ 384.669223] should_failslab+0xdb/0x130 [ 384.695938] __kmalloc_track_caller+0x2ec/0x790 [ 384.700620] ? check_preemption_disabled+0x3c/0x250 [ 384.705642] ? prepare_creds+0x3e/0x380 [ 384.709614] ? selinux_cred_prepare+0x49/0xb0 [ 384.714203] kmemdup+0x27/0x60 [ 384.717403] selinux_cred_prepare+0x49/0xb0 [ 384.721718] security_prepare_creds+0x7d/0xb0 [ 384.726210] prepare_creds+0x2cf/0x380 [ 384.730088] copy_creds+0x7b/0x4f0 [ 384.733621] ? lockdep_init_map+0x9/0x10 [ 384.737678] copy_process.part.0+0x868/0x6a00 [ 384.742169] ? save_trace+0x290/0x290 [ 384.745961] ? proc_fail_nth_write+0x7d/0x180 [ 384.750448] ? proc_cwd_link+0x1b0/0x1b0 [ 384.754500] ? __f_unlock_pos+0x19/0x20 [ 384.758478] ? __cleanup_sighand+0x50/0x50 [ 384.762706] ? lock_downgrade+0x740/0x740 [ 384.766854] _do_fork+0x19e/0xce0 [ 384.770303] ? fork_idle+0x280/0x280 [ 384.774016] ? fput+0xd4/0x150 [ 384.777205] ? SyS_write+0x15e/0x230 [ 384.780916] SyS_clone+0x37/0x50 [ 384.784277] ? sys_vfork+0x30/0x30 [ 384.787811] do_syscall_64+0x1e8/0x640 [ 384.791686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.796528] entry_SYSCALL_64_after_hwframe+0x42/0xb7 09:14:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 384.801708] RIP: 0033:0x459a59 [ 384.804889] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 384.812591] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 384.819850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.827110] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 384.834385] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 384.841735] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) 09:14:49 executing program 0 (fault-call:8 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}, {@check_strict='check=strict'}]}) [ 385.022811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:49 executing program 1: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)="8ded3fedd133896a60bd7b36900f97c7c19dc4626f035da50f8d6310506c8d90cff001b58faa48453ec857597f5055084d48a22ae9823136ee422d52daefa365499c890bcc2dfc65befab2f024c2a927c3b297fb9b3c29a57bc4c86b2e5dbfcfb4ac60f2df2c0d3826c11ed5f815030e6576b3ea8928422250a1c68d9b898ba4e49315c3faf4ec2f12f788da394a385af57b9d6d696d", 0x96}, {&(0x7f00000003c0)="d4002a792e1c71584a2785131a108bbf8ca3ba52c77c8e2a716048999c25883c7d924b63f9951ae314efb92da95eacf72225a260df66eb0a8acabf1b574e6cba7c9cd3cc92980432a56687840cb8a696fa1dc11ed6412e00de9357a5df064b94c8db62ebf54d709cf69e14404c903bf0b7bcdacc0e1988002be7a5603fccde6d895434d32f9581d7e3e9c8580d60ca0fde129d6a1ef61827169cc2cd7c3b6bdf1e8e44b586f816befc4101a7f975004fec5fe6c6462364c4f00e20b5f6c2cb9a7e92172a848cdc2ec04fdbe36607e51e92936469c1ee90", 0xd7}, {&(0x7f00000004c0)="79e03442b1354030b41795faf1954156d7dca7b4ef242f6ab67d48983ea19e8b73d79c44b2044de5501b26fe6c646350a64b8ec9fe7420d443ba8f290496e6f19bb11352bb8ebfd1ef95ef64234c14589b529ec543de19a3cf235ca4d052d1b1b75b16fb050ffac668f0a86a33557775122445241db4c4ae49827797a1f210333d9751dd8bb55021348223d696760c723801374533da06d3899355055faac15843c47d13b8791607b0", 0xa9}, {&(0x7f0000000a00)="539826c11d68efa7cc4b665c4f2d40bbde8747d7d5ac6322dabc0e6853a7f925c1f2916bef785495b2c2950cd985dce526d4032b2d0af6245f6b43347f862bddb15104dde0543e61238816b42326c14c4d7af322bede410b177282a2e3d1f751be81eb473923297a817a8d9ab0056d9d4739376b40590ddea232518244a621ade2fa2aa958a1d30102adb63d0913c44ec21efc5eece3753445c23d8b03a0795fddb1f6d8d0c8be4b787cac94ca0598feca9afffee1c395c016e5a5a73e59ae0089636894acac47460dfd98d5ffb329025faef3e4de80b2c4fcf2b4ef27779ee9efeb1a954757a8dc9d17590a73fcffb20007d6550cd526bf81b16c513782296fe873997b86ed23290bda9eb8688f336a24de63e6dc74b65c6249e83a29e2c644ed83eecf5ce26409b9d5dad08729e928269f85e810cf7f9f297b9ef8f7cfd24c821c73176c799b321417271e008ea0b3dddc38aa3e1f211dceacdc4a8853bc42233163bc7bcc3f0b1af585200c02c80f79d51dad15b55f9559a008d14f37fd835b437b381339cf0e2d8f9137498bc98572d3094b5f4f639e9c8040ce678e9fa17d826ed74252eb5b53d755a2f5c48e0a486f5a70b8050b7080b9ad61ab5fff8a930bf1d6db887785e5464f5b2487f2eda127efdc6c48f0fa4a5be2e8f026b19567c2ff9a306d49b0381dc7f7a9b7a0a37fd5dcb6465aaa636b5ce948a0636023fe156071a8aa9a6a9e9b553c759327f9c2ba2450d69de8283906a007a910f966c09b54750a2299d41026f831bca07a6737fdb72b66adbff0bf09f60e52ab00809e3312bee94714b27a2f4e278b4dd431f64375b6dbe98d53ab2a1ed7ec7fa8f44b049e55122ec6ed6935092c78c80e9bca6b093968dfef19c8295ed8c7062889020a400d25694a1258eface1572b1c23585e6fa943095d2f7971c311be74687ad776b1e99f9eb08627b33564f529daed1b70a52db6845e02ced57a3973ec164d8b33b79394e2808ceb0e535d6619fc46c4cb763130e9661ab737c994014534d5e8ccd1477d3f49f2a80199ecfcb57474b36321eb7da6a28e7376a8ca9823167d5476aead7e05a522df18f0b34d39622bbefe1441343d6bb14f434393962494b05c2b4ed0fd1ee3f626d1dba0bad2135915b48033f5bde696c6c51620a85b8969535292fe830e8a5c0718146a0b525d018774891f9410079664e78185aab5bdbca58fbefca3fe13982e4ae387671feacdd2aeea7bcac98b2837516f320e3e0dfb1eb83a651ccde9a8efa2f9e502b12e4f2988f250dca409748df6e7a4b029779e40cb76dc23de3b7146a08fc3a05f2745570f20f008c0bb7f3304febeb8b16cfe1e7f2d21f9f58f79f754f5873b3cfc8f22a8e1cc49f377d92df3dfa294639c588a40048a6b00f794a9486f121fcbcba7a8f1173196e0dee673e9d0007a9b57f2f7213a643e6802f566c9189d8f262d5eedafe667b28a7626db8c799c124cc4f636afd5efcaacc350f79e9f681b881136d84b07ba19ed192d5209baccc76c687a1c144eb1a13f6d1fb38ebdbfd749fe083f2f08d9592d71f5b8f160b5cd6b755b16e7e631c92f7aa531b924f719d1ae8076c9e095998c264c9ecf518c986186aa692724f59d639e9b4f30832cd388a545f9d6e4a012dbbda8b2e6b14c900231cc823c47dc98f05784a4dc1d73f2845b6ee2b68251c6b031e79c65777c434953734af565321ecfae24b43d307687c74d366a27b99501e90f58a2562cbd8d63c6ff9963b506369405cfc8dad537ceb187f5b7fae94793c92f70056d5a2d868845a21d59dbb6cf47670599a94ec52a558872629d4ef1e89c6bd0cae0028c8aa574b892a4437a49321761342feae0b50f9389c1ade105d830c67a87c033a0ae505df902aa9384fa63e0c22febf5b6813ce01cdd3e00cb5743cde1955b5855e2edc6537eeedd87dfff50510da9a5aeee3097345a2a291b6f35e0c9e8754dba1bae820aabc59addb47c834d1d7a700c5fabbb9b5eea5a19b383f9656165502c875cf2f9988cd567af9d38c5c0c750bc9eee03b9410c5bdbec9f86bb6b2562c828b04100fea1b2254fd9495f3180ecdf9b2d162621357030fca9f7e676236f3fb495c26cefa48cd563ea91fefa9c3b2f6ebbb2ef878cb492ab400892c5b07f85604550c7c02dd60c25cf3b75119530fa8caecd9db23d49e4778bc69a0a976706779654a6f290be48e778156325c0673ec88635976173718d6dc10c445514d17f4452671dc9c5374c05d0c570c3f6d2536b79f706eb19db2965d94954acffec7051d92ed73d18a23e34593934aaaef9e77c104cb40265558f1156262cdd8746b8fbb326cee32f19f3c83285d76887dd68432de45b56b380b3cbceaad556d7473778c826d7b0ac9bfb5820a3acf31e24287586653228a1662e952192f1b6217c1e28144a1aa1283d250a6744b875901c7b9ad631b8cade374bb27625e82f830c844022d7804d452a0e939a454616f94f42c75adabc42d3459fb1209244e4ace9cc329f88352bcf684c8203c4ac6ee323710abcb4337e427e9cbd57b6d8da89117443e0211892187068b326b07ad73a0defcdc4cdbfceac26c031f6d0b8b9517df5a18e85cffa177aa8217391d51e2a4b9f31cb471e18b30dcb163541cadd1d2459dbb11c145fc6d0ab71cddfe3fdfac516c6d94b91748c0a8adba02a0414ac3a838df0c9df5946df9fc228b85b5bc867fcc78e3ce77bc435f2248eac0d989c288bb8a127e706e9387b16ac91dac04c8dc97358e40315b178f23f260239084b7407163cd9e4200628452de672a09a5bcf6b4ec048a444ca43ac5aea312d2dc24a382a1de1dd7d65bcebc835c342629f8f6c2ffbbe366aa75fde928dffa7ac6725d79fba537348173bf53ce9e5530b356987ba3659c94187aa55eb08bf30d2d1ab4c224cbdb2d43068cd7606b7e858c768ada15a06434d03486d12ab0d269d4779c2849031bd635b8289aac3f5cb55f581ecb0547e0d5baea925e82a0657859db0ace58293084befbf329b51aa525f0e17b108a94ece52a9ab48363768e97a65003dad1b803e2133d5f102f1034fc47cea030ac2882b52cad34d60cf6d0d6f2c47ab4e2eac05adb3113bc2e9ff6f046bef9405b0a71200e1139e5460003dd9adbcdfa2a22f221cb8f0ad4c795aace70233f01862f0dc4976953a9c53124f27e113ca1f748e2cd35ebe0bdedfc299b50a2b8e650f783890fe1888ba720b1a1aaad6073455d36ee305a3b8ff353af3c5d18f9b5d04ed7c14ae46d016cfdb9b748853929c0450faf17facb5bc30c034c0ef4d4522540488910b7c1b449beee66c654ba9cf79da53897811dc0758f22320ec8a411c5f4c7390a9fa33a93d07da773ec1b38b398aaaddc3fb2c29acd6753aa90fbb6999b5114bca8b7d8a512985db71825b912ac1e1e6c2115e6ee6b140248854ce027bda4fea47f306e8d3a9bda142718c9290918343cc72f4c1f2a48b38bbcc7877964dc4b8bb7f287003b4dc8c28c5ca4621c407d9d18c846b3343fe389ec383b9ee33a4af2643cb4d777d6f582285c0e1e1414a222915586354ae6e178fddda595b5c0af10850e39a8bed5a35dd96e4308cf67f22c9792f344b4ccb66a8734a601959e9205cf8e3df016e423f3ad8a6d736e90e823cf473b7887076f744f4a252e5a894c4352c06a0ed5deef70b277763043182ed4ef7445008dd5185fbd17ba48daf44fbe956a36907ff9e8b46c32afc70d2948bcc9e371d8e91120fe1c67ce9e502cc318718e734e8dca946e6f53207264c8a42b4970184413a814c441e23b5976e0fe42e2f230a7b0d4e889d4ad85e33383eaa6dd09ec9dd9effb2232e22e1109dec32ecf25a1ec7492a29e868b1fa0a9f98b378ed1a791b5614eaa4d9cd7394ef16b08519c3bcd41dbe6339dc719f3a2c55d7841846bc51c742eb43258f83690c9415f5777627d0621e9b5f3b2b0905610abe024413cc99faf1c624729b94d89ff7603567ce8f34892678238715ec8f3b76a11009455d39ad5545722af108c8133284187790c7c9d798570b0f1317e1117cf283410be6638712f922998c86db3cc28005d6b1b75b22f8fc5c0306d178fc934a9fa155d9a3fbc46f1ae1212fe9ece643d19db406f82a069b6373638039dff44bdd3dd517f51c9c98932c18860baedd96becfdc9d7327a6e798edee9d90eaf787f60a377bfc9f2d3b12df6737aba6c9e7a5a07adcd0b7153d74d7ba5b6bba7ab02d191b07f53d84d339a3d24bb01cea633ff6786ca3a031856d006bf73476d6d9c1e488a96d144146b707deed7989179dcb8a0019660e69845dcfb71f14ec4f6187ea3968cc5c9bda67d8b2c256c91ac53d2ab416817687198befb8bc58df79c8edbad302d332c1c53ca741032034ea9de5db57bcdaa90678ca330cd24a12355c9a70dae57637ef2734e6686f74eb02854366db96d3bebdf08f06c9197d5a5e8cfa350bfd042789a06fa6631f2b611cef4282805648e63aff48c1b95818f76e233744543c766e224a9006c64829cea42a78e3ddc375e314a8bf0b8f1cb88e9c2b8d0220e47bc4aca2b813927b4dd4e5e0de9a743f7a9a2a73ff3ddbd70940319586dcbd096ee3c7f704f0c09f5e37eb02c9144d03e49e836ac96babf9973a5e9ffa417ab9a625ed75a491b60265435b0509e5ee04b6bc9cdf9190661125b834846d6a54ddb765c18cb27fb1c7bd011e3c54e20800b2f686834319d2bd62ef7d92b358a4d06d95612cf358624dac6f90fee2b077a71f9196faa1ae467b30750b6eb52b98a9841c95499d5ab776dfdf272ad41198ab4895d24f6260ef6ed07fa905c956337591c484e1622b9ba1b974bb94f3c9c540862aa0ac288593f35aa1032cf987dfba049e2bad2939c9826b4b7c879ac80c1d140ec52d5aa31ea759a6c1276b83ca414a88dd36414c916b597a0fa1023fb97b0673c109a5bfe40a77e01e85823374183a3f0a4555216cc4c4f08302333be3b633747f2b6b6771fa7e5283c9409f2c432081371797e1f2b6a875d01d6ed7deede14d0c8562922e46ed5dcb51104061eaa4e4f8afbef8c811b7efa0d925e8462595cda335646cda1c8238b24c556feafe3e36cabf27156583da4c52bc892bc448709e1ace2c5e5097c3824952e36b5ae4bc60d74e017f9bc0044813d6f9b544feb7eda1f219547acb632f40af150d7a6407e36f3a2715224638ea44e6307e6db4ec18dd0fd01ae8f481333da94fc7cb987347f0dd536989b427453ee8085044ba630a16f6e1360c1495a0a816f875ad82550436f913c21292925c2b048e47199dff07786c3d0b660fc6b70709d70e3cbea38f1430af09de106b94d06107028abcff743e53060f7984bc3213bb4787775a2456bf0f3131af9bc9237cfbad1e62a1273429f72226feaa4444a15d1f8ebb59b28defc598f50d7b1bd33ea9ec8480dc85cf58f8ec9ad0d152e98426b5e3f1b4095dc4a725240b38546e3b7b61a373ce9dc1a0942bd20efdbd39ec4dfd03e56b6e5e14bf60e261b6da1e875237d16f11a1584068de6890c17838cd80404e93fc64787a5371ca1c38cd826c94921d0e2c5b8e67b353fad28436b57df83ed54eda494d45d1683368946311322059c66feb290942918b9ae4ba2a33b4f413a0f9c8d7f854b35198acecf4bdcb7c289020f5172854995a0330e3113c61f55bc1bcaa6183e9db98d9ac1f84824cfbd39c4ec2e9443c3cb643fc39b16ec0c9e9e7bc8e5a2b22688cd091e4d038baae8354a58c69ea8319b34fd909418a4a", 0xfffffffffffffdf3}, {&(0x7f00000001c0)}], 0x5, 0x0, 0x0, 0x20000000}, 0x4000048) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf706d614e5c9711d) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffff77) setuid(0xffffffffffffffff) ftruncate(r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x8, 0x100010, r1, 0x4000000000000) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000180)={0x81, "94a5aa92652c8f710bae306a0f113a2561a4af3cc7273d2650f4f2b20b391026", 0x4, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0xffffffffffffff6f, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 385.119025] FAULT_INJECTION: forcing a failure. [ 385.119025] name failslab, interval 1, probability 0, space 0, times 0 [ 385.138446] CPU: 1 PID: 19481 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 385.145506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.154856] Call Trace: [ 385.157441] dump_stack+0x138/0x197 [ 385.157461] should_fail.cold+0x10f/0x159 [ 385.157478] should_failslab+0xdb/0x130 [ 385.157491] kmem_cache_alloc+0x2d7/0x780 [ 385.157505] ? lockdep_init_map+0x9/0x10 [ 385.165263] ? debug_mutex_init+0x2d/0x5a [ 385.165279] dup_fd+0x85/0xa40 [ 385.165302] copy_process.part.0+0x1b5a/0x6a00 [ 385.165320] ? save_trace+0x290/0x290 [ 385.173409] ? proc_fail_nth_write+0x7d/0x180 [ 385.173418] ? proc_cwd_link+0x1b0/0x1b0 [ 385.173437] ? __cleanup_sighand+0x50/0x50 [ 385.173447] ? lock_downgrade+0x740/0x740 [ 385.173464] _do_fork+0x19e/0xce0 [ 385.173479] ? fork_idle+0x280/0x280 [ 385.173494] ? fput+0xd4/0x150 [ 385.173503] ? SyS_write+0x15e/0x230 [ 385.173517] SyS_clone+0x37/0x50 [ 385.173525] ? sys_vfork+0x30/0x30 [ 385.173538] do_syscall_64+0x1e8/0x640 [ 385.173546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.173561] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.173570] RIP: 0033:0x459a59 [ 385.181741] RSP: 002b:00007f8a9a164c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 385.181752] RAX: ffffffffffffffda RBX: 00007f8a9a164c90 RCX: 0000000000459a59 09:14:49 executing program 0 (fault-call:8 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 385.181757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.181762] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 385.181768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1656d4 [ 385.181774] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x2}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 385.414052] FAULT_INJECTION: forcing a failure. [ 385.414052] name failslab, interval 1, probability 0, space 0, times 0 09:14:49 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 385.459698] CPU: 0 PID: 19495 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 385.466758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.476126] Call Trace: [ 385.478726] dump_stack+0x138/0x197 [ 385.482369] should_fail.cold+0x10f/0x159 [ 385.486532] should_failslab+0xdb/0x130 [ 385.487127] ISOFS: Unable to identify CD-ROM format. [ 385.490513] kmem_cache_alloc_trace+0x2e9/0x790 [ 385.490544] ? lock_downgrade+0x740/0x740 [ 385.490560] alloc_fdtable+0x7f/0x280 [ 385.508250] dup_fd+0x693/0xa40 [ 385.511544] copy_process.part.0+0x1b5a/0x6a00 [ 385.516137] ? save_trace+0x290/0x290 [ 385.519940] ? proc_fail_nth_write+0x7d/0x180 [ 385.524436] ? proc_cwd_link+0x1b0/0x1b0 [ 385.528510] ? __cleanup_sighand+0x50/0x50 [ 385.532750] ? lock_downgrade+0x740/0x740 [ 385.536907] _do_fork+0x19e/0xce0 [ 385.540366] ? fork_idle+0x280/0x280 [ 385.544092] ? fput+0xd4/0x150 [ 385.547287] ? SyS_write+0x15e/0x230 [ 385.551009] SyS_clone+0x37/0x50 [ 385.554378] ? sys_vfork+0x30/0x30 [ 385.557920] do_syscall_64+0x1e8/0x640 [ 385.561807] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.566659] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.571869] RIP: 0033:0x459a59 [ 385.575075] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 385.582805] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 385.590232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.597496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.604792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 385.612075] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:14:49 executing program 0 (fault-call:8 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 385.702973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 385.864850] ISOFS: Unable to identify CD-ROM format. [ 385.878849] FAULT_INJECTION: forcing a failure. [ 385.878849] name failslab, interval 1, probability 0, space 0, times 0 [ 385.897406] CPU: 1 PID: 19518 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 385.904448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.904456] Call Trace: [ 385.916404] dump_stack+0x138/0x197 [ 385.920028] should_fail.cold+0x10f/0x159 [ 385.920042] should_failslab+0xdb/0x130 [ 385.920053] kmem_cache_alloc_node_trace+0x280/0x770 [ 385.920064] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 385.920076] __kmalloc_node+0x3d/0x80 [ 385.920087] kvmalloc_node+0x4e/0xe0 [ 385.928189] alloc_fdtable+0xcf/0x280 [ 385.928200] dup_fd+0x693/0xa40 [ 385.928219] copy_process.part.0+0x1b5a/0x6a00 [ 385.938731] ? save_trace+0x290/0x290 09:14:50 executing program 0 (fault-call:8 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 385.938740] ? proc_fail_nth_write+0x7d/0x180 [ 385.938750] ? proc_cwd_link+0x1b0/0x1b0 [ 385.946238] ? __cleanup_sighand+0x50/0x50 [ 385.946250] ? lock_downgrade+0x740/0x740 [ 385.953300] _do_fork+0x19e/0xce0 [ 385.953314] ? fork_idle+0x280/0x280 [ 385.961663] ? fput+0xd4/0x150 [ 385.961673] ? SyS_write+0x15e/0x230 [ 385.961686] SyS_clone+0x37/0x50 [ 385.961695] ? sys_vfork+0x30/0x30 [ 385.961707] do_syscall_64+0x1e8/0x640 [ 385.961715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.961731] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.970252] RIP: 0033:0x459a59 [ 385.970258] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 385.970268] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 385.970273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.970278] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.970283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 385.970288] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 386.068387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 386.166971] FAULT_INJECTION: forcing a failure. [ 386.166971] name failslab, interval 1, probability 0, space 0, times 0 [ 386.179189] CPU: 0 PID: 19529 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 386.186234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.195595] Call Trace: [ 386.198194] dump_stack+0x138/0x197 [ 386.201831] should_fail.cold+0x10f/0x159 [ 386.205991] should_failslab+0xdb/0x130 [ 386.209977] kmem_cache_alloc_node_trace+0x280/0x770 09:14:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643d377b1a8de7944fd4d9387500574411275ae9033df0c6b87ae377518e284e14a670979399bb14f59908fe61a67a48b01811f368877328c907aedebf4ce79f717fcec2047c1c4c62264d8ec8b97dacd18971062303", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f6964bd", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r2, 0x0) read$FUSE(r0, &(0x7f0000002540), 0x1000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r3, 0x50800) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_pwait(r10, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r15, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r16, r17, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r18, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r21 = dup3(r19, r20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r26, r27, 0x0) r28 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r28, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r28, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r28, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r28, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r28, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r28, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r29 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r29, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r29, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r29, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r29, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r29, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r29, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r30 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r30, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r30, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r30, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r30, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r30, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r30, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r3, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r27, @ANYRES64=r10, @ANYRESHEX, @ANYRESDEC=r11, @ANYRESOCT=r4, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r12], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r28, @ANYRES64=0x0, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR, @ANYPTR64, @ANYBLOB, @ANYRESOCT=0x0, @ANYPTR64, @ANYRES32=r29, @ANYRESOCT, @ANYRES16=r30], @ANYRESDEC=0x0], @ANYRESOCT=r25, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES64=r13, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r18], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r3, @ANYRES32=r23, @ANYRES32=r21, @ANYRES64], @ANYRESHEX=r14, @ANYRESHEX=r15, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r7, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r3], 0x0) getsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x1, {0x7, 0x4}}, 0x50) [ 386.210384] ISOFS: Unable to identify CD-ROM format. [ 386.215084] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 386.215102] __kmalloc_node+0x3d/0x80 [ 386.215114] kvmalloc_node+0x4e/0xe0 [ 386.215127] alloc_fdtable+0xcf/0x280 [ 386.215136] dup_fd+0x693/0xa40 [ 386.215154] copy_process.part.0+0x1b5a/0x6a00 [ 386.244786] ? save_trace+0x290/0x290 [ 386.248584] ? proc_fail_nth_write+0x7d/0x180 [ 386.253061] ? proc_cwd_link+0x1b0/0x1b0 [ 386.257118] ? __cleanup_sighand+0x50/0x50 [ 386.261431] ? lock_downgrade+0x740/0x740 [ 386.265598] _do_fork+0x19e/0xce0 [ 386.269045] ? fork_idle+0x280/0x280 [ 386.272764] ? fput+0xd4/0x150 [ 386.275962] ? SyS_write+0x15e/0x230 [ 386.279674] SyS_clone+0x37/0x50 [ 386.283027] ? sys_vfork+0x30/0x30 [ 386.286608] do_syscall_64+0x1e8/0x640 [ 386.290504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.295351] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.300538] RIP: 0033:0x459a59 [ 386.303752] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:14:50 executing program 0 (fault-call:8 fault-nth:9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 386.312500] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 386.319757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.327015] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.334269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 386.341529] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 386.475807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.501314] FAULT_INJECTION: forcing a failure. [ 386.501314] name failslab, interval 1, probability 0, space 0, times 0 [ 386.517319] CPU: 1 PID: 19543 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 386.524354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.533705] Call Trace: [ 386.536305] dump_stack+0x138/0x197 [ 386.539945] should_fail.cold+0x10f/0x159 [ 386.544107] should_failslab+0xdb/0x130 [ 386.548067] kmem_cache_alloc+0x2d7/0x780 [ 386.552202] ? dup_fd+0x533/0xa40 [ 386.552220] copy_fs_struct+0x43/0x2d0 [ 386.552236] copy_process.part.0+0x3924/0x6a00 [ 386.552254] ? save_trace+0x290/0x290 [ 386.552265] ? proc_fail_nth_write+0x7d/0x180 [ 386.552273] ? proc_cwd_link+0x1b0/0x1b0 [ 386.552292] ? __cleanup_sighand+0x50/0x50 [ 386.559755] ? lock_downgrade+0x740/0x740 [ 386.584963] _do_fork+0x19e/0xce0 [ 386.588423] ? fork_idle+0x280/0x280 [ 386.592143] ? fput+0xd4/0x150 [ 386.595341] ? SyS_write+0x15e/0x230 [ 386.599056] SyS_clone+0x37/0x50 [ 386.602419] ? sys_vfork+0x30/0x30 [ 386.605962] do_syscall_64+0x1e8/0x640 [ 386.609849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.614703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.617385] ISOFS: Unable to identify CD-ROM format. [ 386.619885] RIP: 0033:0x459a59 [ 386.619892] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 386.619903] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 386.619909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.619915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.619921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 386.619927] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800140000010000"], 0x30}}, 0x0) 09:14:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) 09:14:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:50 executing program 0 (fault-call:8 fault-nth:10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 386.786564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:14:51 executing program 5: r0 = gettid() msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfd) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) listen(r1, 0xfc0004) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xf3}, 0xfffffffffffffdab) recvmmsg(r2, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000280)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file2\x00') pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x3f}, &(0x7f0000000380)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) syz_open_procfs(r0, &(0x7f0000000340)='net/sctp\x00') connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) link(0x0, &(0x7f0000000240)='./file2\x00') lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) [ 386.878628] ISOFS: Unable to identify CD-ROM format. [ 386.935245] FAULT_INJECTION: forcing a failure. [ 386.935245] name failslab, interval 1, probability 0, space 0, times 0 [ 386.968970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.988750] CPU: 1 PID: 19573 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 386.995801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.005162] Call Trace: [ 387.007758] dump_stack+0x138/0x197 [ 387.011400] should_fail.cold+0x10f/0x159 [ 387.015656] should_failslab+0xdb/0x130 [ 387.019639] kmem_cache_alloc+0x2d7/0x780 [ 387.023804] ? _raw_spin_unlock+0x2d/0x50 [ 387.027963] copy_process.part.0+0x3987/0x6a00 [ 387.032558] ? save_trace+0x290/0x290 09:14:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) [ 387.036362] ? proc_fail_nth_write+0x7d/0x180 [ 387.040859] ? proc_cwd_link+0x1b0/0x1b0 [ 387.044936] ? __cleanup_sighand+0x50/0x50 [ 387.049176] ? lock_downgrade+0x740/0x740 [ 387.053330] _do_fork+0x19e/0xce0 [ 387.056785] ? fork_idle+0x280/0x280 [ 387.060504] ? fput+0xd4/0x150 [ 387.063697] ? SyS_write+0x15e/0x230 [ 387.067413] SyS_clone+0x37/0x50 [ 387.070779] ? sys_vfork+0x30/0x30 [ 387.074319] do_syscall_64+0x1e8/0x640 [ 387.078210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.083060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.088248] RIP: 0033:0x459a59 [ 387.091437] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.099154] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 387.106422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.113695] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 387.120971] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 387.128246] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:51 executing program 0 (fault-call:8 fault-nth:11): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 387.162250] ISOFS: Unable to identify CD-ROM format. 