program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r9 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) r10 = syz_open_dev$dri(&(0x7f00000005c0)='/dev/dri/card#\x00', 0x8, 0x80002) r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r14, r13, 0x0, 0x0, 0x0, r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r12, 0x0, 0x0, 0x0, r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r15, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000640)='cgroupnodev{^self-%vboxnet0,*@\x00', r15}, 0x30) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r17, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r18, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r20 = fcntl$getown(r19, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) r22 = getegid() r23 = getpid() sched_setscheduler(r23, 0x5, &(0x7f0000000380)) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r24, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r25, r27}}}], 0x20}, 0x0) r28 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r29, 0x0) getgroups(0x7, &(0x7f0000000800)=[0xee01, r29, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee00]) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r31, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r32, r34}}}], 0x20}, 0x0) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = getpid() sched_setscheduler(r36, 0x5, &(0x7f0000000380)) r37 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r37, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) r40 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r40, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r41 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/cuse\x00', 0x2, 0x0) r42 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r42, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r43 = syz_open_dev$cec(&(0x7f0000000d80)='/dev/cec#\x00', 0x0, 0x2) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket$netlink(0x10, 0x3, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r46, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r45, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r48, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r44, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=ANY=[@ANYBLOB="240000002c0001000000000000000000000005003cefd2f021c43ec8ea6d692454dc0b983ae3d2483522213ab658238482011d5a596bb8dfd5cfdf31f7a9b178870cef6c4c6425006a4d1703dd962bdfd914eab9da6e901297ab5b518163286b", @ANYRES32=r48, @ANYBLOB="00000000000000000000f6ff"], 0x24}}, 0x0) r49 = bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0x5, 0x6, &(0x7f0000001f80)=@raw=[@generic={0x8, 0xc9e6, 0x4, 0x0, 0x5}, @exit, @generic={0xffffffffffff1bc9, 0x85f, 0x57, 0x8, 0xffff}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x0, 0x6, 0x4, 0xc951d3e9bad822e2, 0xfffffffffffffff8, 0x8}], &(0x7f0000001fc0)='GPL\x00', 0x5, 0x1000, &(0x7f0000002000)=""/4096, 0x41100, 0x4, [], r48, 0xd4e2064977cae6f3, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000003040)={0x0, 0x3, 0x80000000, 0x2}, 0x10}, 0x70) r50 = getpid() sched_setscheduler(r50, 0x5, &(0x7f0000000380)) fstat(r1, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)=0x0) r53 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r53, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r54 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r54, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r55 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') r56 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r57, r56, 0x0, 0x0, 0x0, r58}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r55, 0x0, 0x0, 0x0, r58}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r58, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000034c0)={0xffffffffffffffff, r54, 0x0, 0x7, &(0x7f0000003480)='!wlan1\x00', r58}, 0x30) r60 = socket$nl_route(0x10, 0x3, 0x0) r61 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r62, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r60, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r61, r63}}}], 0x20}, 0x0) r64 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r64, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r65, 0x0) r66 = getuid() r67 = getgid() sendmmsg$unix(r2, &(0x7f0000003780)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="fc5da550d2781c8785c103902251c6c6da488fa01a20a05c09f8f6238cba1ab4f0af96b4c963b724aefbfde0355a4b727c8a090796d2ae01d5878dd32386833ceed394976c3ffa5cdae0325d5ab4084d916cc70d8b74b668144f43dd95bca06cc234985d0c4c3cf8dfa42dff2af54111791c2b6620707576b70509ef6c0bcff1fddc6a2675f0f5c676e144aafa11c8dde28182e3c75bd984ad90966ee55c", 0x9e}, {&(0x7f0000000080)="ff7d7ca2b7b715e90352865f4effa443e272d37ebda8a3fced2822b2a27c06275fc9eeafabad51ca1f5c7cee6ac556da8d42a238a850b07c2c9a3e799c", 0x3d}, {&(0x7f00000000c0)="9c9f6058c163008ecb568c62a20d6e047ccd1af1", 0x14}, {&(0x7f00000003c0)="ff65e2048e09bc7ce812a74b15e8033e39392a6f58d2a3c4a2", 0x19}, {&(0x7f0000000400)="eb8f264772e9a9774b55bbba21ed7feade6eccdbb045473dc266395b8588376bed0d1e2d397025199f15184f882339d4b22a9b226464cae10f0311c4dea897c93d00e6d6da502c615dc0402be8e30c783baee9e68dfbdc2c36d3c019d93c0bb64c03927aa18bec1b5744669d65c6364a407372163efdda958530c85779305168fc64b1d107e2e3bdb5027b23c87ec9d00cafd5d39ef38eb89fc59e0351d17999974119496762543b2df42ccd66e9520c398dbca0d330fbfa75754d5a3939b5e0b03a0d91d78f3cc5e83dd79f4d174f79caa5cfd6843e0457df7fff3603712b272da8ce31fe77e117277f98582a0d30440c5ad6e9ea0387", 0xf7}], 0x6, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r1, r5, r0]}}, @rights={{0x38, 0x1, 0x1, [r6, r7, r8, 0xffffffffffffffff, r9, r10, r11, r1, r16, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r17, r1, 0xffffffffffffffff, 0xffffffffffffffff, r18]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r27, r30}}}], 0xc8, 0x10008001}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="5b2daebdf336ea5d32bee80e0eaa5dffb3a706ec21c7ae1d1135d399f0e46e0c247875315ffdcfc99cf096938032c79b33b15f2b26dd3ffef3efa5ddb96a41626a0d4521e65d828649ee740fbcc7553b542c449e29e07f81c4c60a8f3de2c55babb3e65c841e80c905084dea4998174ad64281751c7185a7ea7aa5fdae6e069020f7d564259293ce420e1e1c9f2a6d20544350cfcf2731d3c257434380510ae8fe83707df0c9ec3ab303c56f6104656698f3", 0xb2}, {&(0x7f0000000a80)="6a3eec7f77da74daa706925aa8ea635a32f47fa2576c9f63b92e71465b212067fcc0b8d2c8ba6a0db506948061779011914cdd3d380f24c4aa9c63afa69056b082c8c0f6d1a3b6972385a195c48093b6be82e470b6263fa8b189622e9ddb6582c48eb08f2cd3f4027b09f359480ac7c2e653ee61fed14e444063c4a206", 0x7d}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000003400000002000000", @ANYRES32, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r0, @ANYRES32=r43], 0x68, 0x20004a4}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)="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", 0x1000}], 0x1, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [r1, r49]}}], 0x18, 0x20000000}, {&(0x7f0000003140)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f00000031c0)="6d3fdbc3c6d2c8c36b7386669a16bd417e638fd3c0e966d8083da75c", 