09:14:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="74000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) [ 387.301203] FAULT_INJECTION: forcing a failure. [ 387.301203] name failslab, interval 1, probability 0, space 0, times 0 [ 387.321776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.333389] CPU: 0 PID: 19593 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 387.340560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.349903] Call Trace: [ 387.352480] dump_stack+0x138/0x197 [ 387.356102] should_fail.cold+0x10f/0x159 [ 387.360238] should_failslab+0xdb/0x130 [ 387.364379] kmem_cache_alloc+0x2d7/0x780 [ 387.368510] ? _raw_spin_unlock_irq+0x28/0x90 [ 387.372991] ? trace_hardirqs_on_caller+0x400/0x590 [ 387.377997] copy_process.part.0+0x1cd5/0x6a00 [ 387.382562] ? save_trace+0x290/0x290 [ 387.386344] ? proc_fail_nth_write+0x7d/0x180 [ 387.390849] ? proc_cwd_link+0x1b0/0x1b0 [ 387.394897] ? __cleanup_sighand+0x50/0x50 [ 387.399156] ? lock_downgrade+0x740/0x740 [ 387.403294] _do_fork+0x19e/0xce0 [ 387.406732] ? fork_idle+0x280/0x280 [ 387.410514] ? fput+0xd4/0x150 [ 387.413719] ? SyS_write+0x15e/0x230 [ 387.417417] SyS_clone+0x37/0x50 [ 387.420812] ? sys_vfork+0x30/0x30 [ 387.424356] do_syscall_64+0x1e8/0x640 [ 387.428272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.433108] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.438287] RIP: 0033:0x459a59 [ 387.441462] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.449150] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 387.456405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.463665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 387.470915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 387.478166] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:51 executing program 0 (fault-call:8 fault-nth:12): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 387.507634] overlayfs: filesystem on './file0' not supported as upperdir [ 387.532955] ISOFS: Unable to identify CD-ROM format. 09:14:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:51 executing program 2 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:51 executing program 5: r0 = gettid() msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xfd) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) listen(r1, 0xfc0004) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xf3}, 0xfffffffffffffdab) recvmmsg(r2, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000280)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)='./file2\x00') pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, r4}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r4, 0x3f}, &(0x7f0000000380)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) syz_open_procfs(r0, &(0x7f0000000340)='net/sctp\x00') connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) link(0x0, &(0x7f0000000240)='./file2\x00') lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file1/file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) 09:14:51 executing program 1: syz_open_dev$cec(&(0x7f0000000540)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0xd9}}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000500)={0x28, 0x0, 0x0, @reserved}, 0x10) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 09:14:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="74000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 387.676278] FAULT_INJECTION: forcing a failure. [ 387.676278] name failslab, interval 1, probability 0, space 0, times 0 [ 387.734190] FAULT_INJECTION: forcing a failure. [ 387.734190] name failslab, interval 1, probability 0, space 0, times 0 [ 387.754449] CPU: 1 PID: 19604 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 387.761520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.770876] Call Trace: [ 387.773470] dump_stack+0x138/0x197 [ 387.777103] should_fail.cold+0x10f/0x159 [ 387.781260] should_failslab+0xdb/0x130 [ 387.785240] kmem_cache_alloc+0x2d7/0x780 [ 387.789393] ? lockdep_init_map+0x9/0x10 [ 387.793457] ? debug_mutex_init+0x2d/0x5a [ 387.797610] copy_process.part.0+0x3c75/0x6a00 [ 387.802203] ? proc_fail_nth_write+0x7d/0x180 [ 387.806704] ? proc_cwd_link+0x1b0/0x1b0 [ 387.810778] ? __cleanup_sighand+0x50/0x50 [ 387.815018] ? lock_downgrade+0x740/0x740 [ 387.819173] _do_fork+0x19e/0xce0 [ 387.822635] ? fork_idle+0x280/0x280 [ 387.826347] ? fput+0xd4/0x150 [ 387.829543] ? SyS_write+0x15e/0x230 [ 387.833262] SyS_clone+0x37/0x50 [ 387.836623] ? sys_vfork+0x30/0x30 [ 387.840168] do_syscall_64+0x1e8/0x640 [ 387.844059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.848912] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.854097] RIP: 0033:0x459a59 [ 387.857281] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.864979] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 387.872233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 387.879485] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 387.886759] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 387.894010] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 387.904597] CPU: 0 PID: 19614 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 387.911648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.920993] Call Trace: [ 387.923569] dump_stack+0x138/0x197 [ 387.927182] should_fail.cold+0x10f/0x159 [ 387.931316] should_failslab+0xdb/0x130 [ 387.935270] __kmalloc+0x2f0/0x7a0 [ 387.938790] ? __sb_end_write+0xc1/0x100 [ 387.942831] ? strnlen_user+0x12f/0x1a0 [ 387.946789] ? SyS_memfd_create+0xba/0x3a0 [ 387.951009] SyS_memfd_create+0xba/0x3a0 [ 387.955053] ? shmem_fcntl+0x130/0x130 [ 387.958918] ? do_syscall_64+0x53/0x640 [ 387.962872] ? shmem_fcntl+0x130/0x130 [ 387.966743] do_syscall_64+0x1e8/0x640 [ 387.970610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.975467] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.980657] RIP: 0033:0x459a59 [ 387.983835] RSP: 002b:00007f0667630a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 387.991531] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 387.998780] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 388.006033] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 388.013285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676316d4 [ 388.020534] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 09:14:52 executing program 2 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x20000000000001e2, &(0x7f0000000c40)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x3e, 0x10, 0x0, 0x2c0}, 0xfffffe0c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000f1f63804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 388.069309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:52 executing program 0 (fault-call:8 fault-nth:13): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 388.153987] FAULT_INJECTION: forcing a failure. [ 388.153987] name failslab, interval 1, probability 0, space 0, times 0 09:14:52 executing program 1: r0 = dup(0xffffffffffffffff) write$selinux_user(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73657472616e735f7661725f72756e5f743a733020756e436f6e66696e65645f75003bb90d09ed66413621c419a1d2df8e3ac0b135cdc55a56f5cc1562e4481ffb4d6e19dc7e6512ff466ae022e635bfd8e750a230f79cbca48eb16e467455a8d5efdcbdf355fdd0ecfd98478910c20fddb4a0cace05652de39ae5650f120260c8ac1593925ecb6565461cfaaf773ad66511a2e210617387ec5fa8944f69882265f61746188ad27609dc3455d6db77fb3d2203ca41a2a93d6a6aab3fc7c1b9f882fa671815910104295f8bb29268c0486342024f9e98cafd230b5c59e6"], 0x34) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 388.196314] CPU: 0 PID: 19632 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 388.203371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.212719] Call Trace: [ 388.215305] dump_stack+0x138/0x197 [ 388.218928] should_fail.cold+0x10f/0x159 [ 388.223065] should_failslab+0xdb/0x130 [ 388.227023] kmem_cache_alloc+0x2d7/0x780 [ 388.231167] ? __alloc_fd+0x1d4/0x4a0 [ 388.234955] __d_alloc+0x2d/0x9f0 [ 388.238407] ? lock_downgrade+0x740/0x740 [ 388.242542] d_alloc_pseudo+0x1e/0x30 [ 388.246343] __shmem_file_setup.part.0+0xd8/0x400 [ 388.251179] ? __alloc_fd+0x1d4/0x4a0 [ 388.254968] ? shmem_fill_super+0x8c0/0x8c0 [ 388.259293] SyS_memfd_create+0x1f9/0x3a0 [ 388.263426] ? shmem_fcntl+0x130/0x130 [ 388.267305] ? do_syscall_64+0x53/0x640 [ 388.271262] ? shmem_fcntl+0x130/0x130 [ 388.275133] do_syscall_64+0x1e8/0x640 [ 388.279010] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.283861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.289055] RIP: 0033:0x459a59 [ 388.292231] RSP: 002b:00007f0667630a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 388.299927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 388.307179] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 388.314431] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 388.321683] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676316d4 [ 388.328932] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 09:14:52 executing program 2 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="74000000240007050000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 388.349720] FAULT_INJECTION: forcing a failure. [ 388.349720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.371482] CPU: 0 PID: 19639 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 388.378531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.387892] Call Trace: [ 388.390491] dump_stack+0x138/0x197 [ 388.394138] should_fail.cold+0x10f/0x159 [ 388.398289] ? __might_sleep+0x93/0xb0 [ 388.402182] __alloc_pages_nodemask+0x1d6/0x7a0 [ 388.406877] ? fs_reclaim_acquire+0x20/0x20 [ 388.411549] ? __alloc_pages_slowpath+0x2930/0x2930 [ 388.416565] ? check_preemption_disabled+0x3c/0x250 [ 388.416583] alloc_pages_current+0xec/0x1e0 [ 388.425915] __get_free_pages+0xf/0x40 [ 388.425925] pgd_alloc+0x25/0x2b0 [ 388.425937] ? lockdep_init_map+0x9/0x10 [ 388.437298] mm_init+0x578/0x970 [ 388.440671] copy_process.part.0+0x3ccd/0x6a00 [ 388.445263] ? proc_fail_nth_write+0x7d/0x180 [ 388.449752] ? proc_cwd_link+0x1b0/0x1b0 [ 388.453847] ? __cleanup_sighand+0x50/0x50 [ 388.458068] ? lock_downgrade+0x740/0x740 [ 388.462199] _do_fork+0x19e/0xce0 [ 388.465636] ? fork_idle+0x280/0x280 [ 388.469340] ? fput+0xd4/0x150 [ 388.472537] ? SyS_write+0x15e/0x230 [ 388.476235] SyS_clone+0x37/0x50 [ 388.479579] ? sys_vfork+0x30/0x30 [ 388.483103] do_syscall_64+0x1e8/0x640 [ 388.486968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.491794] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.497001] RIP: 0033:0x459a59 09:14:52 executing program 0 (fault-call:8 fault-nth:14): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 388.500171] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 388.507860] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 388.515115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.522981] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.530233] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 388.537481] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 388.604149] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 388.627359] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 388.667234] FAULT_INJECTION: forcing a failure. [ 388.667234] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.674926] FAULT_INJECTION: forcing a failure. [ 388.674926] name failslab, interval 1, probability 0, space 0, times 0 [ 388.695237] CPU: 1 PID: 19658 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 388.702331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.702336] Call Trace: 09:14:52 executing program 2 (fault-call:2 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 388.702358] dump_stack+0x138/0x197 [ 388.702375] should_fail.cold+0x10f/0x159 [ 388.702390] should_failslab+0xdb/0x130 [ 388.702404] kmem_cache_alloc+0x2d7/0x780 [ 388.702419] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 388.702433] ? rcu_read_lock_sched_held+0x110/0x130 [ 388.702443] ? shmem_destroy_callback+0xa0/0xa0 [ 388.702451] shmem_alloc_inode+0x1c/0x50 [ 388.702462] alloc_inode+0x64/0x180 [ 388.702472] new_inode_pseudo+0x19/0xf0 [ 388.702482] new_inode+0x1f/0x40 [ 388.702490] shmem_get_inode+0x75/0x750 [ 388.702505] __shmem_file_setup.part.0+0x111/0x400 [ 388.702528] ? __alloc_fd+0x1d4/0x4a0 [ 388.702539] ? shmem_fill_super+0x8c0/0x8c0 [ 388.702558] SyS_memfd_create+0x1f9/0x3a0 [ 388.702569] ? shmem_fcntl+0x130/0x130 [ 388.702579] ? do_syscall_64+0x53/0x640 [ 388.702588] ? shmem_fcntl+0x130/0x130 [ 388.702597] do_syscall_64+0x1e8/0x640 [ 388.702606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.702620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.702627] RIP: 0033:0x459a59 [ 388.702632] RSP: 002b:00007f0667630a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 388.702641] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 388.702646] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 388.702651] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 388.702656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676316d4 [ 388.702661] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 388.776880] CPU: 0 PID: 19657 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 388.782674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.782680] Call Trace: [ 388.782700] dump_stack+0x138/0x197 [ 388.782717] should_fail.cold+0x10f/0x159 [ 388.782728] ? __might_sleep+0x93/0xb0 [ 388.782741] __alloc_pages_nodemask+0x1d6/0x7a0 [ 388.782751] ? fs_reclaim_acquire+0x20/0x20 [ 388.782762] ? __alloc_pages_slowpath+0x2930/0x2930 [ 388.782777] ? check_preemption_disabled+0x3c/0x250 [ 388.782791] alloc_pages_current+0xec/0x1e0 [ 388.782803] __get_free_pages+0xf/0x40 [ 388.782812] pgd_alloc+0x25/0x2b0 [ 388.782820] ? lockdep_init_map+0x9/0x10 [ 388.782835] mm_init+0x578/0x970 [ 388.794557] copy_process.part.0+0x3ccd/0x6a00 [ 388.794580] ? proc_fail_nth_write+0x7d/0x180 [ 388.794593] ? proc_cwd_link+0x1b0/0x1b0 [ 388.800481] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. [ 388.803323] ? __cleanup_sighand+0x50/0x50 [ 388.803335] ? lock_downgrade+0x740/0x740 [ 388.803349] _do_fork+0x19e/0xce0 [ 388.819403] ? fork_idle+0x280/0x280 [ 388.819420] ? fput+0xd4/0x150 [ 388.819431] ? SyS_write+0x15e/0x230 [ 388.819444] SyS_clone+0x37/0x50 [ 388.833989] ? sys_vfork+0x30/0x30 [ 388.834005] do_syscall_64+0x1e8/0x640 [ 388.834015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.834032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.834040] RIP: 0033:0x459a59 [ 388.834045] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 388.834056] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 388.834064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.012999] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.020249] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 389.027498] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:53 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:53 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f00000000c0)={0x7a, 0x0, [0x0, 0x0, 0xc001001b], [0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) [ 389.059654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:53 executing program 0 (fault-call:8 fault-nth:15): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 389.123910] FAULT_INJECTION: forcing a failure. [ 389.123910] name failslab, interval 1, probability 0, space 0, times 0 09:14:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) syz_open_procfs(0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x24000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380), 0x2) alarm(0x6) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 09:14:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 389.200711] CPU: 0 PID: 19676 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 389.207772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.217113] Call Trace: [ 389.219689] dump_stack+0x138/0x197 [ 389.223304] should_fail.cold+0x10f/0x159 [ 389.227439] should_failslab+0xdb/0x130 [ 389.231496] kmem_cache_alloc+0x2d7/0x780 [ 389.235629] ? shmem_alloc_inode+0x1c/0x50 [ 389.239848] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 389.245301] selinux_inode_alloc_security+0xb6/0x2a0 [ 389.250408] security_inode_alloc+0x94/0xd0 [ 389.254776] inode_init_always+0x552/0xaf0 [ 389.259010] alloc_inode+0x81/0x180 [ 389.262617] new_inode_pseudo+0x19/0xf0 [ 389.266678] new_inode+0x1f/0x40 [ 389.270035] shmem_get_inode+0x75/0x750 [ 389.273994] __shmem_file_setup.part.0+0x111/0x400 [ 389.278915] ? __alloc_fd+0x1d4/0x4a0 [ 389.282769] ? shmem_fill_super+0x8c0/0x8c0 [ 389.287111] SyS_memfd_create+0x1f9/0x3a0 [ 389.291247] ? shmem_fcntl+0x130/0x130 [ 389.293197] FAULT_INJECTION: forcing a failure. [ 389.293197] name failslab, interval 1, probability 0, space 0, times 0 [ 389.295125] ? do_syscall_64+0x53/0x640 [ 389.295137] ? shmem_fcntl+0x130/0x130 [ 389.295149] do_syscall_64+0x1e8/0x640 [ 389.295160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.295176] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.295184] RIP: 0033:0x459a59 [ 389.295189] RSP: 002b:00007f066760fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 389.295199] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 09:14:53 executing program 2 (fault-call:2 fault-nth:4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 389.295204] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 389.295210] RBP: 000000000075bfc8 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 389.295222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676106d4 [ 389.295227] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 389.391079] CPU: 1 PID: 19689 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 389.398135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.408012] Call Trace: [ 389.410608] dump_stack+0x138/0x197 [ 389.414245] should_fail.cold+0x10f/0x159 [ 389.418402] should_failslab+0xdb/0x130 [ 389.422386] kmem_cache_alloc+0x2d7/0x780 [ 389.426543] ? _raw_spin_unlock+0x2d/0x50 [ 389.430696] ? __khugepaged_enter+0x26c/0x340 [ 389.435207] copy_process.part.0+0x444f/0x6a00 [ 389.439815] ? __cleanup_sighand+0x50/0x50 [ 389.444065] ? lock_downgrade+0x740/0x740 [ 389.448222] _do_fork+0x19e/0xce0 [ 389.451683] ? fork_idle+0x280/0x280 [ 389.455402] ? fput+0xd4/0x150 [ 389.458596] ? SyS_write+0x15e/0x230 [ 389.462313] SyS_clone+0x37/0x50 [ 389.462323] ? sys_vfork+0x30/0x30 [ 389.462338] do_syscall_64+0x1e8/0x640 [ 389.462347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.462362] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.462369] RIP: 0033:0x459a59 [ 389.462374] RSP: 002b:00007f8a9a143c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 389.462384] RAX: ffffffffffffffda RBX: 00007f8a9a143c90 RCX: 0000000000459a59 09:14:53 executing program 0 (fault-call:8 fault-nth:16): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 389.462389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.462394] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 389.462400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1446d4 [ 389.462405] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 389.602959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 389.612764] FAULT_INJECTION: forcing a failure. [ 389.612764] name failslab, interval 1, probability 0, space 0, times 0 [ 389.636511] CPU: 1 PID: 19707 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 389.643560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.652914] Call Trace: [ 389.655509] dump_stack+0x138/0x197 [ 389.659143] should_fail.cold+0x10f/0x159 [ 389.663302] should_failslab+0xdb/0x130 [ 389.667288] kmem_cache_alloc+0x2d7/0x780 [ 389.671444] ? lock_downgrade+0x740/0x740 [ 389.675597] get_empty_filp+0x8c/0x3f0 [ 389.679492] alloc_file+0x23/0x440 [ 389.683035] __shmem_file_setup.part.0+0x1b1/0x400 [ 389.687970] ? __alloc_fd+0x1d4/0x4a0 [ 389.691861] ? shmem_fill_super+0x8c0/0x8c0 [ 389.696190] SyS_memfd_create+0x1f9/0x3a0 09:14:53 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='errorr=remount-ro,\x00']) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x3, @empty, 0x80}}, 0x0, 0x47, 0x0, "c6a8d9d2d817fd8595822eb08144f25e5d417cedc9576a3adc661416ade50a66fa7960d5431ee993ab6f82af9a4dd8c5b46ab2b673cd0d8b56b466a09449430d9a1e6e9e4fb926ed856961ce75de8b9f"}, 0xd8) [ 389.700340] ? shmem_fcntl+0x130/0x130 [ 389.704228] ? do_syscall_64+0x53/0x640 [ 389.708200] ? shmem_fcntl+0x130/0x130 [ 389.712092] do_syscall_64+0x1e8/0x640 [ 389.715978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.720834] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.726022] RIP: 0033:0x459a59 [ 389.729212] RSP: 002b:00007f066760fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 389.736927] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 389.744198] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 389.751474] RBP: 000000000075bfc8 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 389.758741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676106d4 [ 389.766000] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 389.769692] FAULT_INJECTION: forcing a failure. [ 389.769692] name failslab, interval 1, probability 0, space 0, times 0 [ 389.789588] CPU: 1 PID: 19711 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 389.792725] FAT-fs (loop5): Unrecognized mount option "errorr=remount-ro" or missing value [ 389.796633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.796643] Call Trace: [ 389.796662] dump_stack+0x138/0x197 [ 389.820818] should_fail.cold+0x10f/0x159 [ 389.824972] should_failslab+0xdb/0x130 [ 389.828935] kmem_cache_alloc+0x2d7/0x780 [ 389.833070] ? _raw_spin_unlock+0x2d/0x50 [ 389.837199] ? __khugepaged_enter+0x26c/0x340 [ 389.841678] copy_process.part.0+0x444f/0x6a00 [ 389.846263] ? __cleanup_sighand+0x50/0x50 [ 389.850496] ? lock_downgrade+0x740/0x740 [ 389.854628] _do_fork+0x19e/0xce0 [ 389.858065] ? fork_idle+0x280/0x280 [ 389.861765] ? fput+0xd4/0x150 [ 389.864940] ? SyS_write+0x15e/0x230 [ 389.868640] SyS_clone+0x37/0x50 [ 389.871988] ? sys_vfork+0x30/0x30 [ 389.875512] do_syscall_64+0x1e8/0x640 [ 389.879377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.884207] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.889379] RIP: 0033:0x459a59 [ 389.892552] RSP: 002b:00007f8a9a164c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:14:54 executing program 2 (fault-call:2 fault-nth:5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 389.900256] RAX: ffffffffffffffda RBX: 00007f8a9a164c90 RCX: 0000000000459a59 [ 389.907505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.914767] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 389.922021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1656d4 [ 389.929274] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 390.045142] FAULT_INJECTION: forcing a failure. [ 390.045142] name failslab, interval 1, probability 0, space 0, times 0 [ 390.088881] CPU: 1 PID: 19721 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 390.095938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.105300] Call Trace: [ 390.107899] dump_stack+0x138/0x197 [ 390.111548] should_fail.cold+0x10f/0x159 [ 390.115709] should_failslab+0xdb/0x130 [ 390.119481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.119692] kmem_cache_alloc+0x2d7/0x780 [ 390.132319] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 390.137772] ? check_preemption_disabled+0x3c/0x250 [ 390.142870] selinux_file_alloc_security+0xb4/0x190 [ 390.147874] security_file_alloc+0x6d/0xa0 [ 390.152103] get_empty_filp+0x162/0x3f0 [ 390.156071] alloc_file+0x23/0x440 [ 390.159595] __shmem_file_setup.part.0+0x1b1/0x400 [ 390.164511] ? __alloc_fd+0x1d4/0x4a0 [ 390.168305] ? shmem_fill_super+0x8c0/0x8c0 [ 390.172624] SyS_memfd_create+0x1f9/0x3a0 [ 390.176767] ? shmem_fcntl+0x130/0x130 [ 390.180644] ? do_syscall_64+0x53/0x640 [ 390.184607] ? shmem_fcntl+0x130/0x130 [ 390.188520] do_syscall_64+0x1e8/0x640 [ 390.192401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.197245] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.202433] RIP: 0033:0x459a59 [ 390.205610] RSP: 002b:00007f0667630a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 390.213311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459a59 [ 390.220577] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 390.227889] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 09:14:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'HL\x00'}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="802152309870077a2399166985c08b6abaf923e5d6de4318801a1e5eab11399bb7f19bdab2c9a34b651a289aed53259e69cf72ca2bc49e608dd62ba32d01008f5ef7eda528eb095bfcc8ffea14ebb1c95b27a8aa5a18d040d821f88966a363b0e51cb356c8270fe199caa51230fdaa827a452c847c998da6bc800a528330c21a27df67d2714741d1a3b6eb4a7b045f54b747e753f04a454c63deee0f817c92e81155e8080c0b403da31ab556a7fe4b339101e63931addb744762c83c9df60500"/205], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r5, 0x50800) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r7) r8 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r9 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) epoll_pwait(r12, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r16, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r16, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}, 0x4}, 0x1c) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r17, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r18, r19, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r20, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r23 = dup3(r21, r22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r26, r27, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r28, r29, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r5, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r29, @ANYRES64=r12, @ANYRESHEX, @ANYRESDEC=r13, @ANYRESOCT=r6, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r14], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r19, @ANYRESOCT=r27, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r15, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r20], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r5, @ANYRES32=r25, @ANYRES32=r23, @ANYRES64], @ANYRESHEX=r16, @ANYRESHEX=r17, @ANYRESDEC], @ANYBLOB="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"/273, @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r9, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r5], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r23, 0x40a85323, &(0x7f0000000300)={{0xfd, 0x9}, 'port1\x00', 0x84, 0x189018, 0x5, 0x1ff, 0xfc, 0x8000, 0x4, 0x0, 0x2, 0x2}) utimensat(r4, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={{0x0, 0x2710}, {0x0, 0x7530}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r3, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000080)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 09:14:54 executing program 0 (fault-call:8 fault-nth:17): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:54 executing program 2 (fault-call:2 fault-nth:6): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 390.235174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f06676316d4 [ 390.242430] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 390.318956] FAULT_INJECTION: forcing a failure. [ 390.318956] name failslab, interval 1, probability 0, space 0, times 0 [ 390.336985] CPU: 1 PID: 19733 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 390.344042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.353403] Call Trace: [ 390.356009] dump_stack+0x138/0x197 [ 390.359641] should_fail.cold+0x10f/0x159 [ 390.363799] should_failslab+0xdb/0x130 [ 390.367777] kmem_cache_alloc+0x47/0x780 [ 390.371841] ? __lock_is_held+0xb6/0x140 [ 390.375613] FAULT_INJECTION: forcing a failure. [ 390.375613] name failslab, interval 1, probability 0, space 0, times 0 [ 390.375906] ? check_preemption_disabled+0x3c/0x250 [ 390.375925] anon_vma_clone+0xde/0x470 [ 390.396004] anon_vma_fork+0x87/0x4d0 [ 390.399814] copy_process.part.0+0x45e2/0x6a00 [ 390.404421] ? __cleanup_sighand+0x50/0x50 [ 390.408661] ? lock_downgrade+0x740/0x740 [ 390.412813] _do_fork+0x19e/0xce0 [ 390.416272] ? fork_idle+0x280/0x280 [ 390.419995] ? fput+0xd4/0x150 [ 390.423188] ? SyS_write+0x15e/0x230 [ 390.426905] SyS_clone+0x37/0x50 [ 390.430264] ? sys_vfork+0x30/0x30 [ 390.433802] do_syscall_64+0x1e8/0x640 [ 390.437676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.442521] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.447706] RIP: 0033:0x459a59 [ 390.450890] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 390.458593] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:14:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 390.465854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.473113] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.480372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 390.487635] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 390.516633] CPU: 0 PID: 19736 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 390.523689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.533047] Call Trace: [ 390.535645] dump_stack+0x138/0x197 [ 390.539284] should_fail.cold+0x10f/0x159 [ 390.543438] should_failslab+0xdb/0x130 [ 390.547416] kmem_cache_alloc+0x2d7/0x780 [ 390.551572] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 390.556947] getname_flags+0xcb/0x580 [ 390.560752] getname+0x1a/0x20 [ 390.563954] do_sys_open+0x1e7/0x430 [ 390.567666] ? filp_open+0x70/0x70 [ 390.571203] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 390.571216] SyS_open+0x2d/0x40 [ 390.571227] ? do_sys_open+0x430/0x430 [ 390.579845] do_syscall_64+0x1e8/0x640 [ 390.587589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.592440] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.597633] RIP: 0033:0x413941 [ 390.600823] RSP: 002b:00007f0667630a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 390.608534] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 09:14:54 executing program 0 (fault-call:8 fault-nth:18): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 390.615789] RDX: 00007f0667630b0a RSI: 0000000000000002 RDI: 00007f0667630b00 [ 390.623039] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 390.630290] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 390.637539] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 09:14:54 executing program 2 (fault-call:2 fault-nth:7): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 390.659915] FAT-fs (loop5): Unrecognized mount option "errorr=remount-ro" or missing value [ 390.735766] FAULT_INJECTION: forcing a failure. [ 390.735766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 390.747607] CPU: 1 PID: 19751 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 390.754644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.764006] Call Trace: [ 390.766601] dump_stack+0x138/0x197 [ 390.770244] should_fail.cold+0x10f/0x159 [ 390.774413] __alloc_pages_nodemask+0x1d6/0x7a0 [ 390.779116] ? fs_reclaim_acquire+0x20/0x20 [ 390.779131] ? __alloc_pages_slowpath+0x2930/0x2930 [ 390.779152] cache_grow_begin+0x80/0x400 [ 390.792525] kmem_cache_alloc+0x6a6/0x780 [ 390.796664] getname_flags+0xcb/0x580 [ 390.800465] getname+0x1a/0x20 [ 390.803642] do_sys_open+0x1e7/0x430 [ 390.807335] ? filp_open+0x70/0x70 [ 390.810858] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 390.816205] SyS_open+0x2d/0x40 [ 390.819465] ? do_sys_open+0x430/0x430 [ 390.823333] do_syscall_64+0x1e8/0x640 [ 390.827211] ? trace_hardirqs_off_thunk+0x1a/0x1c 09:14:55 executing program 5: mkdir(&(0x7f0000000500)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776469723d2e2f66696c65315954152a43d3dce55aca66790893a4e93c2a39174db968040091d1a99af1d9dd6b1c33ebabe2f0b8178834fb51f0310913fce767188c383217e17de039c4a96c7a206bfe487f1de4ed136758f475431bcadec45d28c20bd2dab12a279e979908d3c8c3a0a50bc2088ef94a3f09d6f3ae0bc693269363e96c36fb3b21543d4551e93673f1b6de016f31b4152144cf93462e394fa2eb79ef111df3af17b09d520200731a48d6c8f05c446dc1b72aba222ecdd303a658ca03760dca364c7fdf32d0b1560de4c14c06de7433a46a1ccfffda637abef2bd707c323e241bc85b1bc5288ccecd954ff7f51189b8b7ea60a13814d80a46869ca1553d6d788916cdcdc784a02dd4edd2f97bfcdea4894bd0c3435dd34f85316a57ba9dc600e82f72ab11feb2cfe0caedf4735ce1b125abd66669294ef512f030e917e43af07695a8f7a97e2740884647db758074a1504e11bb7f56c520a7517230e72741b0c383b58ecc53cc45000000"]) creat(&(0x7f0000000180)='./file1/file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='security.capability\x00', 0x0, 0x0, 0x0) lchown(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00005e0d00000029bd7000fcdbdf251d01010008000500fdf8f90050987dc1f440bd8a844a75c9ef888159a5db240a1beca7841ca089cfa9a112628a35ad0274c8bf9f920c59e739cc24e035cc801e3a56cfd6ff4b3435a6806f80edf4bbcaf04f26f8dcc4bef55b5d5895adcf4ff8445a668cc3c04ccd6b4a363da21221fe39f753f9bfa8774905be36a46f2800114c89854f6b8e5466a9a3f31d9309c6d391f67dd435a317b6464c35e857a9254a4fd01611cf4276c42b7a3a7e0f8449c917de4d46e8b2fbe147366ab558fa2c3e2ba5ca808941d777afe5a9c17a0a21caae47b263b862bebef68db4d700"], 0x1}, 0x1, 0x0, 0x0, 0x140}, 0x4000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x20000) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc5e46b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f486eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb1987183fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000240)) [ 390.832040] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.837212] RIP: 0033:0x413941 [ 390.840384] RSP: 002b:00007f0667630a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 390.848073] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 390.855326] RDX: 00007f0667630b0a RSI: 0000000000000002 RDI: 00007f0667630b00 [ 390.862577] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 390.869841] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 390.877095] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 390.929068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.942398] overlayfs: unrecognized mount option "wdir=./file1YT*CÓÜåZÊfy“¤é<*9M¹h" or missing value 09:14:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="00400000dc2cb90f01904fa9"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) socket$inet(0x2, 0x4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x7bc39400b1fb7dc3, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 391.007770] ISOFS: Unable to identify CD-ROM format. [ 391.014339] overlayfs: unrecognized mount option "wdir=./file1YT*CÓÜåZÊfy“¤é<*9M¹h" or missing value [ 391.047330] FAULT_INJECTION: forcing a failure. 09:14:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 391.047330] name failslab, interval 1, probability 0, space 0, times 0 [ 391.096074] CPU: 1 PID: 19768 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 391.103135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.112498] Call Trace: [ 391.115085] dump_stack+0x138/0x197 [ 391.118714] should_fail.cold+0x10f/0x159 [ 391.122872] should_failslab+0xdb/0x130 [ 391.126835] kmem_cache_alloc+0x47/0x780 [ 391.130885] ? anon_vma_chain_link+0x142/0x1a0 [ 391.135452] anon_vma_clone+0xde/0x470 [ 391.139327] anon_vma_fork+0x87/0x4d0 [ 391.143122] copy_process.part.0+0x45e2/0x6a00 [ 391.147700] ? __cleanup_sighand+0x50/0x50 [ 391.151920] ? lock_downgrade+0x740/0x740 [ 391.156052] _do_fork+0x19e/0xce0 [ 391.159488] ? fork_idle+0x280/0x280 [ 391.163188] ? fput+0xd4/0x150 [ 391.166362] ? SyS_write+0x15e/0x230 [ 391.170060] SyS_clone+0x37/0x50 [ 391.173407] ? sys_vfork+0x30/0x30 [ 391.176930] do_syscall_64+0x1e8/0x640 [ 391.180798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.185627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 391.190798] RIP: 0033:0x459a59 09:14:55 executing program 2 (fault-call:2 fault-nth:8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_read_part_table(0x3f, 0x6, &(0x7f0000000780)=[{&(0x7f0000000840)="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", 0x146, 0x2}, {&(0x7f0000000100)="6db9ced58acb9422eea1d9202c99b0e5161a23517bc8113c1d93cce49eee579a736137320a053d6e0c001f3643e02837dc32bde69a5fb4325ba559b5f2e24667b03f8eb916fd20f7d6765f74ac903fc4758af487e4d8ef0d6f21a8018f62d001f87e4efd87a1e9a0b49636d36e424d288dce6b48909f74abc239a57d853e51555d91bed8506a79e1de18281e7313c205f454a573416f972ae9fe73b234a8cf1b76e7d2420538881423f3d1f0cf46b803b3780e78b93a77816fe5e821495687c881fb00cb8f9dcb5be47b6a8e9a56d4ffefc382b0f1fbb150ee44399e5bf5d6276c454fb85d8dc897396a21d474d151e20d8c", 0xf2, 0xffffffff}, {&(0x7f00000003c0)="4a0858b98ddc0c31fb9e815344ffd10438a8e3aa256e6a98735fd59c57654b7429a65d03079fb3e0243aaa3abd4e1b459bc568db4c0dd042e958b5dba4d8364e14483310114ec16dae5d2f08acdbd9cc993e382921dc31b4300a650edc762c3c801bfd0270ab9ccca44b678e7edac3eeeebe1c05134752abe81ec2c33edefae71f09e234049e751d27c44f2160", 0x8d, 0x6aff}, {&(0x7f00000005c0)="54e0bb08bd2a7146d92473dfe07e5bcd7f1bcfc1d4e6d7267e8ebf5e329e95aa1603e2e24c704537ec9f613a7f9b33450e475939a897f220e769c8c06a7b92b744b10d92774d060f7ce16d9513831e355e01eeac6022b5fff25c59780de1fdac353e713da22053717530331709395b8b028cf581ab07d21be05ac30f7d4128bd9df7480fc10f9b07764b5bcb8f32ecb62908e0c4072e8ae978415c4d161933f6a591b61e7c5053c2819eb08057ae995a3e527d87645918f8213134badfd6d1d5", 0xc0, 0x200}, {&(0x7f0000000680)="71692b96dbab063efc9e87fc7d504d681acce2198acfed476c5da4ac11a6a78cdc16b678747f85b6ee5c31d03efd302a00311910365c5bb78779827c0546a5ea6eb7636dc660d5d65101b2df338ae5f2696337546b72e3b1580adc31f58fd8b5e05ec056b0ec9332b8ed8397e2a618a62fec8ac84d067cd6aebb04fbe13c6fa525bb1e1efb396a08af2bee718f7624838fa3738a67299177ce9919965f9668339b2b74eff5b340b16ec7866196f24440bce937ca8248d3443c0477f090f0f46536e2", 0xc2, 0xb6bb}, {&(0x7f0000000300)="7929a1cc1f5abb53b49ca824ba31b24b6728456d1783ba5b69ec5433594d57e76f283753ef938de498dc9c231b439101e662017aeac197ec08cd7359", 0x3c, 0x2}]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x50000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="660f73f19a440f20c0663504000000440f22c00f11083e81e90800640fdd770064f30f09baa10066ed0f096626660f015fb2f0104aae", 0x36}], 0x1, 0x0, 0x0, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8], 0x12000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 391.193968] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 391.201656] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 391.208906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.216158] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 391.223410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 391.230661] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 391.285769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:55 executing program 0 (fault-call:8 fault-nth:19): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 391.340644] FAULT_INJECTION: forcing a failure. [ 391.340644] name failslab, interval 1, probability 0, space 0, times 0 [ 391.394193] CPU: 1 PID: 19786 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 391.401264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.410623] Call Trace: [ 391.413228] dump_stack+0x138/0x197 [ 391.416851] should_fail.cold+0x10f/0x159 [ 391.421002] should_failslab+0xdb/0x130 [ 391.424963] kmem_cache_alloc+0x2d7/0x780 [ 391.429094] ? save_stack+0xa9/0xd0 [ 391.432711] get_empty_filp+0x8c/0x3f0 [ 391.436580] path_openat+0x8f/0x3f70 [ 391.440279] ? trace_hardirqs_on+0x10/0x10 [ 391.444496] ? check_preemption_disabled+0x3c/0x250 [ 391.449497] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 391.454146] ? find_held_lock+0x35/0x130 [ 391.458185] ? save_trace+0x290/0x290 [ 391.461968] ? __alloc_fd+0x1d4/0x4a0 [ 391.465753] do_filp_open+0x18e/0x250 [ 391.469534] ? may_open_dev+0xe0/0xe0 [ 391.473321] ? lock_downgrade+0x740/0x740 [ 391.477453] ? _raw_spin_unlock+0x2d/0x50 [ 391.481581] ? __alloc_fd+0x1d4/0x4a0 [ 391.485370] do_sys_open+0x2c5/0x430 [ 391.489080] ? filp_open+0x70/0x70 [ 391.492605] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 391.497948] SyS_open+0x2d/0x40 [ 391.501209] ? do_sys_open+0x430/0x430 [ 391.505080] do_syscall_64+0x1e8/0x640 [ 391.508945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.513776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 391.518947] RIP: 0033:0x413941 [ 391.522119] RSP: 002b:00007f0667630a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 391.529809] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 391.537063] RDX: 00007f0667630b0a RSI: 0000000000000002 RDI: 00007f0667630b00 [ 391.544316] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 391.551569] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 391.558821] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 09:14:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:55 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x41) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c9613ff8c2531d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a65"], 0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x101, 0x4, [0x8d]}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321212c0f0df81f47442a"], 0x10094) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) syz_genetlink_get_family_id$SEG6(0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5a7959d8252321202e2f66698f20300a"], 0xb) 09:14:55 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) dup(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_getscheduler(0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000d5010400000000012efe0000dcd86c68f379241a3384baa5b5db0700000068000a010000000027db6ea8945d97f9e5cd3d606bd67c91e866bf72b366f513c794bb850789073e"], 0x4a) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/31, 0x1f}], 0x2) syz_mount_image$ext4(&(0x7f0000000fc0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c12, 0x19f, 0x0, 0x2000000, &(0x7f0000000f00)=ANY=[@ANYBLOB='noquota,usrquota,barrier,grpquota,nobh,nojournal_checksum,journal_async_commit,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c9ba280378d", @ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[]]) [ 391.717816] FAULT_INJECTION: forcing a failure. [ 391.717816] name failslab, interval 1, probability 0, space 0, times 0 [ 391.738080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 391.753179] CPU: 1 PID: 19804 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 391.760249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.760330] Call Trace: [ 391.760348] dump_stack+0x138/0x197 [ 391.760367] should_fail.cold+0x10f/0x159 [ 391.760379] ? anon_vma_clone+0xde/0x470 [ 391.760394] should_failslab+0xdb/0x130 [ 391.760407] kmem_cache_alloc+0x47/0x780 [ 391.760420] ? anon_vma_chain_link+0x142/0x1a0 [ 391.760432] anon_vma_clone+0xde/0x470 [ 391.760446] anon_vma_fork+0x87/0x4d0 [ 391.760460] copy_process.part.0+0x45e2/0x6a00 [ 391.809073] ? __cleanup_sighand+0x50/0x50 [ 391.813304] ? lock_downgrade+0x740/0x740 [ 391.817436] _do_fork+0x19e/0xce0 [ 391.820874] ? fork_idle+0x280/0x280 [ 391.824575] ? fput+0xd4/0x150 [ 391.827749] ? SyS_write+0x15e/0x230 [ 391.831446] SyS_clone+0x37/0x50 [ 391.834793] ? sys_vfork+0x30/0x30 [ 391.838321] do_syscall_64+0x1e8/0x640 [ 391.842201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.847034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 391.852205] RIP: 0033:0x459a59 [ 391.855393] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:14:56 executing program 0 (fault-call:8 fault-nth:20): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 391.863106] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 391.870355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.877604] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 391.884866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 391.892122] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:56 executing program 2 (fault-call:2 fault-nth:9): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 391.979064] sg_write: data in/out 262577/32 bytes for SCSI command 0xa-- guessing data in; [ 391.979064] program syz-executor.1 not setting count and/or reply_len properly [ 392.070933] FAULT_INJECTION: forcing a failure. [ 392.070933] name failslab, interval 1, probability 0, space 0, times 0 [ 392.076398] FAULT_INJECTION: forcing a failure. [ 392.076398] name failslab, interval 1, probability 0, space 0, times 0 [ 392.138727] CPU: 1 PID: 19833 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 392.145785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.155140] Call Trace: [ 392.157732] dump_stack+0x138/0x197 [ 392.161368] should_fail.cold+0x10f/0x159 [ 392.165521] should_failslab+0xdb/0x130 [ 392.165535] kmem_cache_alloc+0x2d7/0x780 [ 392.165547] ? anon_vma_clone+0x310/0x470 [ 392.165563] anon_vma_fork+0xe9/0x4d0 [ 392.165581] copy_process.part.0+0x45e2/0x6a00 [ 392.186202] ? __cleanup_sighand+0x50/0x50 [ 392.187114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.190438] ? lock_downgrade+0x740/0x740 [ 392.190458] _do_fork+0x19e/0xce0 [ 392.190473] ? fork_idle+0x280/0x280 [ 392.190487] ? fput+0xd4/0x150 [ 392.190496] ? SyS_write+0x15e/0x230 [ 392.190509] SyS_clone+0x37/0x50 [ 392.190516] ? sys_vfork+0x30/0x30 [ 392.190528] do_syscall_64+0x1e8/0x640 [ 392.190537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.190553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 392.190561] RIP: 0033:0x459a59 [ 392.190567] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 392.190576] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 392.190581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.190594] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 392.270612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 392.277883] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:56 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x80, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x10000027a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x20}, 0x0, 0x0, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r4 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x400, 0x341) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r5, &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000340)={r5, 0x5, 0x7fffffff, 0x2, 0xffff, 0x0, 0x4, 0x1f, {0x0, @in6={{0xa, 0x4e21, 0x5, @empty, 0x1}}, 0x3, 0x9, 0x4, 0x40, 0x3}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r6, 0x7ff}, 0x8) r7 = semget$private(0x0, 0x0, 0x235) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) socket$inet(0x2, 0x4000000000000001, 0x0) fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) r10 = getuid() semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000180)={{0x7, r8, r9, r10, 0xee00, 0x139}, 0x100000001, 0xffff, 0x4}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108002300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="18001b000000000040bb7cf54837539c9c67d8d9b2c50100ce53e26d0cb7859bdef9282e66d86ad89f1887046a110e"], 0x30}}, 0x400c094) syz_open_procfs(0x0, 0x0) [ 392.322160] CPU: 0 PID: 19832 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 392.329221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.338580] Call Trace: [ 392.341184] dump_stack+0x138/0x197 [ 392.344839] should_fail.cold+0x10f/0x159 [ 392.348994] should_failslab+0xdb/0x130 [ 392.352967] kmem_cache_alloc+0x2d7/0x780 [ 392.357274] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 392.362708] ? check_preemption_disabled+0x3c/0x250 [ 392.367708] selinux_file_alloc_security+0xb4/0x190 [ 392.372706] security_file_alloc+0x6d/0xa0 [ 392.376925] get_empty_filp+0x162/0x3f0 [ 392.380893] path_openat+0x8f/0x3f70 [ 392.384594] ? trace_hardirqs_on+0x10/0x10 [ 392.388824] ? check_preemption_disabled+0x3c/0x250 [ 392.393825] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 392.398473] ? find_held_lock+0x35/0x130 [ 392.402515] ? save_trace+0x290/0x290 [ 392.406299] ? __alloc_fd+0x1d4/0x4a0 [ 392.410084] do_filp_open+0x18e/0x250 [ 392.413866] ? may_open_dev+0xe0/0xe0 [ 392.417650] ? lock_downgrade+0x740/0x740 [ 392.421784] ? _raw_spin_unlock+0x2d/0x50 [ 392.425918] ? __alloc_fd+0x1d4/0x4a0 [ 392.429706] do_sys_open+0x2c5/0x430 [ 392.433402] ? filp_open+0x70/0x70 [ 392.436924] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 392.442288] SyS_open+0x2d/0x40 [ 