0x1c}, {&(0x7f0000003200)="5585b285392283adeed97207bc39fe6ad72334d070edb4a3d49e26ddbfa2da825048ba2583996fef7868b4cd2694fc1a40c490519f64ceb777c93ee8fd42585df4b17b9fa4f1e965d987ed319d646702e876c37005e337d63fb0f59b1addb3f1b55999aef5d96e489a2b58c640a932960b4839b29c3cad718bd7c2a792f87d02169b9b971ddbcba448efa81a99835ed602c7654aa53dd867e099402a8bf62fd737fc4e7cf71ecbf2cddf56bb102290aa18dd991a72b486040a1cc8e6609b94aef4324cfd9b31edeb40233f28fb34e4986569b5ee51a9728b9a09ec2976c87bf429d7347b", 0xe4}], 0x2, &(0x7f0000003500)=[@cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @rights={{0x14, 0x1, 0x1, [r53]}}, @cred={{0x1c, 0x1, 0x2, {r59, r63, r65}}}], 0x58, 0x4}, {&(0x7f0000003580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003600)="6b98948b5f7c6bafffb0fa4be1b661a0a30b67c516c0dc1c60e7eacdee2bbf8c2cbaa7a38d244eb2242384af49831ec94a12667ec8fede999af9486865e3e7854e9bb73e549bc4f7b78a88dd84e6fd4c97e0bde06af7497fe5a057098b08ffb127f42ca74dfe7710393ddbab69a46113bad4a316b50caf2f5393d3b8f3b1432d984aea9e14ec16f4e319b3eee940b0c19a94fe8e37ff98d2eca3334e672b1f41ecd6e406f2ad357669e44bd530e745e5176dfc34e64f3aaffc22d0c534d8afacee7c425ffabc3eada37f9eef366d684473c5be2e219d11773d5ea963913067fb32c65d", 0xe3}], 0x1, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, r66, r67}}}], 0x20, 0x1821}], 0x5, 0x4000) [ 978.410341][ T5801] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000003 20:05:33 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/19, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x3}}, 0x0) 20:05:33 executing program 2 (fault-call:2 fault-nth:72): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 978.559196][ T5931] input: syz1 as /devices/virtual/input/input439 20:05:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x04\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:34 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 978.701901][ T5980] FAULT_INJECTION: forcing a failure. [ 978.701901][ T5980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:05:34 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) listen(0xffffffffffffffff, 0x0) [ 978.762849][ T5983] input: syz1 as /devices/virtual/input/input440 [ 978.816302][ T5980] CPU: 0 PID: 5980 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 978.823698][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.833747][ T5980] Call Trace: [ 978.833771][ T5980] dump_stack+0x172/0x1f0 [ 978.833791][ T5980] should_fail.cold+0xa/0x15 [ 978.833809][ T5980] ? fault_create_debugfs_attr+0x180/0x180 [ 978.833833][ T5980] ? ___might_sleep+0x163/0x280 [ 978.841445][ T5980] should_fail_alloc_page+0x50/0x60 [ 978.841464][ T5980] __alloc_pages_nodemask+0x1a1/0x900 [ 978.851824][ T5980] ? __alloc_pages_slowpath+0x2520/0x2520 [ 978.851843][ T5980] ? kasan_unpoison_shadow+0x35/0x50 [ 978.851860][ T5980] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 978.851879][ T5980] alloc_pages_current+0x107/0x210 [ 978.861877][ T5980] ? ___might_sleep+0x163/0x280 [ 978.861896][ T5980] __vmalloc_node_range+0x4a9/0x7d0 [ 978.861920][ T5980] __vmalloc+0x44/0x50 [ 978.873008][ T5980] ? __do_sys_init_module+0x16e/0x240 [ 978.873031][ T5980] __do_sys_init_module+0x16e/0x240 [ 978.884511][ T5980] ? load_module+0x8220/0x8220 [ 978.884531][ T5980] ? __ia32_sys_read+0xb0/0xb0 [ 978.884548][ T5980] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 978.884563][ T5980] __x64_sys_init_module+0x6e/0xb0 [ 978.884585][ T5980] do_syscall_64+0xfd/0x6a0 [ 978.899683][ T5980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.899694][ T5980] RIP: 0033:0x4598e9 20:05:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 978.899708][ T5980] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.899714][ T5980] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 978.909251][ T5980] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 978.909260][ T5980] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 978.909266][ T5980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 978.909273][ T5980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 978.909280][ T5980] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 979.052278][ T6098] input: syz1 as /devices/virtual/input/input441 20:05:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x05\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0xff8, 0x1, {0x5, @vbi={0x0, 0x0, 0xffffffffffffff81, 0x0, [], [0x1]}}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:34 executing program 2 (fault-call:2 fault-nth:73): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 979.246471][ T6109] input: syz1 as /devices/virtual/input/input442 [ 979.270682][ T5894] delete_channel: no stack [ 979.295668][ T6111] FAULT_INJECTION: forcing a failure. [ 979.295668][ T6111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 979.342880][ T6111] CPU: 1 PID: 6111 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 979.350272][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.360322][ T6111] Call Trace: [ 979.363621][ T6111] dump_stack+0x172/0x1f0 [ 979.367959][ T6111] should_fail.cold+0xa/0x15 [ 979.372556][ T6111] ? fault_create_debugfs_attr+0x180/0x180 [ 979.378368][ T6111] ? ___might_sleep+0x163/0x280 [ 979.383489][ T6111] should_fail_alloc_page+0x50/0x60 [ 979.388688][ T6111] __alloc_pages_nodemask+0x1a1/0x900 [ 979.394061][ T6111] ? __alloc_pages_slowpath+0x2520/0x2520 [ 979.399787][ T6111] ? kasan_unpoison_shadow+0x35/0x50 [ 979.405113][ T6111] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 979.411352][ T6111] alloc_pages_current+0x107/0x210 [ 979.411366][ T6111] ? ___might_sleep+0x163/0x280 [ 979.411382][ T6111] __vmalloc_node_range+0x4a9/0x7d0 [ 979.411400][ T6111] __vmalloc+0x44/0x50 [ 979.411416][ T6111] ? __do_sys_init_module+0x16e/0x240 [ 979.411430][ T6111] __do_sys_init_module+0x16e/0x240 [ 979.411448][ T6111] ? load_module+0x8220/0x8220 [ 979.430603][ T6111] ? __ia32_sys_read+0xb0/0xb0 [ 979.430619][ T6111] ? switch_fpu_return+0x1fa/0x4f0 [ 979.430636][ T6111] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 979.430658][ T6111] __x64_sys_init_module+0x6e/0xb0 [ 979.441179][ T6111] do_syscall_64+0xfd/0x6a0 [ 979.441195][ T6111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.441204][ T6111] RIP: 0033:0x4598e9 [ 979.441219][ T6111] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.441226][ T6111] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 979.441237][ T6111] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 979.441244][ T6111] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 979.441251][ T6111] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.441257][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 979.441264][ T6111] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 979.563467][ T5894] delete_channel: no stack [ 979.582889][ T6109] input: syz1 as /devices/virtual/input/input443 20:05:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000300)=""/4096) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYPTR, @ANYPTR, @ANYRES64, @ANYRESOCT=r4], 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xe8, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7441}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5038b11d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff01}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd56}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9af}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) kexec_load(0x3, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="623cd61420fbcc043bcabc0c0943d1f56f30465afb980148aea37e3e8b7074e31b2056c1c6cbcfade1608af03b88e8e4123de552c8f00586ed5dca9dbcd41430f2b8a268fa17f0feb1585ae9992c7a879f5008d3cde514bcf7efea83ad41afba80b6afadab179984a988a55ed2c74714f9e55583b877b3d9e7621223569cc8ab02e09ff432975b325281915610774139b544eab5839695ed15ee48a3d92fa1efe1", 0xa1, 0x5, 0xffffffff}], 0x30000) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\t\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:35 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10004000) 20:05:35 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:35 executing program 2 (fault-call:2 fault-nth:74): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 979.697971][ T5901] delete_channel: no stack [ 979.704051][ T5901] delete_channel: no stack [ 979.709739][ T5901] syz-executor.1 (5901) used greatest stack depth: 22856 bytes left [ 979.772348][ T6136] FAULT_INJECTION: forcing a failure. [ 979.772348][ T6136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 979.789479][ T6135] input: syz1 as /devices/virtual/input/input444 [ 979.797381][ T6136] CPU: 1 PID: 6136 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 979.804761][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.814803][ T6136] Call Trace: [ 979.814823][ T6136] dump_stack+0x172/0x1f0 [ 979.814845][ T6136] should_fail.cold+0xa/0x15 [ 979.827009][ T6136] ? fault_create_debugfs_attr+0x180/0x180 [ 979.827032][ T6136] ? ___might_sleep+0x163/0x280 [ 979.837669][ T6136] should_fail_alloc_page+0x50/0x60 [ 979.837687][ T6136] __alloc_pages_nodemask+0x1a1/0x900 [ 979.848216][ T6136] ? __alloc_pages_slowpath+0x2520/0x2520 [ 979.848238][ T6136] ? kasan_unpoison_shadow+0x35/0x50 [ 979.859190][ T6136] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 979.859208][ T6136] alloc_pages_current+0x107/0x210 [ 979.859222][ T6136] ? ___might_sleep+0x163/0x280 [ 979.859237][ T6136] __vmalloc_node_range+0x4a9/0x7d0 [ 979.859251][ T6136] __vmalloc+0x44/0x50 [ 979.859263][ T6136] ? __do_sys_init_module+0x16e/0x240 [ 979.859284][ T6136] __do_sys_init_module+0x16e/0x240 [ 979.870578][ T6136] ? load_module+0x8220/0x8220 [ 979.870600][ T6136] ? __ia32_sys_read+0xb0/0xb0 [ 979.870613][ T6136] ? switch_fpu_return+0x1fa/0x4f0 [ 979.870634][ T6136] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 979.880624][ T6136] __x64_sys_init_module+0x6e/0xb0 20:05:35 executing program 4: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 979.880641][ T6136] do_syscall_64+0xfd/0x6a0 [ 979.880658][ T6136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.880668][ T6136] RIP: 0033:0x4598e9 [ 979.880685][ T6136] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.890073][ T6136] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 979.890086][ T6136] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 20:05:35 executing program 2 (fault-call:2 fault-nth:75): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 979.890092][ T6136] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 979.890099][ T6136] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 979.890106][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 979.890114][ T6136] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000080)) 20:05:35 executing program 4: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 980.067638][ T6233] input: syz1 as /devices/virtual/input/input445 20:05:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 980.122146][ T6231] FAULT_INJECTION: forcing a failure. [ 980.122146][ T6231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:05:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 980.194825][ T6231] CPU: 0 PID: 6231 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 980.202220][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.212267][ T6231] Call Trace: [ 980.212288][ T6231] dump_stack+0x172/0x1f0 [ 980.212311][ T6231] should_fail.cold+0xa/0x15 [ 980.212331][ T6231] ? fault_create_debugfs_attr+0x180/0x180 [ 980.230274][ T6231] ? ___might_sleep+0x163/0x280 [ 980.230295][ T6231] should_fail_alloc_page+0x50/0x60 [ 980.230311][ T6231] __alloc_pages_nodemask+0x1a1/0x900 [ 980.230328][ T6231] ? __alloc_pages_slowpath+0x2520/0x2520 [ 980.240357][ T6231] ? kasan_unpoison_shadow+0x35/0x50 [ 980.256672][ T6231] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 980.262921][ T6231] alloc_pages_current+0x107/0x210 [ 980.268036][ T6231] ? ___might_sleep+0x163/0x280 [ 980.272900][ T6231] __vmalloc_node_range+0x4a9/0x7d0 [ 980.278099][ T6231] __vmalloc+0x44/0x50 [ 980.278113][ T6231] ? __do_sys_init_module+0x16e/0x240 [ 980.278132][ T6231] __do_sys_init_module+0x16e/0x240 [ 980.293230][ T6231] ? load_module+0x8220/0x8220 [ 980.298006][ T6231] ? __ia32_sys_read+0xb0/0xb0 [ 980.302767][ T6231] ? switch_fpu_return+0x1fa/0x4f0 [ 980.302784][ T6231] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 980.302803][ T6231] __x64_sys_init_module+0x6e/0xb0 [ 980.319038][ T6231] do_syscall_64+0xfd/0x6a0 [ 980.319056][ T6231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.319065][ T6231] RIP: 0033:0x4598e9 20:05:35 executing program 4: mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 980.319082][ T6231] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.352886][ T6231] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 980.352899][ T6231] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 980.352907][ T6231] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 980.352913][ T6231] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.352920][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 980.352927][ T6231] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x11\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) syncfs(r0) 20:05:35 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:35 executing program 2 (fault-call:2 fault-nth:76): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:35 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb8640078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540916f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d7573b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0xfffffffffffffeb8) 20:05:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 20:05:35 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 980.536702][ T6381] FAULT_INJECTION: forcing a failure. [ 980.536702][ T6381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 980.583404][ T6384] input: syz1 as /devices/virtual/input/input446 [ 980.629440][ T6381] CPU: 1 PID: 6381 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 980.636836][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.647158][ T6381] Call Trace: [ 980.650458][ T6381] dump_stack+0x172/0x1f0 [ 980.654812][ T6381] should_fail.cold+0xa/0x15 [ 980.659412][ T6381] ? fault_create_debugfs_attr+0x180/0x180 [ 980.665239][ T6381] ? ___might_sleep+0x163/0x280 [ 980.670096][ T6381] should_fail_alloc_page+0x50/0x60 [ 980.676162][ T6381] __alloc_pages_nodemask+0x1a1/0x900 [ 980.681530][ T6381] ? __alloc_pages_slowpath+0x2520/0x2520 [ 980.687254][ T6381] ? kasan_unpoison_shadow+0x35/0x50 [ 980.692543][ T6381] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 