392.445546] ? do_sys_open+0x430/0x430 [ 392.449416] do_syscall_64+0x1e8/0x640 [ 392.453284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.458113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 392.463292] RIP: 0033:0x413941 09:14:56 executing program 2 (fault-call:2 fault-nth:10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) [ 392.466463] RSP: 002b:00007f0667630a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 392.474149] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000413941 [ 392.481402] RDX: 00007f0667630b0a RSI: 0000000000000002 RDI: 00007f0667630b00 [ 392.488667] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 392.495920] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 392.503169] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 09:14:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:14:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b8021191dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b1ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) sendfile(r4, r3, 0x0, 0x80005) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0xb109, @empty, 0x7f}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x0, @multicast2}, 0xc, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x10}}], 0x10}}], 0x2, 0x0) 09:14:56 executing program 0 (fault-call:8 fault-nth:21): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write(r2, &(0x7f0000000040)=';', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @broadcast, 0x0, 0x0, 'rr\x00'}, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="454cf8d93ffba866c4ce8efef92d79aa1502c2806bfe1618762b50a16c2109c9fbaea40eeedf59e31c608986e41f84afbf6bff57bdc71c08177e92d1c80eafa154b4db40292d3b4cb2e995ec40be4b87ce5d1887f3f4", 0x56, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x7a7, @rand_addr="ca1d267b5793227882b06f7e5a4b13cb", 0x1}, 0x1c) [ 392.669772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.736932] FAULT_INJECTION: forcing a failure. [ 392.736932] name failslab, interval 1, probability 0, space 0, times 0 [ 392.771540] CPU: 0 PID: 19859 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 392.778710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.788151] Call Trace: [ 392.790764] dump_stack+0x138/0x197 [ 392.794390] should_fail.cold+0x10f/0x159 [ 392.798531] should_failslab+0xdb/0x130 [ 392.802588] kmem_cache_alloc_trace+0x2e9/0x790 [ 392.807254] ? __lockdep_init_map+0x10c/0x570 [ 392.811736] ? loop_get_status64+0x120/0x120 [ 392.816167] __kthread_create_on_node+0xe3/0x3e0 [ 392.820903] ? kthread_park+0x140/0x140 [ 392.824864] ? __fget+0x210/0x370 [ 392.828304] ? loop_get_status64+0x120/0x120 [ 392.832693] kthread_create_on_node+0xa8/0xd0 [ 392.837166] ? __kthread_create_on_node+0x3e0/0x3e0 [ 392.842264] ? __lockdep_init_map+0x10c/0x570 [ 392.846746] lo_ioctl+0xcf7/0x1ce0 [ 392.850271] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 392.851000] FAULT_INJECTION: forcing a failure. [ 392.851000] name failslab, interval 1, probability 0, space 0, times 0 [ 392.855446] ? loop_probe+0x160/0x160 [ 392.855457] blkdev_ioctl+0x96b/0x1860 [ 392.855471] ? blkpg_ioctl+0x980/0x980 [ 392.878188] ? __might_sleep+0x93/0xb0 [ 392.882080] ? __fget+0x210/0x370 [ 392.885530] block_ioctl+0xde/0x120 [ 392.889144] ? blkdev_fallocate+0x3b0/0x3b0 [ 392.893456] do_vfs_ioctl+0x7ae/0x1060 [ 392.897344] ? selinux_file_mprotect+0x5d0/0x5d0 [ 392.902091] ? lock_downgrade+0x740/0x740 [ 392.906228] ? ioctl_preallocate+0x1c0/0x1c0 [ 392.910629] ? __fget+0x237/0x370 [ 392.914079] ? security_file_ioctl+0x89/0xb0 [ 392.918478] SyS_ioctl+0x8f/0xc0 [ 392.921933] ? do_vfs_ioctl+0x1060/0x1060 [ 392.926074] do_syscall_64+0x1e8/0x640 [ 392.929951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.934788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 392.939966] RIP: 0033:0x4598c7 [ 392.943154] RSP: 002b:00007f066760fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.950854] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 392.958111] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 392.965370] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 392.972630] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 392.979888] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 392.987165] CPU: 1 PID: 19868 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 392.994192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.003535] Call Trace: [ 393.003556] dump_stack+0x138/0x197 [ 393.003572] should_fail.cold+0x10f/0x159 [ 393.003585] should_failslab+0xdb/0x130 [ 393.017866] kmem_cache_alloc+0x2d7/0x780 [ 393.022007] ? anon_vma_clone+0x310/0x470 [ 393.022026] anon_vma_fork+0x1ce/0x4d0 [ 393.022042] copy_process.part.0+0x45e2/0x6a00 09:14:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)={'mangle\x00'}, &(0x7f0000000340)=0xffffffffffffff34) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x4e23, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x22, {0x2, 0x4e24, @multicast2}, 'bond_slave_1\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x89, &(0x7f0000000100)="fccca5ba615f4bc19f877f1e159ae5c6d571f95f610a4872a7ae92db630ffb20beb442aa23a7ce5a8e2a6690e9a1f1b73e1b67db5d1da3df6063468da04faaf13d664e39dd6969aa75c20c3ad210102cd10a82b3b726ee5210bfd3c9d8d1f70a7b361854b7aa96dbb628d2a3b0314d57648935c2b301f1d1509cc0caa9f43d7596323920cbe27de1bd", 0x34, 0x0, &(0x7f0000000040)="80e5bfa8fde7956cbbf5494df9715de60977e408819aa82bc3babe93489d2c1c01fee895fe8415053f4d26d0cd73359d6d038ebf"}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf706d614e5c9711d) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xffffff77) ftruncate(r2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x8, 0x100010, r2, 0x4000000000000) sendmsg$key(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="020806031f0000002dbd7000fcdbdf2504000200010000002e0f00000000000002000000000000000300000000000000010016004e230000010015004e20000004000300070000000500000000000000c805000000000000060000000000000005000600336000000a004e2100004000ff0200000000000000000000000000010600000000000000020013000600000027bd95b90135000002000b00070000000200000000000000020013000100000026bd70000135000008001900000000000a004e230000000300000000000000000000ffffe00000017f0000000a004e210000080000000000000000000000000000000000ffff0000"], 0xf8}}, 0x20000000) socket$packet(0x11, 0x2, 0x300) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x800, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="70d0e85bf5dcf71bd073e3cfa6d1ab9e35ec0f48ce29547a74e8266c218361d69b254a7ba9fd97c004800356669dfc1e14a2bf76cd896e50cffa02470e7e292cac347e19be440245c63bd21b33fd77f57a2e847600d2c37a325bd279101584a7e5111682a6d1315bc073b9dcf6a4adcfe71aff60850ee220c3b5380fed7b3e3497f9dc229bfdc61aa8d6d162247ef30986d8ccd954961ce1a2879758259c024ef7a847a0f5e16762656dffe37cd4dfb8c2824799cbc5a13cb50e4599db1753020e90d1f16f087567a9d1b39c722b558e069b4188e399485258", 0xd9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r5, 0x50800) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r7) r8 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r9 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) epoll_pwait(r12, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r16, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r16, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r17, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r18, r19, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r20, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r23 = dup3(r21, r22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r26, r27, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r28, r29, 0x0) r30 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r30, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r30, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r30, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r30, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r30, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r30, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r31 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r31, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r31, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r31, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r31, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r31, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r31, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r32, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r32, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r32, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r32, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r32, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r32, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r33, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r33, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r33, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r33, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r33, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r33, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r5, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES64=r12, @ANYRESHEX, @ANYRESDEC=r13, @ANYRESOCT=r6, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000001200)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r14], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r19, @ANYRESOCT=r27, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r15, @ANYPTR64=&(0x7f0000000a00)=ANY=[], @ANYRESOCT=0x0, @ANYRESHEX=r17, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r9, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r5], 0x0) sendto$x25(r20, &(0x7f0000000380)="7d0aff2ae6f963a86575c75f7d0e9ff231a43ec3629a11f8d058371e03d442397fc4dd0163296905b9012c3abad46bb26ef911eb8ac47c9b2ce94f7d16fbfd825a79ce01057158165a728e40cb6005d51427e834ae001ac1f573a01a66d33c800712d9f205825ead779ef6e4a82f47", 0xfffffffffffffeee, 0x8000, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) r34 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer\x00', 0x1, 0x0) sendmsg$nl_netfilter(r34, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB="1800fbdbdf250500000104007500"/24], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000600)="cb", 0x1}], 0x1}}], 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000005c0)={0x9d0000, 0xffff, 0x40, [], &(0x7f0000000580)={0x9b090c, 0x7fff, [], @p_u8=&(0x7f0000000300)=0x2}}) [ 393.022073] ? __cleanup_sighand+0x50/0x50 [ 393.022084] ? lock_downgrade+0x740/0x740 [ 393.022100] _do_fork+0x19e/0xce0 [ 393.022114] ? fork_idle+0x280/0x280 [ 393.022129] ? fput+0xd4/0x150 [ 393.022138] ? SyS_write+0x15e/0x230 [ 393.022153] SyS_clone+0x37/0x50 [ 393.030166] ? sys_vfork+0x30/0x30 [ 393.030183] do_syscall_64+0x1e8/0x640 [ 393.030192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.030209] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 393.030216] RIP: 0033:0x459a59 09:14:57 executing program 0 (fault-call:8 fault-nth:22): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:57 executing program 2 (fault-call:2 fault-nth:11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 393.030221] RSP: 002b:00007f8a9a143c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 393.030232] RAX: ffffffffffffffda RBX: 00007f8a9a143c90 RCX: 0000000000459a59 [ 393.030237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.030242] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 393.030247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1446d4 [ 393.030253] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:57 executing program 5: socket$inet(0x2, 0x1, 0x92) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 09:14:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 393.210540] FAULT_INJECTION: forcing a failure. [ 393.210540] name failslab, interval 1, probability 0, space 0, times 0 [ 393.215547] FAULT_INJECTION: forcing a failure. [ 393.215547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.223197] CPU: 0 PID: 19875 Comm: syz-executor.2 Not tainted 4.14.148 #0 [ 393.240617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.249991] Call Trace: [ 393.250008] dump_stack+0x138/0x197 [ 393.250029] should_fail.cold+0x10f/0x159 [ 393.250043] should_failslab+0xdb/0x130 [ 393.250055] kmem_cache_alloc+0x2d7/0x780 [ 393.260383] ? trace_hardirqs_on+0x10/0x10 [ 393.260394] ? save_trace+0x290/0x290 [ 393.272725] __kernfs_new_node+0x70/0x420 [ 393.272739] kernfs_new_node+0x80/0xf0 [ 393.272750] kernfs_create_dir_ns+0x41/0x140 [ 393.272761] internal_create_group+0xea/0x7b0 [ 393.272779] sysfs_create_group+0x20/0x30 [ 393.288983] lo_ioctl+0x1176/0x1ce0 [ 393.288997] ? loop_probe+0x160/0x160 [ 393.289009] blkdev_ioctl+0x96b/0x1860 [ 393.308910] ? blkpg_ioctl+0x980/0x980 [ 393.312811] ? __might_sleep+0x93/0xb0 [ 393.316699] ? __fget+0x210/0x370 [ 393.320157] block_ioctl+0xde/0x120 [ 393.323776] ? blkdev_fallocate+0x3b0/0x3b0 [ 393.323787] do_vfs_ioctl+0x7ae/0x1060 [ 393.323799] ? selinux_file_mprotect+0x5d0/0x5d0 [ 393.323810] ? lock_downgrade+0x740/0x740 [ 393.336755] ? ioctl_preallocate+0x1c0/0x1c0 [ 393.336767] ? __fget+0x237/0x370 [ 393.336783] ? security_file_ioctl+0x89/0xb0 [ 393.353142] SyS_ioctl+0x8f/0xc0 [ 393.356504] ? do_vfs_ioctl+0x1060/0x1060 [ 393.356520] do_syscall_64+0x1e8/0x640 [ 393.356529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.356545] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 393.374589] RIP: 0033:0x4598c7 [ 393.377767] RSP: 002b:00007f0667630a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.377779] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004598c7 [ 393.377785] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 393.377790] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 393.377797] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 393.407348] R13: 00000000004c8e67 R14: 00000000004e02d8 R15: 0000000000000005 [ 393.414850] protocol 88fb is buggy, dev hsr_slave_0 [ 393.414901] protocol 88fb is buggy, dev hsr_slave_1 [ 393.436905] CPU: 1 PID: 19877 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 393.443944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.453306] Call Trace: [ 393.455904] dump_stack+0x138/0x197 [ 393.459545] should_fail.cold+0x10f/0x159 [ 393.459557] ? __might_sleep+0x93/0xb0 [ 393.459571] __alloc_pages_nodemask+0x1d6/0x7a0 [ 393.459581] ? save_stack+0xa9/0xd0 [ 393.459592] ? __alloc_pages_slowpath+0x2930/0x2930 [ 393.459605] ? anon_vma_fork+0x1ce/0x4d0 [ 393.484919] ? copy_process.part.0+0x45e2/0x6a00 [ 393.489659] ? _do_fork+0x19e/0xce0 [ 393.493274] ? __lock_acquire+0x5f7/0x4620 [ 393.497492] alloc_pages_current+0xec/0x1e0 [ 393.501801] __get_free_pages+0xf/0x40 [ 393.505668] get_zeroed_page+0x11/0x20 [ 393.509534] __pud_alloc+0x3b/0x200 [ 393.513153] pud_alloc+0xc9/0x130 [ 393.516590] copy_page_range+0x2de/0x1bd0 [ 393.520724] ? find_held_lock+0x35/0x130 [ 393.524768] ? find_held_lock+0x35/0x130 [ 393.528816] ? __pmd_alloc+0x410/0x410 [ 393.532684] ? __vma_link_rb+0x247/0x340 [ 393.536741] copy_process.part.0+0x4764/0x6a00 [ 393.541323] ? __cleanup_sighand+0x50/0x50 [ 393.545539] ? lock_downgrade+0x740/0x740 [ 393.549673] _do_fork+0x19e/0xce0 [ 393.553111] ? fork_idle+0x280/0x280 [ 393.556811] ? fput+0xd4/0x150 [ 393.559999] ? SyS_write+0x15e/0x230 [ 393.563702] SyS_clone+0x37/0x50 [ 393.567051] ? sys_vfork+0x30/0x30 [ 393.570575] do_syscall_64+0x1e8/0x640 [ 393.574442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.579271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 393.584441] RIP: 0033:0x459a59 [ 393.587620] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 393.595317] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 393.602568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.609819] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 393.617070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 393.624331] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 393.632403] protocol 88fb is buggy, dev hsr_slave_0 [ 393.637479] protocol 88fb is buggy, dev hsr_slave_1 [ 393.672177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480), 0xffffffffffffff39, 0x0, 0x0, 0x150) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='setgroups\x00') ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)={0x8, 0x4}) 09:14:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 393.830087] audit: type=1804 audit(1570785297.953:203): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir346299587/syzkaller.DieuW3/500/file0" dev="sda1" ino=16531 res=1 [ 393.841194] ISOFS: Unable to identify CD-ROM format. [ 393.868459] audit: type=1800 audit(1570785297.993:204): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.1" name="file0" dev="sda1" ino=16531 res=0 [ 393.910101] protocol 88fb is buggy, dev hsr_slave_0 [ 393.915297] protocol 88fb is buggy, dev hsr_slave_1 [ 393.920460] protocol 88fb is buggy, dev hsr_slave_0 [ 393.925523] protocol 88fb is buggy, dev hsr_slave_1 09:14:58 executing program 0 (fault-call:8 fault-nth:23): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 393.974336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB]) 09:14:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 394.119807] FAULT_INJECTION: forcing a failure. [ 394.119807] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.132663] CPU: 1 PID: 19919 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 394.139678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.139683] Call Trace: [ 394.139702] dump_stack+0x138/0x197 [ 394.139722] should_fail.cold+0x10f/0x159 [ 394.139738] ? __might_sleep+0x93/0xb0 [ 394.155284] __alloc_pages_nodemask+0x1d6/0x7a0 [ 394.155299] ? __alloc_pages_slowpath+0x2930/0x2930 [ 394.155319] alloc_pages_current+0xec/0x1e0 [ 394.163323] __pmd_alloc+0x41/0x410 [ 394.163334] copy_page_range+0x12b7/0x1bd0 [ 394.163349] ? find_held_lock+0x35/0x130 [ 394.163374] ? __pmd_alloc+0x410/0x410 [ 394.163383] ? __vma_link_rb+0x247/0x340 [ 394.163397] copy_process.part.0+0x4764/0x6a00 [ 394.163426] ? __cleanup_sighand+0x50/0x50 [ 394.173062] ? lock_downgrade+0x740/0x740 [ 394.173080] _do_fork+0x19e/0xce0 [ 394.173094] ? fork_idle+0x280/0x280 [ 394.173108] ? fput+0xd4/0x150 [ 394.173118] ? SyS_write+0x15e/0x230 [ 394.173131] SyS_clone+0x37/0x50 [ 394.173140] ? sys_vfork+0x30/0x30 [ 394.173153] do_syscall_64+0x1e8/0x640 [ 394.173162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.173177] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 394.173186] RIP: 0033:0x459a59 [ 394.187301] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 394.187312] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:14:58 executing program 1: ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSETATTR(r0, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x1260, 0xffffffffffffffff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000300)='$userGPLeth1cpuset\'vboxnet0%-\x00', 0x1e, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) io_setup(0x2344, &(0x7f0000000100)=0x0) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = socket$inet(0x2, 0x80000, 0x3) getpeername$inet(r5, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 09:14:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 394.187318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.187324] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 394.187330] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 394.187336] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:58 executing program 0 (fault-call:8 fault-nth:24): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 394.369405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.454418] ISOFS: Unable to identify CD-ROM format. 09:14:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 394.514348] FAULT_INJECTION: forcing a failure. [ 394.514348] name failslab, interval 1, probability 0, space 0, times 0 [ 394.573141] ISOFS: Unable to identify CD-ROM format. [ 394.586474] CPU: 0 PID: 19943 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 394.593529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.602890] Call Trace: [ 394.605503] dump_stack+0x138/0x197 [ 394.609151] should_fail.cold+0x10f/0x159 [ 394.613314] should_failslab+0xdb/0x130 [ 394.617305] kmem_cache_alloc+0x2d7/0x780 [ 394.621468] ? alloc_pages_current+0xf4/0x1e0 [ 394.626410] __pmd_alloc+0xbd/0x410 [ 394.630046] copy_page_range+0x12b7/0x1bd0 [ 394.634290] ? find_held_lock+0x35/0x130 [ 394.638368] ? __pmd_alloc+0x410/0x410 [ 394.642238] ? __vma_link_rb+0x247/0x340 [ 394.646289] copy_process.part.0+0x4764/0x6a00 [ 394.650880] ? __cleanup_sighand+0x50/0x50 [ 394.655101] ? lock_downgrade+0x740/0x740 [ 394.659241] _do_fork+0x19e/0xce0 [ 394.662680] ? fork_idle+0x280/0x280 [ 394.666399] ? fput+0xd4/0x150 [ 394.669590] ? SyS_write+0x15e/0x230 [ 394.673301] SyS_clone+0x37/0x50 [ 394.676661] ? sys_vfork+0x30/0x30 [ 394.680200] do_syscall_64+0x1e8/0x640 [ 394.684083] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 394.688915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 394.694086] RIP: 0033:0x459a59 [ 394.697257] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 394.704950] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 394.712201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:14:58 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r2, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x4200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x0, 0x304, 0x70bd27, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}}, 0x8000) [ 394.719452] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 394.726708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 394.733959] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 394.763565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:58 executing program 0 (fault-call:8 fault-nth:25): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:14:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) readahead(r1, 0x7fff, 0x7) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:14:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'teql0\x00', 0x200}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x1000}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'ip_vti0\x00', 0x200}) 09:14:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:14:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) fcntl$setflags(r2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000000000001f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaaae88, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="0f06263e0f300f01c426f30fc776130f01c5f30fc7b4cd08000000e300c4c3fd01bcfc7ff800002e0f7938f4", 0x2c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 394.922241] IPVS: ftp: loaded support on port[0] = 21 [ 394.941186] FAULT_INJECTION: forcing a failure. [ 394.941186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.983530] CPU: 1 PID: 19973 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 394.990589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.990595] Call Trace: [ 394.990615] dump_stack+0x138/0x197 [ 394.990635] should_fail.cold+0x10f/0x159 [ 394.990647] ? __might_sleep+0x93/0xb0 [ 394.990660] __alloc_pages_nodemask+0x1d6/0x7a0 [ 394.990673] ? __alloc_pages_slowpath+0x2930/0x2930 [ 394.990691] alloc_pages_current+0xec/0x1e0 [ 394.990705] pte_alloc_one+0x1a/0x100 [ 394.990717] __pte_alloc+0x2a/0x2d0 [ 394.990730] copy_page_range+0x11ba/0x1bd0 [ 394.990760] ? __pmd_alloc+0x410/0x410 [ 394.990776] copy_process.part.0+0x4764/0x6a00 [ 394.990805] ? __cleanup_sighand+0x50/0x50 [ 394.990814] ? lock_downgrade+0x740/0x740 [ 394.990829] _do_fork+0x19e/0xce0 [ 394.990844] ? fork_idle+0x280/0x280 [ 395.027167] ISOFS: Unable to identify CD-ROM format. [ 395.028414] ? fput+0xd4/0x150 [ 395.028426] ? SyS_write+0x15e/0x230 [ 395.028445] SyS_clone+0x37/0x50 [ 395.028453] ? sys_vfork+0x30/0x30 [ 395.028467] do_syscall_64+0x1e8/0x640 [ 395.035884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.044091] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.044100] RIP: 0033:0x459a59 [ 395.044106] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 395.044117] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 395.044123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.044129] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:14:59 executing program 0 (fault-call:8 fault-nth:26): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 395.044133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 395.044138] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 395.163959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:14:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 395.252921] FAULT_INJECTION: forcing a failure. [ 395.252921] name failslab, interval 1, probability 0, space 0, times 0 09:14:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 395.297787] CPU: 0 PID: 19989 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 395.304850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.314218] Call Trace: [ 395.316817] dump_stack+0x138/0x197 [ 