980.698794][ T6381] alloc_pages_current+0x107/0x210 [ 980.703911][ T6381] ? ___might_sleep+0x163/0x280 [ 980.708769][ T6381] __vmalloc_node_range+0x4a9/0x7d0 [ 980.713969][ T6381] __vmalloc+0x44/0x50 [ 980.718041][ T6381] ? __do_sys_init_module+0x16e/0x240 [ 980.723415][ T6381] __do_sys_init_module+0x16e/0x240 [ 980.728616][ T6381] ? load_module+0x8220/0x8220 [ 980.733390][ T6381] ? __ia32_sys_read+0xb0/0xb0 [ 980.738152][ T6381] ? switch_fpu_return+0x1fa/0x4f0 [ 980.743261][ T6381] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 980.743283][ T6381] __x64_sys_init_module+0x6e/0xb0 [ 980.754425][ T6381] do_syscall_64+0xfd/0x6a0 [ 980.758961][ T6381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.764859][ T6381] RIP: 0033:0x4598e9 20:05:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 20:05:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0xd65a1f67652480c9, 0x0, 0x52) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x4000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3ff, 0x1ff, 0xe0, 0x2}}}, ["", "", "", ""]}, 0x30}}, 0x10) r6 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000240)="52635f1e3abeb2970e4fca", 0xb) 20:05:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 20:05:36 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 980.764873][ T6381] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.764879][ T6381] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 980.764899][ T6381] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 980.796950][ T6381] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 980.812863][ T6381] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 980.820833][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 980.828800][ T6381] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 980.892657][ T6461] input: syz1 as /devices/virtual/input/input447 20:05:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x12\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:36 executing program 2 (fault-call:2 fault-nth:77): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 20:05:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:36 executing program 4: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x2200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000040)={{0x46146e7a, 0x100}, 0x5e761f139b4d8835, 0x579a, 0xbd5, {0x1000, 0x8}, 0x3, 0x4251}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:36 executing program 4: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 981.135792][ T6535] input: syz1 as /devices/virtual/input/input448 [ 981.146823][ T6553] FAULT_INJECTION: forcing a failure. [ 981.146823][ T6553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 981.192512][ T6553] CPU: 1 PID: 6553 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 981.199904][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.209958][ T6553] Call Trace: [ 981.213261][ T6553] dump_stack+0x172/0x1f0 [ 981.217601][ T6553] should_fail.cold+0xa/0x15 [ 981.222197][ T6553] ? fault_create_debugfs_attr+0x180/0x180 [ 981.228010][ T6553] ? ___might_sleep+0x163/0x280 [ 981.232862][ T6553] should_fail_alloc_page+0x50/0x60 [ 981.238041][ T6553] __alloc_pages_nodemask+0x1a1/0x900 [ 981.243398][ T6553] ? __alloc_pages_slowpath+0x2520/0x2520 [ 981.249103][ T6553] ? kasan_unpoison_shadow+0x35/0x50 [ 981.254367][ T6553] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 981.260594][ T6553] alloc_pages_current+0x107/0x210 [ 981.265684][ T6553] ? ___might_sleep+0x163/0x280 [ 981.270514][ T6553] __vmalloc_node_range+0x4a9/0x7d0 [ 981.275694][ T6553] __vmalloc+0x44/0x50 [ 981.279761][ T6553] ? __do_sys_init_module+0x16e/0x240 [ 981.285113][ T6553] __do_sys_init_module+0x16e/0x240 [ 981.290288][ T6553] ? load_module+0x8220/0x8220 [ 981.295036][ T6553] ? __ia32_sys_read+0xb0/0xb0 [ 981.299783][ T6553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 981.305828][ T6553] __x64_sys_init_module+0x6e/0xb0 [ 981.310918][ T6553] do_syscall_64+0xfd/0x6a0 [ 981.315399][ T6553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.321266][ T6553] RIP: 0033:0x4598e9 [ 981.325142][ T6553] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.344719][ T6553] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 981.353106][ T6553] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 981.361055][ T6553] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 981.369003][ T6553] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 981.377905][ T6553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 20:05:36 executing program 4: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 981.385852][ T6553] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:36 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x0) writev(r0, &(0x7f0000000380), 0x0) lseek(0xffffffffffffffff, 0x400000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)=""/24, &(0x7f0000000400)=0x18) syz_open_dev$audion(0x0, 0x40, 0x402000) bind$isdn(0xffffffffffffffff, &(0x7f0000000280), 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x40521, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) io_getevents(0x0, 0x2c00000000000000, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) memfd_create(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x364) sendfile(r1, 0xffffffffffffffff, 0x0, 0x102000002) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) 20:05:36 executing program 2 (fault-call:2 fault-nth:78): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 981.413854][ T6634] input: syz1 as /devices/virtual/input/input449 20:05:36 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000000)='./file0\x00', 0xf076057300d95cf, 0x20) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x2, 0x6]) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x3) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x14\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r9 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) r10 = syz_open_dev$dri(&(0x7f00000005c0)='/dev/dri/card#\x00', 0x8, 0x80002) r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r14, r13, 0x0, 0x0, 0x0, r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r12, 0x0, 0x0, 0x0, r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r15, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000640)='cgroupnodev{^self-%vboxnet0,*@\x00', r15}, 0x30) r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r17, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r18 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r18, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r20 = fcntl$getown(r19, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) r22 = getegid() r23 = getpid() sched_setscheduler(r23, 0x5, &(0x7f0000000380)) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r24, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r25, r27}}}], 0x20}, 0x0) r28 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r29, 0x0) getgroups(0x7, &(0x7f0000000800)=[0xee01, r29, 0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0xee00]) r31 = socket$nl_route(0x10, 0x3, 0x0) r32 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r31, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r32, r34}}}], 0x20}, 0x0) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r36 = getpid() sched_setscheduler(r36, 0x5, &(0x7f0000000380)) r37 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r37, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0}, &(0x7f0000000c40)=0xc) getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) r40 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r40, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r41 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/cuse\x00', 0x2, 0x0) r42 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r42, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r43 = syz_open_dev$cec(&(0x7f0000000d80)='/dev/cec#\x00', 0x0, 0x2) r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket$nl_route(0x10, 0x3, 0x0) r46 = socket$netlink(0x10, 0x3, 0x0) r47 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r47, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r47, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r46, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r48}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r45, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r48, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r44, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001f00)=ANY=[@ANYBLOB="240000002c0001000000000000000000000005003cefd2f021c43ec8ea6d692454dc0b983ae3d2483522213ab658238482011d5a596bb8dfd5cfdf31f7a9b178870cef6c4c6425006a4d1703dd962bdfd914eab9da6e901297ab5b518163286b", @ANYRES32=r48, @ANYBLOB="00000000000000000000f6ff"], 0x24}}, 0x0) r49 = bpf$PROG_LOAD(0x5, &(0x7f0000003080)={0x5, 0x6, &(0x7f0000001f80)=@raw=[@generic={0x8, 0xc9e6, 0x4, 0x0, 0x5}, @exit, @generic={0xffffffffffff1bc9, 0x85f, 0x57, 0x8, 0xffff}, @map={0x18, 0x0, 0x1, 0x0, 0x1}, @ldst={0x0, 0x0, 0x6, 0x4, 0xc951d3e9bad822e2, 0xfffffffffffffff8, 0x8}], &(0x7f0000001fc0)='GPL\x00', 0x5, 0x1000, &(0x7f0000002000)=""/4096, 0x41100, 0x4, [], r48, 0xd4e2064977cae6f3, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000003040)={0x0, 0x3, 0x80000000, 0x2}, 0x10}, 0x70) r50 = getpid() sched_setscheduler(r50, 0x5, &(0x7f0000000380)) fstat(r1, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440)=0x0) r53 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r53, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r54 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r54, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r55 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') r56 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0xb31}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r57, r56, 0x0, 0x0, 0x0, r58}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r55, 0x0, 0x0, 0x0, r58}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r58, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000034c0)={0xffffffffffffffff, r54, 0x0, 0x7, &(0x7f0000003480)='!wlan1\x00', r58}, 0x30) r60 = socket$nl_route(0x10, 0x3, 0x0) r61 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r62, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r60, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r61, r63}}}], 0x20}, 0x0) r64 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r64, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r65, 0x0) r66 = getuid() r67 = getgid() sendmmsg$unix(r2, &(0x7f0000003780)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="fc5da550d2781c8785c103902251c6c6da488fa01a20a05c09f8f6238cba1ab4f0af96b4c963b724aefbfde0355a4b727c8a090796d2ae01d5878dd32386833ceed394976c3ffa5cdae0325d5ab4084d916cc70d8b74b668144f43dd95bca06cc234985d0c4c3cf8dfa42dff2af54111791c2b6620707576b70509ef6c0bcff1fddc6a2675f0f5c676e144aafa11c8dde28182e3c75bd984ad90966ee55c", 0x9e}, {&(0x7f0000000080)="ff7d7ca2b7b715e90352865f4effa443e272d37ebda8a3fced2822b2a27c06275fc9eeafabad51ca1f5c7cee6ac556da8d42a238a850b07c2c9a3e799c", 0x3d}, {&(0x7f00000000c0)="9c9f6058c163008ecb568c62a20d6e047ccd1af1", 0x14}, {&(0x7f00000003c0)="ff65e2048e09bc7ce812a74b15e8033e39392a6f58d2a3c4a2", 0x19}, {&(0x7f0000000400)="eb8f264772e9a9774b55bbba21ed7feade6eccdbb045473dc266395b8588376bed0d1e2d397025199f15184f882339d4b22a9b226464cae10f0311c4dea897c93d00e6d6da502c615dc0402be8e30c783baee9e68dfbdc2c36d3c019d93c0bb64c03927aa18bec1b5744669d65c6364a407372163efdda958530c85779305168fc64b1d107e2e3bdb5027b23c87ec9d00cafd5d39ef38eb89fc59e0351d17999974119496762543b2df42ccd66e9520c398dbca0d330fbfa75754d5a3939b5e0b03a0d91d78f3cc5e83dd79f4d174f79caa5cfd6843e0457df7fff3603712b272da8ce31fe77e117277f98582a0d30440c5ad6e9ea0387", 0xf7}], 0x6, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r1, r5, r0]}}, @rights={{0x38, 0x1, 0x1, [r6, r7, r8, 0xffffffffffffffff, r9, r10, r11, r1, r16, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, r17, r1, 0xffffffffffffffff, 0xffffffffffffffff, r18]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r27, r30}}}], 0xc8, 0x10008001}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="5b2daebdf336ea5d32bee80e0eaa5dffb3a706ec21c7ae1d1135d399f0e46e0c247875315ffdcfc99cf096938032c79b33b15f2b26dd3ffef3efa5ddb96a41626a0d4521e65d828649ee740fbcc7553b542c449e29e07f81c4c60a8f3de2c55babb3e65c841e80c905084dea4998174ad64281751c7185a7ea7aa5fdae6e069020f7d564259293ce420e1e1c9f2a6d20544350cfcf2731d3c257434380510ae8fe83707df0c9ec3ab303c56f6104656698f3", 0xb2}, {&(0x7f0000000a80)="6a3eec7f77da74daa706925aa8ea635a32f47fa2576c9f63b92e71465b212067fcc0b8d2c8ba6a0db506948061779011914cdd3d380f24c4aa9c63afa69056b082c8c0f6d1a3b6972385a195c48093b6be82e470b6263fa8b189622e9ddb6582c48eb08f2cd3f4027b09f359480ac7c2e653ee61fed14e444063c4a206", 0x7d}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000000000003400000002000000", @ANYRES32, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r0, @ANYRES32=r43], 0x68, 0x20004a4}, {&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)="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", 0x1000}], 0x1, &(0x7f0000003100)=[@rights={{0x18, 0x1, 0x1, [r1, r49]}}], 0x18, 0x20000000}, {&(0x7f0000003140)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f00000031c0)="6d3fdbc3c6d2c8c36b7386669a16bd417e638fd3c0e966d8083da75c", 0x1c}, {&(0x7f0000003200)="5585b285392283adeed97207bc39fe6ad72334d070edb4a3d49e26ddbfa2da825048ba2583996fef7868b4cd2694fc1a40c490519f64ceb777c93ee8fd42585df4b17b9fa4f1e965d987ed319d646702e876c37005e337d63fb0f59b1addb3f1b55999aef5d96e489a2b58c640a932960b4839b29c3cad718bd7c2a792f87d02169b9b971ddbcba448efa81a99835ed602c7654aa53dd867e099402a8bf62fd737fc4e7cf71ecbf2cddf56bb102290aa18dd991a72b486040a1cc8e6609b94aef4324cfd9b31edeb40233f28fb34e4986569b5ee51a9728b9a09ec2976c87bf429d7347b", 0xe4}], 0x2, &(0x7f0000003500)=[@cred={{0x1c, 0x1, 0x2, {r50, r51, r52}}}, @rights={{0x14, 0x1, 0x1, [r53]}}, @cred={{0x1c, 0x1, 0x2, {r59, r63, r65}}}], 0x58, 0x4}, {&(0x7f0000003580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003600)="6b98948b5f7c6bafffb0fa4be1b661a0a30b67c516c0dc1c60e7eacdee2bbf8c2cbaa7a38d244eb2242384af49831ec94a12667ec8fede999af9486865e3e7854e9bb73e549bc4f7b78a88dd84e6fd4c97e0bde06af7497fe5a057098b08ffb127f42ca74dfe7710393ddbab69a46113bad4a316b50caf2f5393d3b8f3b1432d984aea9e14ec16f4e319b3eee940b0c19a94fe8e37ff98d2eca3334e672b1f41ecd6e406f2ad357669e44bd530e745e5176dfc34e64f3aaffc22d0c534d8afacee7c425ffabc3eada37f9eef366d684473c5be2e219d11773d5ea963913067fb32c65d", 