395.320463] should_fail.cold+0x10f/0x159 [ 395.324625] should_failslab+0xdb/0x130 [ 395.328611] kmem_cache_alloc+0x2d7/0x780 [ 395.332773] ptlock_alloc+0x20/0x70 [ 395.336406] pte_alloc_one+0x60/0x100 [ 395.340205] __pte_alloc+0x2a/0x2d0 [ 395.343833] copy_page_range+0x11ba/0x1bd0 [ 395.348108] ? __pmd_alloc+0x410/0x410 [ 395.352006] copy_process.part.0+0x4764/0x6a00 [ 395.356616] ? __cleanup_sighand+0x50/0x50 [ 395.360853] ? lock_downgrade+0x740/0x740 [ 395.365013] _do_fork+0x19e/0xce0 [ 395.368471] ? fork_idle+0x280/0x280 [ 395.372192] ? fput+0xd4/0x150 [ 395.375397] ? SyS_write+0x15e/0x230 [ 395.379141] SyS_clone+0x37/0x50 [ 395.382506] ? sys_vfork+0x30/0x30 [ 395.386066] do_syscall_64+0x1e8/0x640 [ 395.389966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.394878] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.400059] RIP: 0033:0x459a59 [ 395.403243] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 395.411171] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 395.418566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.425824] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.433102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 395.440357] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:14:59 executing program 0 (fault-call:8 fault-nth:27): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 395.496417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 395.523005] IPVS: ftp: loaded support on port[0] = 21 09:14:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 395.585853] FAULT_INJECTION: forcing a failure. [ 395.585853] name failslab, interval 1, probability 0, space 0, times 0 [ 395.607889] CPU: 1 PID: 20001 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 395.615086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.624458] Call Trace: [ 395.624482] dump_stack+0x138/0x197 [ 395.624501] should_fail.cold+0x10f/0x159 [ 395.624516] should_failslab+0xdb/0x130 [ 395.624528] kmem_cache_alloc+0x2d7/0x780 [ 395.624545] copy_process.part.0+0x444f/0x6a00 [ 395.624572] ? __cleanup_sighand+0x50/0x50 [ 395.624581] ? lock_downgrade+0x740/0x740 [ 395.624594] _do_fork+0x19e/0xce0 [ 395.624607] ? fork_idle+0x280/0x280 [ 395.624619] ? fput+0xd4/0x150 [ 395.624628] ? SyS_write+0x15e/0x230 [ 395.624640] SyS_clone+0x37/0x50 [ 395.624648] ? sys_vfork+0x30/0x30 [ 395.624659] do_syscall_64+0x1e8/0x640 09:14:59 executing program 0 (fault-call:8 fault-nth:28): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 395.624667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.624682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.624690] RIP: 0033:0x459a59 [ 395.624694] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 395.624704] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 395.624714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.639029] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 395.639036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 395.639042] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 395.755620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:00 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r2, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x4200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x0, 0x304, 0x70bd27, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}}, 0x8000) 09:15:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r0, 0x50800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r9, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r13, r14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r18 = dup3(r16, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r19, r20, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r25, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r25, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r25, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r25, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r25, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r25, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r26 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r26, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r26, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r26, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r26, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r26, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r26, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r24, @ANYRES64=r7, @ANYRESHEX, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r9], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r14, @ANYRESDEC, @ANYRESHEX=r26, @ANYPTR], @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r25], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=r20, @ANYRES32=r18, @ANYRES64], @ANYRESHEX=r11, @ANYRESHEX=r12, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYRES32=r10], @ANYRES64=r4, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r0], 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x4, 0x2, 0x30, &(0x7f0000ffc000/0x4000)=nil, 0xcd59}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 09:15:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 395.881617] FAULT_INJECTION: forcing a failure. [ 395.881617] name failslab, interval 1, probability 0, space 0, times 0 [ 395.898268] CPU: 0 PID: 20014 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 395.905318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.914698] Call Trace: [ 395.917285] dump_stack+0x138/0x197 [ 395.920913] should_fail.cold+0x10f/0x159 [ 395.925054] should_failslab+0xdb/0x130 [ 395.929016] kmem_cache_alloc+0x47/0x780 [ 395.933064] ? __lock_is_held+0xb6/0x140 [ 395.937884] ? check_preemption_disabled+0x3c/0x250 [ 395.942894] anon_vma_clone+0xde/0x470 [ 395.946770] anon_vma_fork+0x87/0x4d0 [ 395.952121] copy_process.part.0+0x45e2/0x6a00 [ 395.956699] ? __cleanup_sighand+0x50/0x50 [ 395.960925] ? lock_downgrade+0x740/0x740 [ 395.965058] _do_fork+0x19e/0xce0 [ 395.968511] ? fork_idle+0x280/0x280 [ 395.972248] ? fput+0xd4/0x150 [ 395.975429] ? SyS_write+0x15e/0x230 [ 395.979150] SyS_clone+0x37/0x50 [ 395.982500] ? sys_vfork+0x30/0x30 [ 395.986026] do_syscall_64+0x1e8/0x640 [ 395.989895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.994723] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 395.999907] RIP: 0033:0x459a59 [ 396.003091] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 396.010795] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 396.018048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.025312] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.032567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 396.039819] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:00 executing program 0 (fault-call:8 fault-nth:29): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="f8ff000000000000f9a8f700028000008500000104ffffe495"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x101040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x7fff, 0x7f}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7e010100", @ANYRES32=r0, @ANYBLOB="0000000000000000850000002c000000"], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", 0x0, 0x319}, 0x28) [ 396.137202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 396.246050] FAULT_INJECTION: forcing a failure. [ 396.246050] name failslab, interval 1, probability 0, space 0, times 0 09:15:00 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = socket(0x0, 0x59a39e37c5b3bf1c, 0xb4) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32603) 09:15:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 396.328328] CPU: 1 PID: 20032 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 396.335390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.344739] Call Trace: [ 396.344758] dump_stack+0x138/0x197 [ 396.344776] should_fail.cold+0x10f/0x159 [ 396.344792] should_failslab+0xdb/0x130 [ 396.344806] kmem_cache_alloc+0x47/0x780 [ 396.344821] ? anon_vma_chain_link+0x142/0x1a0 [ 396.344833] anon_vma_clone+0xde/0x470 [ 396.344850] anon_vma_fork+0x87/0x4d0 09:15:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1600202) [ 396.344865] copy_process.part.0+0x45e2/0x6a00 [ 396.344892] ? __cleanup_sighand+0x50/0x50 [ 396.344904] ? lock_downgrade+0x740/0x740 [ 396.388424] _do_fork+0x19e/0xce0 [ 396.391989] ? fork_idle+0x280/0x280 [ 396.395714] ? fput+0xd4/0x150 [ 396.398912] ? SyS_write+0x15e/0x230 [ 396.402630] SyS_clone+0x37/0x50 [ 396.402639] ? sys_vfork+0x30/0x30 [ 396.402653] do_syscall_64+0x1e8/0x640 [ 396.402662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.402681] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 396.402689] RIP: 0033:0x459a59 [ 396.402695] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 396.402706] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 396.402712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.402717] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.402721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 396.402726] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:00 executing program 0 (fault-call:8 fault-nth:30): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 396.499954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:00 executing program 2: r0 = socket$inet(0x2, 0x6, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r0, 0x50800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r9, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r13, r14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r18 = dup3(r16, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r19, r20, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) r25 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r25, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r25, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r25, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r25, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r25, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r25, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r24, @ANYRES64=r7, @ANYRESHEX, @ANYRESDEC=r8, @ANYRESOCT=r1, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r9], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r14, @ANYRESOCT=r22, @ANYRESDEC, @ANYRES64=r25], @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r15], @ANYBLOB="b1eac52636bef902958d24b19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb332576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=r20, @ANYRES32=r18, @ANYRES64], @ANYRESHEX=r11, @ANYRESHEX=r12, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r4, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b36582e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb9"], @ANYRES32=r0], 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 396.684966] FAULT_INJECTION: forcing a failure. [ 396.684966] name failslab, interval 1, probability 0, space 0, times 0 [ 396.718889] CPU: 1 PID: 20060 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 396.725967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.725974] Call Trace: [ 396.725993] dump_stack+0x138/0x197 [ 396.726012] should_fail.cold+0x10f/0x159 [ 396.726025] ? anon_vma_clone+0xde/0x470 [ 396.726039] should_failslab+0xdb/0x130 [ 396.726051] kmem_cache_alloc+0x47/0x780 [ 396.757869] ? anon_vma_chain_link+0x142/0x1a0 [ 396.762467] anon_vma_clone+0xde/0x470 [ 396.766373] anon_vma_fork+0x87/0x4d0 [ 396.770183] copy_process.part.0+0x45e2/0x6a00 [ 396.774792] ? __cleanup_sighand+0x50/0x50 [ 396.779035] ? lock_downgrade+0x740/0x740 [ 396.783216] _do_fork+0x19e/0xce0 [ 396.783233] ? fork_idle+0x280/0x280 [ 396.783249] ? fput+0xd4/0x150 [ 396.783260] ? SyS_write+0x15e/0x230 [ 396.783273] SyS_clone+0x37/0x50 [ 396.783286] ? sys_vfork+0x30/0x30 [ 396.790435] do_syscall_64+0x1e8/0x640 [ 396.790444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.790458] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 396.790466] RIP: 0033:0x459a59 [ 396.790471] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 396.790481] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 396.790486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 396.790491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 396.790496] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 396.790503] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 396.843278] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 396.884796] FAT-fs (loop5): Filesystem has been set read-only [ 396.915034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:01 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r2, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x4200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x0, 0x304, 0x70bd27, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}}, 0x8000) 09:15:01 executing program 0 (fault-call:8 fault-nth:31): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:01 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 397.035462] ISOFS: Unable to identify CD-ROM format. [ 397.054281] FAULT_INJECTION: forcing a failure. [ 397.054281] name failslab, interval 1, probability 0, space 0, times 0 [ 397.089142] CPU: 1 PID: 20082 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 397.096210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.096215] Call Trace: [ 397.096233] dump_stack+0x138/0x197 [ 397.096251] should_fail.cold+0x10f/0x159 [ 397.096272] should_failslab+0xdb/0x130 [ 397.096287] kmem_cache_alloc+0x2d7/0x780 [ 397.124094] ? anon_vma_clone+0x310/0x470 [ 397.128264] anon_vma_fork+0xe9/0x4d0 [ 397.132080] copy_process.part.0+0x45e2/0x6a00 [ 397.136694] ? __cleanup_sighand+0x50/0x50 [ 397.140937] ? lock_downgrade+0x740/0x740 [ 397.145099] _do_fork+0x19e/0xce0 [ 397.148579] ? fork_idle+0x280/0x280 [ 397.152299] ? fput+0xd4/0x150 [ 397.155496] ? SyS_write+0x15e/0x230 [ 397.159210] SyS_clone+0x37/0x50 [ 397.159220] ? sys_vfork+0x30/0x30 [ 397.159234] do_syscall_64+0x1e8/0x640 [ 397.159244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.159260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.159269] RIP: 0033:0x459a59 09:15:01 executing program 0 (fault-call:8 fault-nth:32): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 397.183206] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 397.190912] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 397.190919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.190925] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.190931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 397.190937] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 397.272138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 397.331985] FAULT_INJECTION: forcing a failure. [ 397.331985] name failslab, interval 1, probability 0, space 0, times 0 [ 397.381976] CPU: 1 PID: 20094 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 397.389039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.398397] Call Trace: [ 397.401002] dump_stack+0x138/0x197 [ 397.404644] should_fail.cold+0x10f/0x159 [ 397.408805] should_failslab+0xdb/0x130 [ 397.412791] kmem_cache_alloc+0x2d7/0x780 [ 397.416946] ? anon_vma_clone+0x310/0x470 [ 397.421109] anon_vma_fork+0x1ce/0x4d0 [ 397.425011] copy_process.part.0+0x45e2/0x6a00 [ 397.429645] ? __cleanup_sighand+0x50/0x50 [ 397.429656] ? lock_downgrade+0x740/0x740 [ 397.429671] _do_fork+0x19e/0xce0 [ 397.438050] ? fork_idle+0x280/0x280 [ 397.438067] ? fput+0xd4/0x150 [ 397.438077] ? SyS_write+0x15e/0x230 [ 397.438090] SyS_clone+0x37/0x50 [ 397.448410] ? sys_vfork+0x30/0x30 [ 397.448427] do_syscall_64+0x1e8/0x640 [ 397.448436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.448452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.459114] RIP: 0033:0x459a59 [ 397.459120] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 397.459131] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 397.459137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.459143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.459148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 397.459152] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="6d61703d6f6666dac7"]) 09:15:01 executing program 0 (fault-call:8 fault-nth:33): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 397.535834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:01 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 397.663525] FAULT_INJECTION: forcing a failure. [ 397.663525] name failslab, interval 1, probability 0, space 0, times 0 09:15:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0xffffffffffffff8e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001340)={0x0, 0x0, 0x2080}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @remote}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x80, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='cgroup.events\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x101, 0x100000, 0xffffffffffffdbff, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="c35a381753113905e52d86572c1b9e890eb1e857bfd48996b5adf8956d90ae93ee613fade18b2905ac1b23099c9be628af8496cc916162ad203f20c2d4f2d7a47e9198f9695bf66dcee250f5c0c9fdf860f95e1187527a2c6de956fa5626b2f7dc608c33cb3b769bf05a8d", 0x6b}, {&(0x7f00000001c0)="190723c6466f4f0648833d846e23c48037e4c6a0cb3f97910186e795cb5d21af1423213745ebc214f571a172c23018e5fc4e18d42fd360e2b1195cf240a0b9c17d54cb3843c8cc7f1fd8ff6199bfcc888d4c0a80fd4529b64d3accafa307c2234afb32f1ccb15fdd954dd177e9bc526ca87843bc947eb6e80919e5da978734a4a18a92499bdcadce2c037b53935fdd1f488dbfaa91587d94a2ed9277401076cdbf838592fc40fe5dbf16a1d95663d9557f8d25d69a37a2e3d0f6133de899410180617e1e9d301a663e280db9689f1121d13a39b69c95fd9ed23e19254a1aae460c8ebbe950adcd5b41287bd7fe93c5b450a992", 0xf3}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000440)="01a3be06602656012e2baf633d5e5a7a574fd032b9c9cedb404729b997343b54ed256794b2ab23f7522294a3766383c13cd97f02c8b0873f5f60cf58f2cd68a466b28931aa20b47b00ce8aaa4a9d8761e899b019f6037c3557aeddced59f472aa12133bb860d527ca7f1350e809967ab55b82e596bd8efca81ef41ece9cfc8c500b878f7ffbfff8cc17548db684841ba0bc0702038ae4476bac2ba765f4ac929339dfac99106b59b50596917eafac25db91c9ab3e25655f2a8f0d0d20d0df1fdb920054aa2c631f5b4bb85672c6be2245a4a3a663e2bc1938d336efb965bf4bb4beaf1580c0789ebd039c7c32763a041dd5b1a", 0xf3}], 0x4, 0x1) [ 397.748896] CPU: 0 PID: 20114 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 397.755971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.755976] Call Trace: [ 397.755994] dump_stack+0x138/0x197 [ 397.756015] should_fail.cold+0x10f/0x159 [ 397.756033] should_failslab+0xdb/0x130 [ 397.780134] kmem_cache_alloc+0x2d7/0x780 [ 397.784295] ? __pmd_alloc+0x410/0x410 [ 397.788205] copy_process.part.0+0x444f/0x6a00 [ 397.792824] ? __cleanup_sighand+0x50/0x50 [ 397.797073] ? lock_downgrade+0x740/0x740 [ 397.801234] _do_fork+0x19e/0xce0 [ 397.804692] ? fork_idle+0x280/0x280 [ 397.808411] ? fput+0xd4/0x150 [ 397.811699] ? SyS_write+0x15e/0x230 [ 397.815514] SyS_clone+0x37/0x50 [ 397.815525] ? sys_vfork+0x30/0x30 [ 397.815540] do_syscall_64+0x1e8/0x640 [ 397.815549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.815568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 397.836373] RIP: 0033:0x459a59 [ 397.836380] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 397.836391] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 397.836397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.836403] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 397.836409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 397.836415] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:02 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf17) unshare(0x40040400) pipe(&(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, r2, 0xc) syz_open_dev$ndb(0x0, 0x0, 0x4200) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x0, 0x304, 0x70bd27, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}}, 0x8000) 09:15:02 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:02 executing program 0 (fault-call:8 fault-nth:34): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 398.096015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.147919] FAULT_INJECTION: forcing a failure. [ 398.147919] name failslab, interval 1, probability 0, space 0, times 0 [ 398.170128] CPU: 1 PID: 20148 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 398.170771] ISOFS: Unable to identify CD-ROM format. [ 398.177191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.177198] Call Trace: [ 398.177218] dump_stack+0x138/0x197 [ 398.177237] should_fail.cold+0x10f/0x159 [ 398.177253] should_failslab+0xdb/0x130 [ 398.177271] kmem_cache_alloc+0x2d7/0x780 [ 398.177292] copy_process.part.0+0x444f/0x6a00 [ 398.177320] ? __cleanup_sighand+0x50/0x50 [ 398.177331] ? lock_downgrade+0x740/0x740 [ 398.177345] _do_fork+0x19e/0xce0 [ 398.177358] ? fork_idle+0x280/0x280 [ 398.177371] ? fput+0xd4/0x150 [ 398.177381] ? SyS_write+0x15e/0x230 [ 398.177395] SyS_clone+0x37/0x50 [ 398.177403] ? sys_vfork+0x30/0x30 [ 398.177416] do_syscall_64+0x1e8/0x640 [ 398.248234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.253092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 398.258283] RIP: 0033:0x459a59 [ 398.261472] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 398.269186] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 398.276461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.283751] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.291029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 09:15:02 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 398.298300] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x808000, &(0x7f0000000880)=ANY=[@ANYBLOB="61703d1b79a21a0000"]) [ 398.546899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:02 executing program 0 (fault-call:8 fault-nth:35): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept4(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x81400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x701, 0x0, 0x0, {0x7, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfa5eecd35372e87b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xa0000, @local, 0x80}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x6000800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000240)="cd707d570ac6052657d4679999ae550949b1979252b9a5d89567eeed68691ed24d2237607c176d53584bff8d6f6ab3363b051c6c04c26aec35bf7d463126a93319a7e0b6c884ce76ad96fd0eaeccf29d407ef1f64713933119f4cb34dad0bc6f0d1234b2730bef9c071d7a00fcdcd5248a5588a866bff4a6ca2aa920322a3632f3fec7ae6631abdcebf4e83832dcb373622df219318a35ce6c13a791b9a39307a2beb67000b2c6ba386258b6d2129d28995857") syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 398.806601] FAULT_INJECTION: forcing a failure. [ 398.806601] name failslab, interval 1, probability 0, space 0, times 0 [ 398.833809] CPU: 1 PID: 20181 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 398.840901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.850264] Call Trace: [ 398.852871] dump_stack+0x138/0x197 [ 398.856518] should_fail.cold+0x10f/0x159 [ 398.856534] should_failslab+0xdb/0x130 [ 398.856548] kmem_cache_alloc+0x47/0x780 [ 398.864660] ? __lock_is_held+0xb6/0x140 [ 398.864673] ? check_preemption_disabled+0x3c/0x250 [ 398.864689] anon_vma_clone+0xde/0x470 [ 398.864703] anon_vma_fork+0x87/0x4d0 [ 398.885473] copy_process.part.0+0x45e2/0x6a00 [ 398.890062] ? __cleanup_sighand+0x50/0x50 [ 398.894286] ? lock_downgrade+0x740/0x740 [ 398.898419] _do_fork+0x19e/0xce0 [ 398.901857] ? fork_idle+0x280/0x280 [ 398.905560] ? fput+0xd4/0x150 [ 398.908734] ? SyS_write+0x15e/0x230 [ 398.912446] SyS_clone+0x37/0x50 [ 398.915796] ? sys_vfork+0x30/0x30 [ 398.919322] do_syscall_64+0x1e8/0x640 [ 398.923193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.928021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 398.933192] RIP: 0033:0x459a59 [ 398.936362] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 398.944066] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 398.951318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 398.958568] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 398.965818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 398.973068] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:03 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 399.059609] ISOFS: Unable to identify CD-ROM format. 09:15:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x2000000) 09:15:03 executing program 0 (fault-call:8 fault-nth:36): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 399.505315] team0 (unregistering): Port device team_slave_0 removed 09:15:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 399.555917] team0 (unregistering): Port device team_slave_1 removed [ 399.625366] FAULT_INJECTION: forcing a failure. [ 399.625366] name failslab, interval 1, probability 0, space 0, times 0 [ 399.659336] CPU: 1 PID: 20226 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 399.666408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.666415] Call Trace: [ 399.666433] dump_stack+0x138/0x197 [ 399.666452] should_fail.cold+0x10f/0x159 [ 399.666469] should_failslab+0xdb/0x130 [ 399.666482] kmem_cache_alloc+0x47/0x780 [ 399.666495] ? anon_vma_chain_link+0x142/0x1a0 [ 399.666508] anon_vma_clone+0xde/0x470 [ 399.666526] anon_vma_fork+0x87/0x4d0 [ 399.708990] copy_process.part.0+0x45e2/0x6a00 [ 399.713598] ? __cleanup_sighand+0x50/0x50 [ 399.713611] ? lock_downgrade+0x740/0x740 [ 399.713628] _do_fork+0x19e/0xce0 [ 399.713642] ? fork_idle+0x280/0x280 [ 399.713656] ? fput+0xd4/0x150 [ 399.713666] ? SyS_write+0x15e/0x230 [ 399.713680] SyS_clone+0x37/0x50 [ 399.713689] ? sys_vfork+0x30/0x30 [ 399.713702] do_syscall_64+0x1e8/0x640 [ 399.713709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.713725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 399.722099] RIP: 0033:0x459a59 [ 399.722105] RSP: 002b:00007f8a9a164c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 399.722121] RAX: ffffffffffffffda RBX: 00007f8a9a164c90 RCX: 0000000000459a59 09:15:03 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 399.722127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.722134] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 399.722140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1656d4 [ 399.722146] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:04 executing program 0 (fault-call:8 fault-nth:37): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x2000000) [ 400.005811] ISOFS: Unable to identify CD-ROM format. 09:15:04 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 400.072640] FAULT_INJECTION: forcing a failure. [ 400.072640] name failslab, interval 1, probability 0, space 0, times 0 [ 400.147112] ISOFS: Unable to identify CD-ROM format. [ 400.158111] CPU: 1 PID: 20249 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 400.165165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.174538] Call Trace: [ 400.174557] dump_stack+0x138/0x197 [ 400.174576] should_fail.cold+0x10f/0x159 [ 400.174593] ? anon_vma_clone+0xde/0x470 [ 400.180819] should_failslab+0xdb/0x130 [ 400.180835] kmem_cache_alloc+0x47/0x780 [ 400.180851] ? anon_vma_chain_link+0x142/0x1a0 [ 400.180864] anon_vma_clone+0xde/0x470 [ 400.180878] anon_vma_fork+0x87/0x4d0 [ 400.180892] copy_process.part.0+0x45e2/0x6a00 [ 400.180919] ? __cleanup_sighand+0x50/0x50 [ 400.218081] ? lock_downgrade+0x740/0x740 [ 400.222226] _do_fork+0x19e/0xce0 [ 400.225676] ? fork_idle+0x280/0x280 [ 400.229374] ? fput+0xd4/0x150 [ 400.232551] ? SyS_write+0x15e/0x230 [ 400.236252] SyS_clone+0x37/0x50 [ 400.239601] ? sys_vfork+0x30/0x30 [ 400.243129] do_syscall_64+0x1e8/0x640 [ 400.247012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.251845] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 400.257017] RIP: 0033:0x459a59 [ 400.260191] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 400.267880] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 400.275150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.282431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.289693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 09:15:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 400.296962] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysfs$2(0x2, 0x8, &(0x7f0000000040)=""/114) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x45e6c5cafbb3d9b6, 0x0) 09:15:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:04 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:04 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 400.578005] nla_parse: 4 callbacks suppressed [ 400.578011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.595845] ISOFS: Unable to identify CD-ROM format. [ 400.657483] ISOFS: Unable to identify CD-ROM format. 09:15:04 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = getgid() fchown(r0, r3, r4) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x5dc7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:04 executing program 0 (fault-call:8 fault-nth:38): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:04 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 400.932215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 401.006294] FAULT_INJECTION: forcing a failure. [ 401.006294] name failslab, interval 1, probability 0, space 0, times 0 [ 401.048602] CPU: 0 PID: 20307 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 401.055664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.065032] Call Trace: [ 401.065052] dump_stack+0x138/0x197 [ 401.065070] should_fail.cold+0x10f/0x159 [ 401.065087] should_failslab+0xdb/0x130 [ 401.065101] kmem_cache_alloc+0x2d7/0x780 [ 401.065109] ? anon_vma_clone+0x310/0x470 [ 401.065124] anon_vma_fork+0xe9/0x4d0 [ 401.065138] copy_process.part.0+0x45e2/0x6a00 [ 401.065165] ? __cleanup_sighand+0x50/0x50 [ 401.100303] ? lock_downgrade+0x740/0x740 [ 401.104543] _do_fork+0x19e/0xce0 [ 401.107984] ? fork_idle+0x280/0x280 [ 401.111684] ? fput+0xd4/0x150 [ 401.114859] ? SyS_write+0x15e/0x230 [ 401.118556] SyS_clone+0x37/0x50 [ 401.121902] ? sys_vfork+0x30/0x30 [ 401.125429] do_syscall_64+0x1e8/0x640 [ 401.129460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.134305] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 401.139481] RIP: 0033:0x459a59 [ 401.142670] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 401.150359] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 401.157629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.164879] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 401.172130] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 401.179382] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:05 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:05 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x5eb857) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) r21 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r21, 0x6, 0x2a, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r21, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r21, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r21, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r21, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r21, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r26}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r26, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r26, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r21, 0x8933, &(0x7f0000000280)={'team0\x00', r26}) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r33}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r33, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r33, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r39}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r36, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r39, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r35, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r39, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001c80)={@dev, 0x0}, &(0x7f0000001cc0)=0x14) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) r43 = socket$netlink(0x10, 0x3, 0x0) r44 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r44, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r44, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r43, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r45}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r45, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r41, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r45, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r46 = socket$nl_route(0x10, 0x3, 0x0) r47 = socket$nl_route(0x10, 0x3, 0x0) r48 = socket$netlink(0x10, 0x3, 0x0) r49 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r49, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r49, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r48, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r50}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r47, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e40)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r50, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r46, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r50, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000021c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x282}, 0xc, &(0x7f0000002180)={&(0x7f0000001d00)={0x458, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x238, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r34}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r39}, {0x1b0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r40}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x27bf5e18}}, {0x8, 0x6, r45}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r50}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x10}, 0x40) r51 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r51, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r52 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r52, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$sock(r51, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r52, &(0x7f0000000c00), 0x4000000000001e6, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000040)={0x5, 0x0, 0x4}) 09:15:05 executing program 0 (fault-call:8 fault-nth:39): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 401.298583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.307750] audit: type=1400 audit(1570785305.433:205): avc: denied { name_bind } for pid=20316 comm="syz-executor.1" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 09:15:05 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 401.433550] audit: type=1400 audit(1570785305.433:206): avc: denied { node_bind } for pid=20316 comm="syz-executor.1" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 401.495714] FAULT_INJECTION: forcing a failure. [ 401.495714] name failslab, interval 1, probability 0, space 0, times 0 [ 401.544077] CPU: 0 PID: 20327 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 401.551134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.551140] Call Trace: [ 401.551158] dump_stack+0x138/0x197 [ 401.551176] should_fail.cold+0x10f/0x159 [ 401.551192] should_failslab+0xdb/0x130 [ 401.551202] kmem_cache_alloc+0x2d7/0x780 [ 401.551212] ? anon_vma_clone+0x310/0x470 [ 401.551225] anon_vma_fork+0x1ce/0x4d0 [ 401.587073] copy_process.part.0+0x45e2/0x6a00 [ 401.591662] ? __cleanup_sighand+0x50/0x50 [ 401.595889] ? lock_downgrade+0x740/0x740 [ 401.600033] _do_fork+0x19e/0xce0 [ 401.603476] ? fork_idle+0x280/0x280 [ 401.607177] ? fput+0xd4/0x150 [ 401.610353] ? SyS_write+0x15e/0x230 [ 401.614051] SyS_clone+0x37/0x50 [ 401.617398] ? sys_vfork+0x30/0x30 [ 401.620924] do_syscall_64+0x1e8/0x640 [ 401.624793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.629624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 401.634796] RIP: 0033:0x459a59 [ 401.637988] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 401.645679] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 401.652931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.660182] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 401.667439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 401.674689] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 401.695487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8a0000003205ffd80400000000000000337a873f2138f8c83a4ff180afdbea8dc4c22b1563499b161b8bde93626cf8f8afcc67235990e85869282fde70940b47bfcc00"/76]) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r4) r5 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r6 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) epoll_pwait(r9, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r15, r16, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r17, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r20 = dup3(r18, r19, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r26 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r25, r26, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r2, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r26, @ANYRES64=r9, @ANYRESHEX, @ANYRESDEC=r10, @ANYRESOCT=r3, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r11], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r16, @ANYRESOCT=r24, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES64=r12, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r17], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r2, @ANYRES32=r22, @ANYRES32=r20, @ANYRES64], @ANYRESHEX=r13, @ANYRESHEX=r14, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r6, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r2], 0x0) getpeername$ax25(r3, &(0x7f00000000c0)={{0x3, @default}, [@netrom, @null, @default, @default, @default, @null, @remote, @null]}, &(0x7f0000000140)=0x48) 09:15:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:05 executing program 0 (fault-call:8 fault-nth:40): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@map_off='map=off'}], [{@dont_measure='dont_measure'}]}) [ 401.990768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.020722] FAULT_INJECTION: forcing a failure. [ 402.020722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.032987] CPU: 1 PID: 20363 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 402.040016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.049378] Call Trace: [ 402.051961] dump_stack+0x138/0x197 [ 402.055677] should_fail.cold+0x10f/0x159 [ 402.059822] ? __might_sleep+0x93/0xb0 [ 402.063698] __alloc_pages_nodemask+0x1d6/0x7a0 [ 402.068351] ? save_stack+0x45/0xd0 [ 402.071958] ? kasan_kmalloc+0xce/0xf0 [ 402.075826] ? kasan_slab_alloc+0xf/0x20 [ 402.079869] ? __alloc_pages_slowpath+0x2930/0x2930 [ 402.084896] alloc_pages_current+0xec/0x1e0 [ 402.089216] pte_alloc_one+0x1a/0x100 [ 402.093007] __pte_alloc+0x2a/0x2d0 [ 402.096703] copy_page_range+0x11ba/0x1bd0 [ 402.101184] ? anon_vma_fork+0x358/0x4d0 [ 402.105233] ? vma_compute_subtree_gap+0x190/0x1f0 [ 402.110254] ? __pmd_alloc+0x410/0x410 [ 402.114129] copy_process.part.0+0x4764/0x6a00 [ 402.118732] ? __cleanup_sighand+0x50/0x50 [ 402.122960] ? lock_downgrade+0x740/0x740 [ 402.128058] _do_fork+0x19e/0xce0 [ 402.131505] ? fork_idle+0x280/0x280 [ 402.135220] ? fput+0xd4/0x150 [ 402.138400] ? SyS_write+0x15e/0x230 [ 402.142107] SyS_clone+0x37/0x50 [ 402.145459] ? sys_vfork+0x30/0x30 [ 402.148982] do_syscall_64+0x1e8/0x640 [ 402.152860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.157692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.162862] RIP: 0033:0x459a59 [ 402.166047] RSP: 002b:00007f8a9a164c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 402.173738] RAX: ffffffffffffffda RBX: 00007f8a9a164c90 RCX: 0000000000459a59 [ 402.180989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.188326] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 402.195579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1656d4 [ 402.202830] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:06 executing program 0 (fault-call:8 fault-nth:41): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 402.266732] audit: type=1400 audit(1570785306.393:207): avc: denied { name_connect } for pid=20316 comm="syz-executor.1" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 402.353190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20341 comm=syz-executor.1 [ 402.420699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20321 comm=syz-executor.1 [ 402.452409] FAULT_INJECTION: forcing a failure. [ 402.452409] name failslab, interval 1, probability 0, space 0, times 0 [ 402.477697] CPU: 1 PID: 20376 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 402.484751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.494122] Call Trace: [ 402.496726] dump_stack+0x138/0x197 [ 402.500381] should_fail.cold+0x10f/0x159 [ 402.504542] should_failslab+0xdb/0x130 [ 402.508520] kmem_cache_alloc+0x2d7/0x780 [ 402.512670] ptlock_alloc+0x20/0x70 [ 402.516296] pte_alloc_one+0x60/0x100 [ 402.520097] __pte_alloc+0x2a/0x2d0 [ 402.520111] copy_page_range+0x11ba/0x1bd0 [ 402.520124] ? anon_vma_fork+0x358/0x4d0 [ 402.520139] ? vma_compute_subtree_gap+0x190/0x1f0 [ 402.520155] ? __pmd_alloc+0x410/0x410 [ 402.520173] copy_process.part.0+0x4764/0x6a00 [ 402.520203] ? __cleanup_sighand+0x50/0x50 [ 402.528050] ? lock_downgrade+0x740/0x740 [ 402.528072] _do_fork+0x19e/0xce0 [ 402.537118] ? fork_idle+0x280/0x280 [ 402.537134] ? fput+0xd4/0x150 [ 402.537146] ? SyS_write+0x15e/0x230 [ 402.545583] SyS_clone+0x37/0x50 [ 402.553920] ? sys_vfork+0x30/0x30 [ 402.553933] do_syscall_64+0x1e8/0x640 [ 402.553942] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.553959] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.553968] RIP: 0033:0x459a59 [ 402.553973] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 402.553983] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 402.553988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.553994] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 402.553999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 402.554004] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9>60\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2004, &(0x7f0000000040)={[{@map_normal='map=normal'}]}) 09:15:06 executing program 0 (fault-call:8 fault-nth:42): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:06 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 402.690346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20321 comm=syz-executor.1 09:15:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 402.799678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.800571] FAULT_INJECTION: forcing a failure. [ 402.800571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.880756] CPU: 0 PID: 20395 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 402.887803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.887808] Call Trace: [ 402.887827] dump_stack+0x138/0x197 [ 402.887846] should_fail.cold+0x10f/0x159 [ 402.887857] ? __might_sleep+0x93/0xb0 [ 402.887871] __alloc_pages_nodemask+0x1d6/0x7a0 [ 402.907557] ? __alloc_pages_slowpath+0x2930/0x2930 [ 402.907581] alloc_pages_current+0xec/0x1e0 [ 402.907595] pte_alloc_one+0x1a/0x100 [ 402.907607] __pte_alloc+0x2a/0x2d0 [ 402.932859] copy_page_range+0x11ba/0x1bd0 [ 402.937113] ? __pmd_alloc+0x410/0x410 [ 402.941005] copy_process.part.0+0x4764/0x6a00 [ 402.945592] ? __cleanup_sighand+0x50/0x50 [ 402.949810] ? lock_downgrade+0x740/0x740 [ 402.953946] _do_fork+0x19e/0xce0 [ 402.957387] ? fork_idle+0x280/0x280 [ 402.961085] ? fput+0xd4/0x150 [ 402.964259] ? SyS_write+0x15e/0x230 [ 402.967954] SyS_clone+0x37/0x50 [ 402.971300] ? sys_vfork+0x30/0x30 [ 402.974823] do_syscall_64+0x1e8/0x640 [ 402.978689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.983516] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 402.988683] RIP: 0033:0x459a59 [ 402.991855] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 402.999542] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 403.006793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.014045] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 403.021296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 09:15:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 403.028557] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x38f4168b7592eaea, 0xed13f8ac3df0acdb, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000480), 0xfffffffffffffdce, 0x5c8, 0x0, 0x150) syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x950, 0x101000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="daab8bfd9f3a10469b5ea3bb64c8b5a40dd3dcc1acc87bf00ec57e8eb976a91ae3928cf2f181a7d32186e139dc8ebf9e195cc5078a34458fd7aad77cc24a160bb895cf3b3f25f61910a16656369793e29d13a26d6d8a0d9ed73a4e7727af774b141a2b334de6f05518a95d4381148a5426d58e0dff3aa822b6ebfa51ec6554419995f3cc5b43c023ca08377c7a066ba932aefd7646927f1891103595c7d11218a9c018d97e4b8c15bebeee6489bb31d3919157d5ffb48624ec724b0fb252c769d086d749d808116e98264631ca4b40f116c703e5a6b4d46b898abaf2380d749a543d313b6f30bb0dd9158ecf2f7e90b885413ab60960451a4816d4d319053d9a57840e24ab60dea19fc8101c00000000227a", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) setsockopt$RDS_CONG_MONITOR(r19, 0x114, 0x6, &(0x7f0000000200), 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x401, 0x9, 0x5, 0x9, 0x40, 0x40, 0x100000001, 0x3, 0x10001, 0x80000000, 0x6, 0x0, 0x5, 0x1, 0x401, 0x1ff], 0x5004, 0xa6c8bbd75ec12f83}) 09:15:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:07 executing program 0 (fault-call:8 fault-nth:43): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 403.242922] ISOFS: Unable to identify CD-ROM format. [ 403.290669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 403.386019] FAULT_INJECTION: forcing a failure. [ 403.386019] name failslab, interval 1, probability 0, space 0, times 0 [ 403.416462] CPU: 0 PID: 20434 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 403.423867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.433232] Call Trace: [ 403.435824] dump_stack+0x138/0x197 [ 403.439454] should_fail.cold+0x10f/0x159 [ 403.443609] should_failslab+0xdb/0x130 [ 403.447581] kmem_cache_alloc+0x2d7/0x780 [ 403.451730] ptlock_alloc+0x20/0x70 [ 403.455350] pte_alloc_one+0x60/0x100 [ 403.459146] __pte_alloc+0x2a/0x2d0 [ 403.462771] copy_page_range+0x11ba/0x1bd0 [ 403.467021] ? __pmd_alloc+0x410/0x410 [ 403.470907] copy_process.part.0+0x4764/0x6a00 [ 403.475508] ? __cleanup_sighand+0x50/0x50 [ 403.479739] ? lock_downgrade+0x740/0x740 [ 403.483900] _do_fork+0x19e/0xce0 [ 403.487354] ? fork_idle+0x280/0x280 [ 403.491067] ? fput+0xd4/0x150 [ 403.494256] ? SyS_write+0x15e/0x230 [ 403.497970] SyS_clone+0x37/0x50 [ 403.501329] ? sys_vfork+0x30/0x30 [ 403.504886] do_syscall_64+0x1e8/0x640 [ 403.508782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.513633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 403.518817] RIP: 0033:0x459a59 [ 403.522000] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 403.529702] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:15:07 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x14d0cdc80de04cc4, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x9, 0x0, [0x2, 0x353, 0x3, 0x80000001, 0x10000, 0x0, 0x4, 0x8, 0x7, 0x1, 0x800, 0x14000, 0x5, 0x13c6, 0x6, 0x4]}, {0x20, 0x0, [0x4, 0x80000001, 0x9, 0x10001, 0x2, 0xffffffe0, 0xb5, 0x0, 0x6, 0x4, 0x7ff, 0x81, 0xffff, 0x7, 0x49e80, 0x7]}, {0x10, 0x0, [0x6315e01d, 0xff, 0x3, 0x2, 0x9435, 0x8b3, 0x2, 0x4, 0x7, 0x5, 0xff, 0x1d, 0xe, 0xffffffff, 0x0, 0x11ca]}, {0x2, 0x0, [0x3, 0x5, 0x1, 0x3, 0x6, 0x3, 0x2f8, 0x3, 0x9, 0x1, 0x4, 0x1, 0x3f, 0xffff0000, 0x4, 0x6]}, {0x0, 0x0, [0x80000001, 0x1, 0x4, 0x3, 0x49, 0x4, 0x0, 0xff, 0x5, 0x1, 0x7, 0x7ff, 0x1ff, 0x6, 0x8]}, {0x10, 0x0, [0x4, 0x200, 0x27, 0x3, 0xe79b, 0x8d, 0x0, 0x3, 0x0, 0x38cc, 0x0, 0x5, 0x9, 0x8e57, 0x2, 0xfffffffa]}, {0x5, 0x0, [0x9, 0x6, 0x3, 0x1, 0x4, 0x8, 0x8000, 0xff, 0x3, 0x7fff, 0x3, 0x71ad, 0x9, 0x5, 0x1ff]}, {0x4, 0x0, [0x3, 0x3f, 0xff, 0x7, 0x2, 0x2, 0xffffffff, 0x100, 0x0, 0xe0000000, 0x48a, 0xf4f, 0x8000, 0x49e, 0x101, 0x400]}, {0x20, 0x0, [0x3f, 0x0, 0x200, 0x200, 0xe8, 0xb50, 0x0, 0x200, 0x3a48, 0x1000, 0x439d, 0x5, 0x7ff, 0x1, 0x3, 0x3ff]}], r1, 0x1, 0x1, 0x288}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1001, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:07 executing program 1: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x10, 0x2, 0xff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x100) syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8) r5 = open(&(0x7f0000000040)='./bus\x00', 0x42, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r5, 0x7fff) sendfile(r2, r5, 0x0, 0x8040fffffffd) [ 403.536966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.544240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 403.551504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 403.558766] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:07 executing program 0 (fault-call:8 fault-nth:44): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:07 executing program 1: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket(0x10, 0x2, 0xff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x100) syz_open_procfs(0x0, &(0x7f0000000180)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000440)=@fragment, 0x8) r5 = open(&(0x7f0000000040)='./bus\x00', 0x42, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r5, 0x7fff) sendfile(r2, r5, 0x0, 0x8040fffffffd) [ 403.721132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 403.864920] ISOFS: Unable to identify CD-ROM format. [ 403.937217] FAULT_INJECTION: forcing a failure. [ 403.937217] name failslab, interval 1, probability 0, space 0, times 0 [ 403.975854] CPU: 0 PID: 20467 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 403.982907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.992265] Call Trace: [ 403.994868] dump_stack+0x138/0x197 [ 403.998493] should_fail.cold+0x10f/0x159 [ 404.002638] should_failslab+0xdb/0x130 [ 404.006609] kmem_cache_alloc+0x2d7/0x780 [ 404.010767] copy_process.part.0+0x444f/0x6a00 [ 404.015369] ? __cleanup_sighand+0x50/0x50 [ 404.019599] ? lock_downgrade+0x740/0x740 [ 404.023753] _do_fork+0x19e/0xce0 [ 404.027208] ? fork_idle+0x280/0x280 [ 404.030919] ? fput+0xd4/0x150 [ 404.034103] ? SyS_write+0x15e/0x230 [ 404.037817] SyS_clone+0x37/0x50 [ 404.041176] ? sys_vfork+0x30/0x30 [ 404.044713] do_syscall_64+0x1e8/0x640 [ 404.048593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.053437] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 404.058623] RIP: 0033:0x459a59 [ 404.061803] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 404.069507] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 404.076780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.084044] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 404.091304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 404.098566] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:08 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:08 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffe00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/.