0xe3}], 0x1, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {0x0, r66, r67}}}], 0x20, 0x1821}], 0x5, 0x4000) 20:05:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 981.699306][ T6663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 981.715803][ T6671] FAULT_INJECTION: forcing a failure. [ 981.715803][ T6671] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 981.739718][ T6669] input: syz1 as /devices/virtual/input/input450 [ 981.785613][ T6671] CPU: 0 PID: 6671 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 981.793008][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.803054][ T6671] Call Trace: [ 981.803076][ T6671] dump_stack+0x172/0x1f0 [ 981.803099][ T6671] should_fail.cold+0xa/0x15 [ 981.815278][ T6671] ? fault_create_debugfs_attr+0x180/0x180 [ 981.821086][ T6671] ? ___might_sleep+0x163/0x280 [ 981.821104][ T6671] should_fail_alloc_page+0x50/0x60 [ 981.821122][ T6671] __alloc_pages_nodemask+0x1a1/0x900 [ 981.836488][ T6671] ? __alloc_pages_slowpath+0x2520/0x2520 [ 981.842203][ T6671] ? retint_kernel+0x2b/0x2b [ 981.846882][ T6671] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 981.853124][ T6671] alloc_pages_current+0x107/0x210 [ 981.858237][ T6671] ? ___might_sleep+0x163/0x280 [ 981.863090][ T6671] __vmalloc_node_range+0x4a9/0x7d0 [ 981.868294][ T6671] __vmalloc+0x44/0x50 [ 981.872356][ T6671] ? __do_sys_init_module+0x16e/0x240 [ 981.877730][ T6671] __do_sys_init_module+0x16e/0x240 [ 981.882925][ T6671] ? load_module+0x8220/0x8220 [ 981.887695][ T6671] ? __ia32_sys_read+0xb0/0xb0 [ 981.892455][ T6671] ? switch_fpu_return+0x1fa/0x4f0 [ 981.897565][ T6671] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 981.897582][ T6671] __x64_sys_init_module+0x6e/0xb0 [ 981.897610][ T6671] do_syscall_64+0xfd/0x6a0 [ 981.908746][ T6671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.908764][ T6671] RIP: 0033:0x4598e9 [ 981.922998][ T6671] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.923005][ T6671] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 981.923018][ T6671] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 981.923026][ T6671] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 981.923032][ T6671] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 981.923040][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 20:05:37 executing program 2 (fault-call:2 fault-nth:79): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 981.923047][ T6671] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000003 [ 982.063971][ T6669] input: syz1 as /devices/virtual/input/input451 [ 982.109092][ T6789] FAULT_INJECTION: forcing a failure. [ 982.109092][ T6789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 982.122775][ T6789] CPU: 1 PID: 6789 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 982.130142][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.140194][ T6789] Call Trace: [ 982.143480][ T6789] dump_stack+0x172/0x1f0 [ 982.147810][ T6789] should_fail.cold+0xa/0x15 [ 982.152392][ T6789] ? fault_create_debugfs_attr+0x180/0x180 [ 982.152409][ T6789] ? ___might_sleep+0x163/0x280 [ 982.152428][ T6789] should_fail_alloc_page+0x50/0x60 [ 982.152443][ T6789] __alloc_pages_nodemask+0x1a1/0x900 [ 982.152458][ T6789] ? __alloc_pages_slowpath+0x2520/0x2520 [ 982.152478][ T6789] ? kasan_unpoison_shadow+0x35/0x50 [ 982.163119][ T6789] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 982.163138][ T6789] alloc_pages_current+0x107/0x210 [ 982.163149][ T6789] ? ___might_sleep+0x163/0x280 [ 982.163168][ T6789] __vmalloc_node_range+0x4a9/0x7d0 [ 982.174818][ T6789] __vmalloc+0x44/0x50 [ 982.174834][ T6789] ? __do_sys_init_module+0x16e/0x240 [ 982.174848][ T6789] __do_sys_init_module+0x16e/0x240 [ 982.174866][ T6789] ? load_module+0x8220/0x8220 [ 982.185828][ T6789] ? __ia32_sys_read+0xb0/0xb0 [ 982.185846][ T6789] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 982.185861][ T6789] __x64_sys_init_module+0x6e/0xb0 [ 982.185880][ T6789] do_syscall_64+0xfd/0x6a0 [ 982.197193][ T6789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.197204][ T6789] RIP: 0033:0x4598e9 [ 982.197219][ T6789] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.197225][ T6789] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 982.207230][ T6789] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 982.207238][ T6789] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 982.207246][ T6789] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 20:05:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x15\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 982.207254][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 982.207262][ T6789] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0x1, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:37 executing program 2 (fault-call:2 fault-nth:80): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x0e\xba\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 982.405431][ T6794] input: syz1 as /devices/virtual/input/input452 [ 982.439500][ T6667] delete_channel: no stack [ 982.453464][ T6668] syz-executor.4 (6668) used greatest stack depth: 22840 bytes left 20:05:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x16\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 982.501535][ T6801] FAULT_INJECTION: forcing a failure. [ 982.501535][ T6801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 982.560656][ T6667] delete_channel: no stack [ 982.576552][ T6801] CPU: 1 PID: 6801 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 982.583933][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.593987][ T6801] Call Trace: [ 982.594012][ T6801] dump_stack+0x172/0x1f0 [ 982.594033][ T6801] should_fail.cold+0xa/0x15 20:05:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fsopen(&(0x7f0000000000)='nsfs\x00', 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0xd, 0x4, 0x7f, 0x3ff, 0x0, 0xffffffffffffffff, 0x0, [], r4, r5}, 0x3c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r12, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000400)={@ipv4={[], [], @broadcast}, @mcast2, @rand_addr="b1faf3f1daea774ce4bb7f9fe1cd7bf9", 0x100000001, 0x3, 0x7fffffff, 0x3e245f23eb7c0fbe, 0x3, 0x20100060, r12}) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r13, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x9a, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1794}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x9}, 0x0) setsockopt$inet6_opts(r13, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 982.594053][ T6801] ? fault_create_debugfs_attr+0x180/0x180 [ 982.612020][ T6801] ? ___might_sleep+0x163/0x280 [ 982.616877][ T6801] should_fail_alloc_page+0x50/0x60 [ 982.622101][ T6801] __alloc_pages_nodemask+0x1a1/0x900 [ 982.627491][ T6801] ? __alloc_pages_slowpath+0x2520/0x2520 [ 982.633213][ T6801] ? kasan_unpoison_shadow+0x35/0x50 [ 982.638500][ T6801] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 982.644746][ T6801] alloc_pages_current+0x107/0x210 [ 982.649859][ T6801] ? ___might_sleep+0x163/0x280 [ 982.654703][ T6801] __vmalloc_node_range+0x4a9/0x7d0 20:05:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x2, r8) [ 