\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004b9c00360064000608679078ac1414bbe023ad029d1877d5d436bbc89b20414f9df89035ed78c6ab4200000200070f000000038b00000000e00000018907097f00002100b509"], 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket(0x0, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x1, 0x1, [0x0, 0x9, 0x9, 0x4, 0x3, 0x338, 0x951, 0xb7]}) write(r1, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020090000001029ffeb04000100", 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x0, @remote, 0x400}}}, 0x90) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000240)={0x61a2, "17d8791a88e065411b1e0b291ecd47130000000000009f9c00", 0x1, 0x1}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) readv(r4, &(0x7f0000000740)=[{0x0}], 0x1) sendto$inet(r4, &(0x7f0000000300)="0b268a927f1f6588b967481241ba786003e5a9f0c618ded89748958beaf4b4834ff922b3f1e0b02bd6a7e7df6a299af17aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba736633a61982f9f049f20ae11f4a574f0916a81ef583e1a647a5f4c21560d0430b10e7583248605872f7e9", 0xff48, 0x11, 0x0, 0xfffffca4) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000380)=""/123, &(0x7f0000000400)=0x7b) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) socketpair(0xa, 0xa, 0x80, &(0x7f0000000100)) r5 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x12) 09:15:08 executing program 0 (fault-call:8 fault-nth:45): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 404.138946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.262637] FAULT_INJECTION: forcing a failure. [ 404.262637] name failslab, interval 1, probability 0, space 0, times 0 [ 404.334985] CPU: 0 PID: 20481 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 404.342074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.351519] Call Trace: [ 404.354118] dump_stack+0x138/0x197 [ 404.357752] should_fail.cold+0x10f/0x159 [ 404.361905] should_failslab+0xdb/0x130 [ 404.365901] kmem_cache_alloc+0x47/0x780 [ 404.369961] ? __lock_is_held+0xb6/0x140 [ 404.374015] ? check_preemption_disabled+0x3c/0x250 [ 404.379031] anon_vma_clone+0xde/0x470 [ 404.382922] anon_vma_fork+0x87/0x4d0 [ 404.386723] copy_process.part.0+0x45e2/0x6a00 [ 404.391330] ? __cleanup_sighand+0x50/0x50 [ 404.395567] ? lock_downgrade+0x740/0x740 [ 404.399713] _do_fork+0x19e/0xce0 [ 404.403160] ? fork_idle+0x280/0x280 [ 404.406881] ? fput+0xd4/0x150 [ 404.410075] ? SyS_write+0x15e/0x230 [ 404.413786] SyS_clone+0x37/0x50 [ 404.417143] ? sys_vfork+0x30/0x30 [ 404.420678] do_syscall_64+0x1e8/0x640 [ 404.424554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.429395] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 404.434579] RIP: 0033:0x459a59 [ 404.437760] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 404.445463] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 404.452725] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.459987] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 404.467247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 404.474510] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 404.528313] ISOFS: Unable to identify CD-ROM format. 09:15:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x8, 0x0, 0x0, 0x4058, &(0x7f00000000c0)={[{@map_off='map=off'}], [{@fsname={'fsname', 0x3d, 'map=off'}}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise_type='appraise_type=imasig'}, {@uid_lt={'uid<', r1}}]}) 09:15:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:08 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 404.640989] IPVS: length: 123 != 24 09:15:08 executing program 0 (fault-call:8 fault-nth:46): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 404.720683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r16, 0xc0086423, &(0x7f0000000040)={r26, 0x2}) [ 404.868420] FAULT_INJECTION: forcing a failure. [ 404.868420] name failslab, interval 1, probability 0, space 0, times 0 [ 404.917330] CPU: 1 PID: 20510 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 404.924381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.933741] Call Trace: [ 404.936338] dump_stack+0x138/0x197 [ 404.939981] should_fail.cold+0x10f/0x159 [ 404.944137] should_failslab+0xdb/0x130 [ 404.944152] kmem_cache_alloc+0x47/0x780 [ 404.944165] ? anon_vma_chain_link+0x142/0x1a0 [ 404.944178] anon_vma_clone+0xde/0x470 [ 404.960662] anon_vma_fork+0x87/0x4d0 [ 404.960685] copy_process.part.0+0x45e2/0x6a00 [ 404.960719] ? __cleanup_sighand+0x50/0x50 [ 404.960730] ? lock_downgrade+0x740/0x740 [ 404.960746] _do_fork+0x19e/0xce0 [ 404.969114] ? fork_idle+0x280/0x280 [ 404.969132] ? fput+0xd4/0x150 [ 404.969143] ? SyS_write+0x15e/0x230 [ 404.969156] SyS_clone+0x37/0x50 [ 404.991551] ? sys_vfork+0x30/0x30 [ 404.991568] do_syscall_64+0x1e8/0x640 [ 404.991577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.991593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 404.991600] RIP: 0033:0x459a59 09:15:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 404.991605] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 404.991616] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 404.991620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.991628] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 405.015552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 405.015559] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:09 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:09 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 405.143802] ISOFS: Unable to identify CD-ROM format. 09:15:09 executing program 0 (fault-call:8 fault-nth:47): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 405.387506] ISOFS: Unable to identify CD-ROM format. 09:15:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08ba5c75f4c540467016bc30ad433700000000000000003d3f84243fa1fefd0d905786bbc25f"]) [ 405.557026] FAULT_INJECTION: forcing a failure. [ 405.557026] name failslab, interval 1, probability 0, space 0, times 0 [ 405.597630] CPU: 1 PID: 20551 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 405.600880] nla_parse: 1 callbacks suppressed [ 405.600885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.604686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.604691] Call Trace: [ 405.604710] dump_stack+0x138/0x197 [ 405.604730] should_fail.cold+0x10f/0x159 [ 405.604748] ? anon_vma_clone+0xde/0x470 [ 405.627076] should_failslab+0xdb/0x130 [ 405.627090] kmem_cache_alloc+0x47/0x780 [ 405.627104] ? anon_vma_chain_link+0x142/0x1a0 [ 405.627115] anon_vma_clone+0xde/0x470 [ 405.637454] anon_vma_fork+0x87/0x4d0 [ 405.637472] copy_process.part.0+0x45e2/0x6a00 [ 405.637500] ? __cleanup_sighand+0x50/0x50 [ 405.649540] ? lock_downgrade+0x740/0x740 [ 405.649560] _do_fork+0x19e/0xce0 [ 405.649575] ? fork_idle+0x280/0x280 [ 405.649590] ? fput+0xd4/0x150 [ 405.658030] ? SyS_write+0x15e/0x230 [ 405.658047] SyS_clone+0x37/0x50 [ 405.658057] ? sys_vfork+0x30/0x30 [ 405.658071] do_syscall_64+0x1e8/0x640 [ 405.658080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.704272] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 405.709451] RIP: 0033:0x459a59 [ 405.712624] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 405.720313] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 405.727562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.734811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:15:09 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 405.742068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 405.749315] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:09 executing program 0 (fault-call:8 fault-nth:48): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:09 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) [ 406.036204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 406.049273] FAULT_INJECTION: forcing a failure. [ 406.049273] name failslab, interval 1, probability 0, space 0, times 0 [ 406.073071] CPU: 1 PID: 20569 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 406.080127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.089483] Call Trace: [ 406.092085] dump_stack+0x138/0x197 [ 406.095734] should_fail.cold+0x10f/0x159 [ 406.099891] should_failslab+0xdb/0x130 [ 406.103875] kmem_cache_alloc+0x2d7/0x780 [ 406.108027] ? anon_vma_clone+0x310/0x470 [ 406.112196] anon_vma_fork+0xe9/0x4d0 [ 406.112215] copy_process.part.0+0x45e2/0x6a00 [ 406.112244] ? __cleanup_sighand+0x50/0x50 [ 406.124941] ? lock_downgrade+0x740/0x740 [ 406.129116] _do_fork+0x19e/0xce0 [ 406.132583] ? fork_idle+0x280/0x280 [ 406.136304] ? fput+0xd4/0x150 [ 406.139495] ? SyS_write+0x15e/0x230 [ 406.143201] SyS_clone+0x37/0x50 [ 406.146552] ? sys_vfork+0x30/0x30 [ 406.150105] do_syscall_64+0x1e8/0x640 [ 406.153980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.158812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.163982] RIP: 0033:0x459a59 [ 406.167156] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 406.174848] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:15:10 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 406.182100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.189350] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 406.196610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 406.203862] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$iso9660(&(0x7f0000000700)='\x00\x00\x00\x00\x00\x00G+', &(0x7f0000000740)='./bus\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB='session=0x0000000000000031,fowner<', @ANYRESDEC=0xee01, @ANYBLOB]) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r5, 0x50800) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r7) r8 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r9 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r8, 0x4c00, r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)) epoll_pwait(r12, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r14, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r15, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r16, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r16, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r17, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r17, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r18, r19, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r20, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r23 = dup3(r21, r22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r26, r27, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r28, r29, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r5, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r29, @ANYRES64=r12, @ANYRESHEX, @ANYRESDEC=r13, @ANYRESOCT=r6, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r14], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r19, @ANYRESOCT=r27, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r7, @ANYRES32=0x0, @ANYRES64=r15, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES64=r20], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r5, @ANYRES32=r25, @ANYRES32=r23, @ANYRES64], @ANYRESHEX=r16, @ANYRESHEX=r17, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r9, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r5], 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x7) 09:15:10 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:10 executing program 0 (fault-call:8 fault-nth:49): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x8) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000100)={{0x6, 0x1}, 0x9, 0x3, 0xe8, 0x3, &(0x7f0000000000)="590a81bbfa7133b59ecf80ea9b26fd29c4796cbdc1b0344d26f0c192aaa57c9a417b7206552e29f82f7a7e6c1e355d99eee1b9c5ba9d835c3c01be4b5d2d3fb7879752af00950fc3cd6349ba0e5111946d9dbc78974b6132d07d69ed0a6a26e1369335282d69829e4eb3d3d808b02ae3a4258ed70002b535cf3a1621b078df0159e1ec356d0577f4ac711046dbb1276e8beab684f9bd08435a0a8c271808cffd1a787bc6a859e13050e340ede56b9eb819b1baca9578f61902349ec5bfc035d2d351471eeb0ee74844b5985de68d068705ff34a308e5dc058417eb02df8bb15b709563e62cadb72d"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61703d6f52662c0063e663da904b1d11c778bc630548b01c91a00028a94f8235df9e4b6f5209a1a36cf2f89aae60ca1905d3492a9356fb84740f8909653abdeb2a12019ad567f6fd3d30d10efa6712e272d141bece5f21cf7f5ef1b64b073baa1f44dc15199303dd1b431eeb6ec00000c54aaacf0aac668938d082607fb8"]) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 09:15:10 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 406.466441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 406.582652] FAULT_INJECTION: forcing a failure. [ 406.582652] name failslab, interval 1, probability 0, space 0, times 0 [ 406.594493] CPU: 0 PID: 20601 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 406.601533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.601538] Call Trace: [ 406.601556] dump_stack+0x138/0x197 [ 406.601573] should_fail.cold+0x10f/0x159 [ 406.601589] should_failslab+0xdb/0x130 [ 406.601603] kmem_cache_alloc+0x2d7/0x780 [ 406.601614] ? anon_vma_clone+0x310/0x470 [ 406.601629] anon_vma_fork+0x1ce/0x4d0 [ 406.601644] copy_process.part.0+0x45e2/0x6a00 [ 406.601672] ? __cleanup_sighand+0x50/0x50 [ 406.601681] ? lock_downgrade+0x740/0x740 [ 406.601695] _do_fork+0x19e/0xce0 [ 406.601708] ? fork_idle+0x280/0x280 [ 406.601721] ? fput+0xd4/0x150 [ 406.601730] ? SyS_write+0x15e/0x230 [ 406.601743] SyS_clone+0x37/0x50 [ 406.633670] ? sys_vfork+0x30/0x30 [ 406.633685] do_syscall_64+0x1e8/0x640 [ 406.633696] ? trace_hardirqs_off_thunk+0x1a/0x1c 09:15:10 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:10 executing program 0 (fault-call:8 fault-nth:50): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 406.664537] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.671401] RIP: 0033:0x459a59 [ 406.671406] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 406.671415] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 406.671419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.671424] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 406.671428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 406.671433] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000001c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded89722b3f1e0b02bd67aa0c7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba00000000d015595887f58601ade346fac56a7007d46650bbd09aad90c2422ebf85f774024cb0f9c50e913eacd222e801b62489407fbbf0e4222a1a765b9e60445a0310b09be37d9d745fb7d4920d3e0d132c29322f47ff", 0x2, 0x20048840, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="80"]) [ 406.899757] FAULT_INJECTION: forcing a failure. [ 406.899757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.901925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 406.949360] CPU: 1 PID: 20620 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 406.956435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.956441] Call Trace: [ 406.956458] dump_stack+0x138/0x197 [ 406.956474] should_fail.cold+0x10f/0x159 [ 406.956485] ? __might_sleep+0x93/0xb0 [ 406.956497] __alloc_pages_nodemask+0x1d6/0x7a0 [ 406.956506] ? save_stack+0x45/0xd0 [ 406.956513] ? kasan_kmalloc+0xce/0xf0 [ 406.956521] ? kasan_slab_alloc+0xf/0x20 09:15:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:11 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 406.956532] ? __alloc_pages_slowpath+0x2930/0x2930 [ 406.956551] alloc_pages_current+0xec/0x1e0 [ 406.956562] pte_alloc_one+0x1a/0x100 [ 406.956570] __pte_alloc+0x2a/0x2d0 [ 406.956581] copy_page_range+0x11ba/0x1bd0 [ 406.956593] ? anon_vma_fork+0x358/0x4d0 [ 406.956616] ? __pmd_alloc+0x410/0x410 [ 406.972167] copy_process.part.0+0x4764/0x6a00 [ 406.972202] ? __cleanup_sighand+0x50/0x50 [ 406.972213] ? lock_downgrade+0x740/0x740 [ 406.972228] _do_fork+0x19e/0xce0 [ 406.980232] ? fork_idle+0x280/0x280 09:15:11 executing program 0 (fault-call:8 fault-nth:51): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 406.980249] ? fput+0xd4/0x150 [ 406.980258] ? SyS_write+0x15e/0x230 [ 406.980271] SyS_clone+0x37/0x50 [ 406.980279] ? sys_vfork+0x30/0x30 [ 406.980293] do_syscall_64+0x1e8/0x640 [ 406.980302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.980319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 406.980328] RIP: 0033:0x459a59 [ 406.980333] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 406.992460] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 406.992466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.992472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 406.992478] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 406.992484] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:11 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:11 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000080)={[0xd000, 0x1000, 0x0, 0x1000], 0x5, 0x44, 0x2bd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x620040, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x2, 0x7, 0x0, 0x6}, 0x14) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) 09:15:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 407.309016] FAULT_INJECTION: forcing a failure. [ 407.309016] name failslab, interval 1, probability 0, space 0, times 0 09:15:11 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 407.392216] ISOFS: Unable to identify CD-ROM format. [ 407.414144] CPU: 1 PID: 20650 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 407.421202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.430559] Call Trace: [ 407.433138] dump_stack+0x138/0x197 [ 407.437101] should_fail.cold+0x10f/0x159 [ 407.441237] should_failslab+0xdb/0x130 [ 407.445198] kmem_cache_alloc+0x2d7/0x780 [ 407.449333] ptlock_alloc+0x20/0x70 [ 407.452942] pte_alloc_one+0x60/0x100 [ 407.456721] __pte_alloc+0x2a/0x2d0 [ 407.460332] copy_page_range+0x11ba/0x1bd0 [ 407.464552] ? anon_vma_fork+0x358/0x4d0 [ 407.468605] ? __pmd_alloc+0x410/0x410 [ 407.472480] copy_process.part.0+0x4764/0x6a00 [ 407.477061] ? __cleanup_sighand+0x50/0x50 [ 407.481276] ? lock_downgrade+0x740/0x740 [ 407.485409] _do_fork+0x19e/0xce0 [ 407.488846] ? fork_idle+0x280/0x280 [ 407.492547] ? fput+0xd4/0x150 [ 407.495722] ? SyS_write+0x15e/0x230 [ 407.499428] SyS_clone+0x37/0x50 [ 407.502782] ? sys_vfork+0x30/0x30 [ 407.506307] do_syscall_64+0x1e8/0x640 [ 407.510176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.515012] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 407.520186] RIP: 0033:0x459a59 [ 407.523356] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 407.531044] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 407.538294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.545545] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 407.552807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 09:15:11 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 407.560064] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 407.574030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:11 executing program 0 (fault-call:8 fault-nth:52): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 407.793438] FAULT_INJECTION: forcing a failure. [ 407.793438] name failslab, interval 1, probability 0, space 0, times 0 [ 407.805016] CPU: 0 PID: 20672 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 407.812044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.821396] Call Trace: [ 407.821415] dump_stack+0x138/0x197 [ 407.821434] should_fail.cold+0x10f/0x159 [ 407.821448] should_failslab+0xdb/0x130 [ 407.821459] kmem_cache_alloc+0x2d7/0x780 [ 407.821478] copy_process.part.0+0x444f/0x6a00 [ 407.821508] ? __cleanup_sighand+0x50/0x50 [ 407.827735] ? lock_downgrade+0x740/0x740 [ 407.827757] _do_fork+0x19e/0xce0 [ 407.827773] ? fork_idle+0x280/0x280 [ 407.827786] ? fput+0xd4/0x150 [ 407.835884] ? SyS_write+0x15e/0x230 [ 407.835901] SyS_clone+0x37/0x50 [ 407.835911] ? sys_vfork+0x30/0x30 [ 407.835925] do_syscall_64+0x1e8/0x640 [ 407.835932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.835947] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 407.844660] RIP: 0033:0x459a59 [ 407.844665] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 407.844677] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 407.844682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 407.844688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 407.844695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 407.844701] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 0 (fault-call:8 fault-nth:53): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 407.943104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 408.098225] FAULT_INJECTION: forcing a failure. [ 408.098225] name failslab, interval 1, probability 0, space 0, times 0 [ 408.113178] CPU: 1 PID: 20689 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 408.120239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.129606] Call Trace: [ 408.132202] dump_stack+0x138/0x197 [ 408.135844] should_fail.cold+0x10f/0x159 [ 408.140009] should_failslab+0xdb/0x130 [ 408.143993] kmem_cache_alloc+0x47/0x780 [ 408.148062] ? __lock_is_held+0xb6/0x140 [ 408.152125] ? check_preemption_disabled+0x3c/0x250 [ 408.157151] anon_vma_clone+0xde/0x470 [ 408.161047] anon_vma_fork+0x87/0x4d0 [ 408.164860] copy_process.part.0+0x45e2/0x6a00 [ 408.169469] ? __cleanup_sighand+0x50/0x50 [ 408.173708] ? lock_downgrade+0x740/0x740 [ 408.177873] _do_fork+0x19e/0xce0 [ 408.181342] ? fork_idle+0x280/0x280 [ 408.185425] ? fput+0xd4/0x150 [ 408.185437] ? SyS_write+0x15e/0x230 [ 408.185452] SyS_clone+0x37/0x50 [ 408.185464] ? sys_vfork+0x30/0x30 [ 408.199239] do_syscall_64+0x1e8/0x640 [ 408.203133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.207981] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 408.207991] RIP: 0033:0x459a59 [ 408.207996] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 408.224065] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 408.231347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.238622] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:15:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d4105000000002ccf007f"]) 09:15:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 408.246012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 408.253296] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:12 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 0 (fault-call:8 fault-nth:54): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 408.345580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:12 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 408.496930] FAULT_INJECTION: forcing a failure. [ 408.496930] name failslab, interval 1, probability 0, space 0, times 0 [ 408.559121] CPU: 1 PID: 20712 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 408.566181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.575568] Call Trace: [ 408.578174] dump_stack+0x138/0x197 [ 408.581817] should_fail.cold+0x10f/0x159 [ 408.586007] should_failslab+0xdb/0x130 [ 408.590003] kmem_cache_alloc+0x2d7/0x780 [ 408.594158] ? anon_vma_clone+0x310/0x470 [ 408.598341] anon_vma_fork+0xe9/0x4d0 [ 408.602151] copy_process.part.0+0x45e2/0x6a00 [ 408.606751] ? __cleanup_sighand+0x50/0x50 [ 408.610985] ? lock_downgrade+0x740/0x740 [ 408.615138] _do_fork+0x19e/0xce0 [ 408.618604] ? fork_idle+0x280/0x280 [ 408.622330] ? fput+0xd4/0x150 [ 408.625525] ? SyS_write+0x15e/0x230 [ 408.626227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.629243] SyS_clone+0x37/0x50 [ 408.629251] ? sys_vfork+0x30/0x30 [ 408.629266] do_syscall_64+0x1e8/0x640 [ 408.648521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.653495] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 408.658692] RIP: 0033:0x459a59 [ 408.661885] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 408.669656] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 408.676924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.684181] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 408.691455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 408.698718] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:12 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:12 executing program 0 (fault-call:8 fault-nth:55): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='mup=off,\x00']) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 09:15:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r2, 0x50800) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:13 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 408.958058] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.959419] FAULT_INJECTION: forcing a failure. [ 408.959419] name failslab, interval 1, probability 0, space 0, times 0 [ 408.983097] CPU: 0 PID: 20740 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 408.990156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.999531] Call Trace: [ 409.002110] dump_stack+0x138/0x197 [ 409.005724] should_fail.cold+0x10f/0x159 [ 409.009857] should_failslab+0xdb/0x130 [ 409.013815] kmem_cache_alloc+0x2d7/0x780 [ 409.017945] ? anon_vma_clone+0x310/0x470 [ 409.022077] anon_vma_fork+0x1ce/0x4d0 [ 409.025960] copy_process.part.0+0x45e2/0x6a00 [ 409.030540] ? __cleanup_sighand+0x50/0x50 [ 409.034757] ? lock_downgrade+0x740/0x740 [ 409.038892] _do_fork+0x19e/0xce0 [ 409.042334] ? fork_idle+0x280/0x280 [ 409.046030] ? fput+0xd4/0x150 [ 409.049203] ? SyS_write+0x15e/0x230 [ 409.052900] SyS_clone+0x37/0x50 [ 409.056248] ? sys_vfork+0x30/0x30 [ 409.059775] do_syscall_64+0x1e8/0x640 [ 409.063645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.068475] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 409.073645] RIP: 0033:0x459a59 [ 409.076815] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 409.084504] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 409.091757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.099006] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:15:13 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 409.106270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 409.113534] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:13 executing program 0 (fault-call:8 fault-nth:56): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:13 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 409.323102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 409.365511] FAULT_INJECTION: forcing a failure. [ 409.365511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 409.393035] CPU: 1 PID: 20761 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 409.400085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.400090] Call Trace: [ 409.400108] dump_stack+0x138/0x197 [ 409.400126] should_fail.cold+0x10f/0x159 [ 409.400138] ? __might_sleep+0x93/0xb0 [ 409.400152] __alloc_pages_nodemask+0x1d6/0x7a0 [ 409.400163] ? save_stack+0xa9/0xd0 [ 409.400176] ? __alloc_pages_slowpath+0x2930/0x2930 [ 409.400185] ? anon_vma_fork+0x1ce/0x4d0 [ 409.400196] ? copy_process.part.0+0x45e2/0x6a00 [ 409.423771] ? _do_fork+0x19e/0xce0 [ 409.423790] ? __lock_acquire+0x5f7/0x4620 [ 409.423806] alloc_pages_current+0xec/0x1e0 [ 409.423815] ? trace_hardirqs_on+0x10/0x10 [ 409.423829] pte_alloc_one+0x1a/0x100 [ 409.423841] copy_huge_pmd+0x7d/0x8c0 [ 409.423855] ? add_mm_counter_fast.part.0+0x30/0x30 [ 409.423868] copy_page_range+0x69a/0x1bd0 [ 409.423881] ? anon_vma_fork+0x358/0x4d0 [ 409.423897] ? find_held_lock+0x35/0x130 [ 409.423912] ? vma_compute_subtree_gap+0x190/0x1f0 [ 409.492065] ? __rb_insert_augmented+0x22f/0xdf0 [ 409.496808] ? __pmd_alloc+0x410/0x410 [ 409.500697] ? __vma_link_rb+0x247/0x340 [ 409.504743] copy_process.part.0+0x4764/0x6a00 [ 409.509324] ? __cleanup_sighand+0x50/0x50 [ 409.513542] ? lock_downgrade+0x740/0x740 [ 409.517678] _do_fork+0x19e/0xce0 [ 409.521120] ? fork_idle+0x280/0x280 [ 409.524821] ? fput+0xd4/0x150 [ 409.528016] ? SyS_write+0x15e/0x230 [ 409.531725] SyS_clone+0x37/0x50 [ 409.535074] ? sys_vfork+0x30/0x30 [ 409.538597] do_syscall_64+0x1e8/0x640 [ 409.542466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.547294] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 409.552465] RIP: 0033:0x459a59 [ 409.555639] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:15:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 409.563330] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 409.570583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.577835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 409.585090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 409.592351] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:13 executing program 0 (fault-call:8 fault-nth:57): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:13 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:13 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="8e28fc9f0c61703d6fe8e14c22c59c5cb8b16d82e46bea74966ddff3cf9128b0ae95766941d492e027da971cf3"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = socket(0x0, 0x80, 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001b40)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000340)=0xfffffffffffffe0e) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f00000001c0)=0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='bpf\x00', 0x404000, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x81}}], [{@uid_eq={'uid', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffff30}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_gt={'euid>', r4}}, {@subj_role={'subj_role', 0x3d, '#.'}}, {@dont_appraise='dont_appraise'}]}) [ 409.797011] FAULT_INJECTION: forcing a failure. [ 409.797011] name failslab, interval 1, probability 0, space 0, times 0 [ 409.881654] CPU: 1 PID: 20778 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 409.888726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.898096] Call Trace: [ 409.898119] dump_stack+0x138/0x197 [ 409.898137] should_fail.cold+0x10f/0x159 [ 409.898151] should_failslab+0xdb/0x130 [ 409.898162] kmem_cache_alloc+0x2d7/0x780 [ 409.898174] ? __lock_acquire+0x5f7/0x4620 [ 409.898185] ptlock_alloc+0x20/0x70 [ 409.898195] pte_alloc_one+0x60/0x100 [ 409.898205] copy_huge_pmd+0x7d/0x8c0 [ 409.898214] ? add_mm_counter_fast.part.0+0x30/0x30 [ 409.898225] copy_page_range+0x69a/0x1bd0 [ 409.898235] ? anon_vma_fork+0x358/0x4d0 [ 409.898245] ? find_held_lock+0x35/0x130 [ 409.898257] ? vma_compute_subtree_gap+0x190/0x1f0 [ 409.898270] ? __rb_insert_augmented+0x22f/0xdf0 [ 409.908615] ? __pmd_alloc+0x410/0x410 [ 409.908626] ? __vma_link_rb+0x247/0x340 [ 409.908641] copy_process.part.0+0x4764/0x6a00 [ 409.916763] ? __cleanup_sighand+0x50/0x50 [ 409.916776] ? lock_downgrade+0x740/0x740 [ 409.928392] _do_fork+0x19e/0xce0 [ 409.928407] ? fork_idle+0x280/0x280 [ 409.937204] ? fput+0xd4/0x150 [ 409.937215] ? SyS_write+0x15e/0x230 [ 409.937228] SyS_clone+0x37/0x50 [ 409.937239] ? sys_vfork+0x30/0x30 [ 409.949483] do_syscall_64+0x1e8/0x640 [ 409.949493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.949508] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 409.959168] RIP: 0033:0x459a59 [ 409.959174] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:15:14 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:14 executing program 0 (fault-call:8 fault-nth:58): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 409.959185] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 409.959190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.959197] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 409.967129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 409.975914] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:14 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 410.208928] FAULT_INJECTION: forcing a failure. [ 410.208928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.251912] CPU: 1 PID: 20812 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 410.258969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.268320] Call Trace: [ 410.270909] dump_stack+0x138/0x197 [ 410.274532] should_fail.cold+0x10f/0x159 [ 410.278682] ? __might_sleep+0x93/0xb0 [ 410.282572] __alloc_pages_nodemask+0x1d6/0x7a0 [ 410.287230] ? __alloc_pages_slowpath+0x2930/0x2930 [ 410.292267] ? lock_downgrade+0x740/0x740 [ 410.296408] alloc_pages_current+0xec/0x1e0 [ 410.300723] pte_alloc_one+0x1a/0x100 [ 410.304521] __pte_alloc+0x2a/0x2d0 [ 410.308131] copy_page_range+0x11ba/0x1bd0 [ 410.312363] ? anon_vma_fork+0x358/0x4d0 [ 410.316410] ? vma_compute_subtree_gap+0x190/0x1f0 [ 410.321331] ? __pmd_alloc+0x410/0x410 [ 410.325223] copy_process.part.0+0x4764/0x6a00 [ 410.329802] ? __cleanup_sighand+0x50/0x50 [ 410.334019] ? lock_downgrade+0x740/0x740 [ 410.338153] _do_fork+0x19e/0xce0 [ 410.341592] ? fork_idle+0x280/0x280 [ 410.345310] ? fput+0xd4/0x150 [ 410.348484] ? SyS_write+0x15e/0x230 [ 410.352185] SyS_clone+0x37/0x50 [ 410.355531] ? sys_vfork+0x30/0x30 [ 410.359064] do_syscall_64+0x1e8/0x640 [ 410.362931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.367760] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.372940] RIP: 0033:0x459a59 [ 410.376113] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.383803] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 410.391055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 09:15:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@map_off='map=off'}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r1, 0x50800) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r5 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r10, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r13, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r14, r15, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r16, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r19 = dup3(r17, r18, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r20, r21, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r22, r23, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r24, r25, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r25, @ANYRES64=r8, @ANYRESHEX, @ANYRESDEC=r9, @ANYRESOCT=r2, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r10], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r15, @ANYRESOCT=r23, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES64=r11, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r16], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c5097f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db7efdb9e476a692e7188808dec87685", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r1, @ANYRES32=r21, @ANYRES32=r19, @ANYRES64], @ANYRESHEX=r12, @ANYRESHEX=r13, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r5, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r1], 0x0) ioctl$KVM_SIGNAL_MSI(r16, 0x4020aea5, &(0x7f0000000000)={0x4, 0x100000, 0x529f42b8, 0x20, 0x6029}) [ 410.398329] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 410.405581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 410.412918] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:14 executing program 0 (fault-call:8 fault-nth:59): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:14 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 410.589397] ISOFS: Unable to identify CD-ROM format. [ 410.645183] FAULT_INJECTION: forcing a failure. [ 410.645183] name failslab, interval 1, probability 0, space 0, times 0 [ 410.660822] CPU: 1 PID: 20835 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 410.667871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.677226] Call Trace: [ 410.679801] dump_stack+0x138/0x197 [ 410.683423] should_fail.cold+0x10f/0x159 [ 410.687563] should_failslab+0xdb/0x130 [ 410.691524] kmem_cache_alloc+0x2d7/0x780 [ 410.695662] ? lock_downgrade+0x740/0x740 [ 410.699827] ptlock_alloc+0x20/0x70 [ 410.703453] pte_alloc_one+0x60/0x100 [ 410.707240] __pte_alloc+0x2a/0x2d0 [ 410.710859] copy_page_range+0x11ba/0x1bd0 [ 410.715079] ? anon_vma_fork+0x358/0x4d0 [ 410.719126] ? vma_compute_subtree_gap+0x190/0x1f0 [ 410.724044] ? __pmd_alloc+0x410/0x410 [ 410.727916] copy_process.part.0+0x4764/0x6a00 [ 410.732505] ? __cleanup_sighand+0x50/0x50 [ 410.736721] ? lock_downgrade+0x740/0x740 [ 410.740856] _do_fork+0x19e/0xce0 [ 410.744303] ? fork_idle+0x280/0x280 [ 410.747999] ? fput+0xd4/0x150 [ 410.751180] ? SyS_write+0x15e/0x230 [ 410.754894] SyS_clone+0x37/0x50 [ 410.758240] ? sys_vfork+0x30/0x30 [ 410.761761] do_syscall_64+0x1e8/0x640 [ 410.765638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.770466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.775636] RIP: 0033:0x459a59 [ 410.778807] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.786496] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 09:15:14 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) socket$inet(0x2, 0x4000000000000001, 0x0) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:14 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:14 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:14 executing program 2: pipe(&(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) syz_open_pts(r0, 0x50800) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2a) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000011c0)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_pwait(r7, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r9, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r11, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r12, 0x1, 0x2, &(0x7f0000000180)="6315d8ef", 0x3db) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r13, r14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) r18 = dup3(r16, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r19, r20, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r21, r22, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6a304, 0x0) dup3(r23, r24, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESOCT=r24, @ANYRES64=r7, @ANYRESHEX, @ANYRESDEC=r8, @ANYRESOCT=r1, @ANYRESDEC, @ANYPTR64=&(0x7f0000000800)=ANY=[]], @ANYPTR64=&(0x7f0000000e00)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r9], @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT=r14, @ANYRESOCT=r22, @ANYRESDEC, @ANYPTR], @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="f07a293b392cf779d51fec2641f093fc16cb7a11ceb6a1da950cb290ab7db13b19ff760a9f6784ff5aa27709ff5b802119a568091f1dd8d340314cdc19fcd8bafced518c0362a80533fdfbb4b439d75c5a678d94fdca09a51944f55d540fea4033cf66357de5a2d35c31076825dab4691d2a557a2094f91fc4b30400dc902f1f5c9bd358956cb50619bdb149f7bc80b9ba259bd8245f48", @ANYRES64=r15], @ANYBLOB="b1eac52636bef902958d24a19b85166482d00afdba894cc53a6b302c530af9a0f451a37a683eaf9856e2b51aa7ad911611bd636b291eff4e2facf132cca767613925dbdbfedc6aa1b288dc80013b6ae3f470eaa64ebfe42e7f080da6ceea9031fd0390da011c8ba2334c048b85e70c71f31ec181ee41e1dfe0f62e74584fab469103f0579a187eb1d04fd55c4d3f8c50973173fe8b33d6f2e2e316d66fa6c09ec5fbb10a5983fdc9439614a0fce0db8afdb9e476a692e718", @ANYBLOB="b1e494775900182af89cc048ec7a17c7c12c23bc9c288c5a3ce1bd901eddbe6f5bb66cb2bfc751c77834e851f57bbc257f4c99954e927e811695de0117b740023fa25748505cfdc862eac1ac420edefcb3b5576a9c752d4babd97f27b5ffeb9c65e7b5c19ba51a16282471de7e08dfa2018597813f6c64f63e556df3990769cc2817cafff7e8ce5fe544644ba5c2c3aa4dc6675e59a7f1b9c7b6d665138a69e2803af50fcfd1b4a6fa3b64a0083686c6a3b2e81a5c6a4df88b21752f1173ad630ad805e43ed8760fe7dcfe349e29502fe9a75d882c7a4b37c84bf5fe18fd94f029be8e33bfe1e1b872", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=r20, @ANYRES32=r18, @ANYRES64], @ANYRESHEX=r11, @ANYRESHEX=r12, @ANYRESDEC], @ANYBLOB="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", @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR, @ANYPTR], @ANYRES64=r4, @ANYBLOB="a3936da5f5100780635c267e2131551416721762486a0caceef6f10280a419f0e85d30a7048d49f859d7b0afe17885aa444a2f53690296bedf4ed89569a12610a56f3bc50456f3de37405693ee5dddef972641094b2e5789852ecc35caf14d9bd48796207651b28a063796bd5a32fe76dec56fdbb8e05550f4567f4b6c4ead265796ec95b7b2ec2644f9d48b8b70cc6de3570fb92521"], @ANYRES32=r0], 0x0) r25 = socket(0x3, 0x1, 0x81) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r25, 0x111, 0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000040069"]) [ 410.793753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 410.801009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 410.808262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 410.815528] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:15 executing program 0 (fault-call:8 fault-nth:60): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 410.929855] nla_parse: 3 callbacks suppressed [ 410.929860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:15 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r4, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) [ 411.118273] ISOFS: Unable to identify CD-ROM format. [ 411.130889] FAULT_INJECTION: forcing a failure. [ 411.130889] name failslab, interval 1, probability 0, space 0, times 0 [ 411.206975] CPU: 1 PID: 20862 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 411.214038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.223389] Call Trace: [ 411.225982] dump_stack+0x138/0x197 [ 411.229609] should_fail.cold+0x10f/0x159 [ 411.233757] should_failslab+0xdb/0x130 [ 411.237727] kmem_cache_alloc+0x2d7/0x780 [ 411.241868] ? __pmd_alloc+0x410/0x410 [ 411.245760] copy_process.part.0+0x444f/0x6a00 [ 411.250357] ? __cleanup_sighand+0x50/0x50 [ 411.254589] ? lock_downgrade+0x740/0x740 [ 411.258735] _do_fork+0x19e/0xce0 [ 411.262186] ? fork_idle+0x280/0x280 [ 411.265896] ? fput+0xd4/0x150 [ 411.269085] ? SyS_write+0x15e/0x230 [ 411.272813] SyS_clone+0x37/0x50 [ 411.276175] ? sys_vfork+0x30/0x30 [ 411.279712] do_syscall_64+0x1e8/0x640 [ 411.283623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.288480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.293687] RIP: 0033:0x459a59 [ 411.296870] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:15:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 411.304572] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 411.311833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.319096] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 411.326360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 411.333624] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 09:15:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "e2e225b28a27efe6", "1c82d9bda872f5919d517882430b0b72", "3ff10cd3", "60c567bb12ed3f78"}, 0x28) syz_mount_image$iso9660(&(0x7f0000000700)='iso9660\x00', &(0x7f0000000740)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="ed7351a566e6158203"]) [ 411.404456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:15:15 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc40, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2, 0x80000000000000d5, [0x0]}, 0x2de) 09:15:15 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:15 executing program 0 (fault-call:8 fault-nth:61): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:15:15 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xc8}]}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001100010700"/20, @ANYRES32=r3, @ANYBLOB="009a400645607212be000000"], 0x24}}, 0x0) 09:15:15 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 411.658019] FAULT_INJECTION: forcing a failure. [ 411.658019] name failslab, interval 1, probability 0, space 0, times 0 [ 411.708792] CPU: 1 PID: 20897 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 411.715841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.715847] Call Trace: [ 411.715865] dump_stack+0x138/0x197 [ 411.715885] should_fail.cold+0x10f/0x159 [ 411.715901] should_failslab+0xdb/0x130 [ 411.715914] kmem_cache_alloc_trace+0x2e9/0x790 [ 411.715928] ? pat_pagerange_is_ram+0x90/0xf0 [ 411.735641] ? __init_cache_modes+0x240/0x240 [ 411.735658] reserve_memtype+0x164/0x640 [ 411.735667] ? lock_downgrade+0x740/0x740 [ 411.735677] ? pat_init+0x420/0x420 [ 411.744292] ? __init_cache_modes+0x240/0x240 [ 411.744308] reserve_pfn_range+0x11c/0x390 [ 411.744320] ? arch_io_reserve_memtype_wc+0x80/0x80 [ 411.744332] ? copy_process.part.0+0x444f/0x6a00 [ 411.753279] ? SyS_clone+0x37/0x50 [ 411.753290] ? do_syscall_64+0x1e8/0x640 [ 411.753301] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.753311] track_pfn_copy+0x14a/0x190 [ 411.753321] ? reserve_pfn_range+0x390/0x390 [ 411.753332] ? trace_hardirqs_on+0x10/0x10 [ 411.753349] copy_page_range+0x1255/0x1bd0 [ 411.753358] ? save_trace+0x290/0x290 [ 411.753373] ? copy_process.part.0+0x41de/0x6a00 [ 411.753385] ? vma_compute_subtree_gap+0x190/0x1f0 [ 411.761559] ? vma_gap_callbacks_rotate+0x62/0x80 [ 411.761575] ? __rb_insert_augmented+0x22f/0xdf0 [ 411.761585] ? __pmd_alloc+0x410/0x410 [ 411.761594] ? __vma_link_rb+0x247/0x340 [ 411.761608] copy_process.part.0+0x4764/0x6a00 [ 411.761638] ? __cleanup_sighand+0x50/0x50 [ 411.769726] ? lock_downgrade+0x740/0x740 [ 411.769750] _do_fork+0x19e/0xce0 [ 411.769763] ? fork_idle+0x280/0x280 [ 411.778983] ? fput+0xd4/0x150 [ 411.778994] ? SyS_write+0x15e/0x230 [ 411.779010] SyS_clone+0x37/0x50 [ 411.779019] ? sys_vfork+0x30/0x30 [ 411.787290] do_syscall_64+0x1e8/0x640 [ 411.787300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.787318] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.787327] RIP: 0033:0x459a59 [ 411.796718] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:15:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 09:15:16 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 411.796730] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 411.796740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.796746] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 411.796752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 411.796758] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 411.957298] ------------[ cut here ]------------ [ 411.959794] kobject: 'loop1' (ffff8880a4936620): kobject_uevent_env [ 411.962097] WARNING: CPU: 1 PID: 20897 at arch/x86/mm/pat.c:1020 untrack_pfn+0x1dc/0x220 [ 411.962104] Kernel panic - not syncing: panic_on_warn set ... [ 411.962104] [ 411.962114] CPU: 1 PID: 20897 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 411.962119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.962123] Call Trace: [ 411.962136] dump_stack+0x138/0x197 [ 411.962147] panic+0x1f2/0x426 09:15:16 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x82001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 411.962155] ? add_taint.cold+0x16/0x16 [ 411.962167] ? untrack_pfn+0x1dc/0x220 [ 411.962175] ? __warn.cold+0x14/0x36 [ 411.962186] ? untrack_pfn+0x1dc/0x220 [ 411.970285] kobject: 'loop1' (ffff8880a4936620): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 411.976822] __warn.cold+0x2f/0x36 [ 411.976833] ? ist_end_non_atomic+0x10/0x10 [ 411.976842] ? untrack_pfn+0x1dc/0x220 [ 411.976854] report_bug+0x216/0x254 [ 411.976866] do_error_trap+0x1bb/0x310 [ 411.976877] ? math_error+0x360/0x360 [ 411.976889] ? lock_downgrade+0x740/0x740 [ 411.976909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.976920] do_invalid_op+0x1b/0x20 [ 411.976932] invalid_op+0x1b/0x40 [ 412.074006] RIP: 0010:untrack_pfn+0x1dc/0x220 [ 412.078482] RSP: 0018:ffff88807784f948 EFLAGS: 00010246 [ 412.083828] RAX: 0000000000040000 RBX: ffff88807ab5ab58 RCX: ffffc90005a36000 [ 412.091094] RDX: 0000000000040000 RSI: ffffffff812a768c RDI: 0000000000000001 [ 412.098345] RBP: ffff88807784f9d8 R08: ffff888052a58340 R09: 0000000000000000 [ 412.105598] R10: 0000000000000000 R11: ffff888052a58340 R12: 1ffff1100ef09f2a [ 412.112969] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807784f9b0 [ 412.120246] ? untrack_pfn+0x1dc/0x220 [ 412.124136] ? untrack_pfn+0x1dc/0x220 [ 412.128019] ? track_pfn_insert+0x150/0x150 [ 412.132587] ? vm_normal_page_pmd+0x360/0x360 [ 412.137065] ? uprobe_munmap+0x94/0x210 [ 412.141022] unmap_single_vma+0x182/0x2c0 [ 412.145163] unmap_vmas+0xac/0x170 [ 412.148702] exit_mmap+0x285/0x4e0 [ 412.152222] ? SyS_munmap+0x30/0x30 [ 412.155843] ? kmem_cache_free+0x244/0x2b0 [ 412.160062] ? __khugepaged_exit+0xcf/0x3d0 [ 412.164363] ? lock_downgrade+0x740/0x740 [ 412.168492] mmput+0x114/0x440 [ 412.171683] copy_process.part.0+0x4743/0x6a00 [ 412.176260] ? __cleanup_sighand+0x50/0x50 [ 412.180475] ? lock_downgrade+0x740/0x740 [ 412.184607] _do_fork+0x19e/0xce0 [ 412.188043] ? fork_idle+0x280/0x280 [ 412.191741] ? fput+0xd4/0x150 [ 412.194913] ? SyS_write+0x15e/0x230 [ 412.198610] SyS_clone+0x37/0x50 [ 412.201955] ? sys_vfork+0x30/0x30 [ 412.205480] do_syscall_64+0x1e8/0x640 [ 412.209346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.214173] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 412.219348] RIP: 0033:0x459a59 [ 412.222517] RSP: 002b:00007f8a9a185c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 412.230206] RAX: ffffffffffffffda RBX: 00007f8a9a185c90 RCX: 0000000000459a59 [ 412.237455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.244720] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 412.251980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a9a1866d4 [ 412.259233] R13: 00000000004bff5a R14: 00000000004d2130 R15: 0000000000000007 [ 412.268262] Kernel Offset: disabled [ 412.271899] Rebooting in 86400 seconds..