982.654722][ T6801] __vmalloc+0x44/0x50 [ 982.663945][ T6801] ? __do_sys_init_module+0x16e/0x240 [ 982.669316][ T6801] __do_sys_init_module+0x16e/0x240 [ 982.674511][ T6801] ? load_module+0x8220/0x8220 [ 982.679280][ T6801] ? __ia32_sys_read+0xb0/0xb0 [ 982.684044][ T6801] ? switch_fpu_return+0x1fa/0x4f0 [ 982.689159][ T6801] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 982.695401][ T6801] __x64_sys_init_module+0x6e/0xb0 [ 982.700514][ T6801] do_syscall_64+0xfd/0x6a0 [ 982.705018][ T6801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.705028][ T6801] RIP: 0033:0x4598e9 [ 982.705045][ T6801] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.734362][ T6801] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 982.734374][ T6801] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 982.734382][ T6801] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 982.734389][ T6801] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.734396][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 982.734403][ T6801] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 982.783846][ T6861] input: syz1 as /devices/virtual/input/input455 [ 982.790745][ T6858] input: syz1 as /devices/virtual/input/input454 [ 982.865498][ T6901] input: syz1 as /devices/virtual/input/input456 20:05:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x2, r8) 20:05:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00/\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:38 executing program 2 (fault-call:2 fault-nth:81): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:38 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") socket$inet(0x2, 0x800, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r3 = accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000540)={0xffffffff, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x200, 0x9, 0x4, 0x1000000, {}, {0x5, 0x1, 0x7, 0xcc53, 0x1c, 0x100000001, "555f5914"}, 0x10001, 0x4, @planes=&(0x7f0000000040)={0xfffffffffffff000, 0x8001, @fd=r4, 0x4}, 0x4}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f600800fef7d1fd8d9f1ec8da616540936f4ed040cb5d8dc373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee804000094a5df514a698207b6336c1473950458e80dfda43240c016ebea515ef703fd56200d4fb47dc88d0a74c8add0de02e9e970b239f77362b4ccaaee2fafe87b8b707026e49fb6b0773d59675ea366b99240b7c86706499b49d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a088734edc3e2b83ec8837501d565c7678b2e4503edaca614776c10f687576f873f88db3d132677c"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x10000, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_client='access=client'}, {@fscache='fscache'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@noextend='noextend'}], [{@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'system_u'}}]}}) [ 983.062543][ T6940] input: syz1 as /devices/virtual/input/input457 [ 983.114464][ T6946] FAULT_INJECTION: forcing a failure. [ 983.114464][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 983.142880][ T6954] FAULT_INJECTION: forcing a failure. [ 983.142880][ T6954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 983.167658][ T6946] CPU: 1 PID: 6946 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 983.175043][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.185084][ T6946] Call Trace: [ 983.185106][ T6946] dump_stack+0x172/0x1f0 [ 983.185126][ T6946] should_fail.cold+0xa/0x15 [ 983.185143][ T6946] ? fault_create_debugfs_attr+0x180/0x180 [ 983.185156][ T6946] ? page_to_nid.part.0+0x20/0x20 [ 983.185197][ T6946] ? ___might_sleep+0x163/0x280 [ 983.212969][ T6946] __should_failslab+0x121/0x190 [ 983.212989][ T6946] should_failslab+0x9/0x14 [ 983.222382][ T6946] kmem_cache_alloc_node+0x268/0x740 [ 983.227666][ T6946] ? trace_hardirqs_on+0x67/0x240 [ 983.227678][ T6946] ? __kasan_check_read+0x11/0x20 [ 983.227699][ T6946] copy_process+0x46d1/0x6b00 [ 983.242346][ T6946] ? _kstrtoul+0x170/0x170 [ 983.242363][ T6946] ? get_pid_task+0xc9/0x190 [ 983.251351][ T6946] ? __cleanup_sighand+0x60/0x60 [ 983.256289][ T6946] ? __f_unlock_pos+0x19/0x20 [ 983.260960][ T6946] ? __kasan_check_read+0x11/0x20 [ 983.265989][ T6946] ? lock_downgrade+0x920/0x920 [ 983.270922][ T6946] ? vfs_write+0x34c/0x5d0 [ 983.275336][ T6946] _do_fork+0x146/0xfa0 [ 983.279489][ T6946] ? copy_init_mm+0x20/0x20 [ 983.284011][ T6946] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 983.289550][ T6946] ? wait_for_completion+0x440/0x440 [ 983.289570][ T6946] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 983.301055][ T6946] __x64_sys_clone+0x18d/0x250 [ 983.305814][ T6946] ? ksys_write+0x1cf/0x290 [ 983.310320][ T6946] ? __ia32_sys_vfork+0xc0/0xc0 20:05:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x2, r8) [ 983.310337][ T6946] ? trace_hardirqs_off_caller+0x65/0x230 [ 983.310349][ T6946] ? trace_hardirqs_on+0x67/0x240 [ 983.310366][ T6946] do_syscall_64+0xfd/0x6a0 [ 983.310382][ T6946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.310391][ T6946] RIP: 0033:0x4598e9 [ 983.310403][ T6946] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.310409][ T6946] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:38 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 983.359826][ T6946] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 983.359832][ T6946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.359839][ T6946] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.359846][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 983.359853][ T6946] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 983.387919][ T6954] CPU: 0 PID: 6954 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 983.408262][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.408268][ T6954] Call Trace: [ 983.408286][ T6954] dump_stack+0x172/0x1f0 [ 983.408307][ T6954] should_fail.cold+0xa/0x15 [ 983.425696][ T6954] ? fault_create_debugfs_attr+0x180/0x180 [ 983.425718][ T6954] ? ___might_sleep+0x163/0x280 [ 983.437866][ T6954] should_fail_alloc_page+0x50/0x60 [ 983.437884][ T6954] __alloc_pages_nodemask+0x1a1/0x900 [ 983.448492][ T6954] ? __alloc_pages_slowpath+0x2520/0x2520 [ 983.448508][ T6954] ? kasan_unpoison_shadow+0x35/0x50 [ 983.448529][ T6954] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 983.459052][ T6954] alloc_pages_current+0x107/0x210 [ 983.459066][ T6954] ? ___might_sleep+0x163/0x280 [ 983.459081][ T6954] __vmalloc_node_range+0x4a9/0x7d0 [ 983.459098][ T6954] __vmalloc+0x44/0x50 [ 983.470048][ T6954] ? __do_sys_init_module+0x16e/0x240 [ 983.470063][ T6954] __do_sys_init_module+0x16e/0x240 [ 983.470077][ T6954] ? load_module+0x8220/0x8220 [ 983.470099][ T6954] ? __ia32_sys_read+0xb0/0xb0 [ 983.481410][ T6954] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 983.481427][ T6954] __x64_sys_init_module+0x6e/0xb0 [ 983.481444][ T6954] do_syscall_64+0xfd/0x6a0 [ 983.481462][ T6954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.491464][ T6954] RIP: 0033:0x4598e9 [ 983.491479][ T6954] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.491486][ T6954] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 983.491498][ T6954] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 983.491510][ T6954] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 983.500891][ T6954] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 983.500898][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 983.500906][ T6954] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:39 executing program 2 (fault-call:2 fault-nth:82): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) r8 = getpid() ioprio_get$pid(0x2, r8) [ 983.674872][ T6948] input: syz1 as /devices/virtual/input/input458 20:05:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x03\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:39 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 983.843997][ T7195] FAULT_INJECTION: forcing a failure. [ 983.843997][ T7195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 983.873397][ T7195] CPU: 1 PID: 7195 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 983.880800][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.890848][ T7195] Call Trace: [ 983.890868][ T7195] dump_stack+0x172/0x1f0 [ 983.890888][ T7195] should_fail.cold+0xa/0x15 [ 983.890904][ T7195] ? fault_create_debugfs_attr+0x180/0x180 [ 983.890918][ T7195] ? ___might_sleep+0x163/0x280 [ 983.890940][ T7195] should_fail_alloc_page+0x50/0x60 [ 983.898524][ T7195] __alloc_pages_nodemask+0x1a1/0x900 [ 983.898544][ T7195] ? __alloc_pages_slowpath+0x2520/0x2520 [ 983.908905][ T7195] ? kasan_unpoison_shadow+0x35/0x50 [ 983.908922][ T7195] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 983.908940][ T7195] alloc_pages_current+0x107/0x210 [ 983.908953][ T7195] ? ___might_sleep+0x163/0x280 [ 983.908967][ T7195] __vmalloc_node_range+0x4a9/0x7d0 [ 983.908985][ T7195] __vmalloc+0x44/0x50 [ 983.919003][ T7195] ? __do_sys_init_module+0x16e/0x240 [ 983.919016][ T7195] __do_sys_init_module+0x16e/0x240 [ 983.919029][ T7195] ? load_module+0x8220/0x8220 [ 983.919051][ T7195] ? __ia32_sys_read+0xb0/0xb0 [ 983.919065][ T7195] ? switch_fpu_return+0x1fa/0x4f0 [ 983.919081][ T7195] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 983.919101][ T7195] __x64_sys_init_module+0x6e/0xb0 [ 983.930163][ T7195] do_syscall_64+0xfd/0x6a0 [ 983.930181][ T7195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.930191][ T7195] RIP: 0033:0x4598e9 [ 983.930204][ T7195] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.930210][ T7195] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 983.930221][ T7195] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 983.930228][ T7195] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 983.930234][ T7195] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 983.930247][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 983.941720][ T7195] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 983.952457][ T7244] FAULT_INJECTION: forcing a failure. [ 983.952457][ T7244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 983.964043][ T7244] CPU: 1 PID: 7244 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 983.971647][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.971652][ T7244] Call Trace: [ 983.971674][ T7244] dump_stack+0x172/0x1f0 [ 983.971694][ T7244] should_fail.cold+0xa/0x15 [ 983.971713][ T7244] ? fault_create_debugfs_attr+0x180/0x180 [ 983.971729][ T7244] ? ___might_sleep+0x163/0x280 [ 983.971748][ T7244] should_fail_alloc_page+0x50/0x60 [ 983.971760][ T7244] __alloc_pages_nodemask+0x1a1/0x900 [ 983.971775][ T7244] ? __alloc_pages_slowpath+0x2520/0x2520 [ 983.971788][ T7244] ? percpu_ref_put_many+0xb6/0x190 [ 983.971806][ T7244] ? trace_hardirqs_on+0x67/0x240 [ 983.981290][ T7244] ? __kasan_check_read+0x11/0x20 [ 983.981308][ T7244] copy_process+0x3f8/0x6b00 [ 983.981321][ T7244] ? _kstrtoul+0x170/0x170 [ 983.981338][ T7244] ? get_pid_task+0xc9/0x190 [ 983.992470][ T7244] ? __cleanup_sighand+0x60/0x60 [ 983.992482][ T7244] ? __f_unlock_pos+0x19/0x20 [ 983.992499][ T7244] ? __kasan_check_read+0x11/0x20 20:05:39 executing program 2 (fault-call:2 fault-nth:83): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:39 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = request_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, r2) r3 = request_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000001c0)='\x00', 0xfffffffffffffffb) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, r3) r4 = request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='!\x00', r3) r5 = add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="f39158f0be2cd2680543e969d1ac1334047dcdeb153cfc36845d30523d5bd9a45738d554d798d741ffb6db611b4868cef005cc9858602c993c662272f3cc908675338fd6", 0x44, 0x0) keyctl$search(0xa, r4, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x3}, r5) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r6 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000340)='./file0\x00', r6}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r7, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000004c0)='system_u:object_r:agp_device_t:s0\x00', 0x22, 0x7) 20:05:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) ioprio_get$pid(0x2, 0x0) [ 984.002064][ T7244] ? lock_downgrade+0x920/0x920 [ 984.002077][ T7244] ? vfs_write+0x34c/0x5d0 [ 984.002097][ T7244] _do_fork+0x146/0xfa0 [ 984.031448][ T7244] ? copy_init_mm+0x20/0x20 [ 984.031461][ T7244] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 984.031472][ T7244] ? wait_for_completion+0x440/0x440 [ 984.031490][ T7244] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 984.031503][ T7244] __x64_sys_clone+0x18d/0x250 [ 984.031521][ T7244] ? ksys_write+0x1cf/0x290 [ 984.047878][ T7244] ? __ia32_sys_vfork+0xc0/0xc0 20:05:39 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 984.056014][ T7219] input: syz1 as /devices/virtual/input/input459 [ 984.063774][ T7244] ? trace_hardirqs_off_caller+0x65/0x230 [ 984.063786][ T7244] ? trace_hardirqs_on+0x67/0x240 [ 984.063802][ T7244] do_syscall_64+0xfd/0x6a0 [ 984.063822][ T7244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.079716][ T7244] RIP: 0033:0x4598e9 [ 984.079731][ T7244] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.079743][ T7244] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 984.100243][ T7244] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 984.100250][ T7244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 984.100257][ T7244] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.100265][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 984.100272][ T7244] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:39 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 984.275440][ T7295] FAULT_INJECTION: forcing a failure. [ 984.275440][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 984.371084][ T7307] FAULT_INJECTION: forcing a failure. [ 984.371084][ T7307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 984.384870][ T7307] CPU: 0 PID: 7307 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 984.392253][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.402299][ T7307] Call Trace: [ 984.402324][ T7307] dump_stack+0x172/0x1f0 [ 984.402345][ T7307] should_fail.cold+0xa/0x15 [ 984.402366][ T7307] ? fault_create_debugfs_attr+0x180/0x180 [ 984.414535][ T7307] ? ___might_sleep+0x163/0x280 [ 984.414560][ T7307] should_fail_alloc_page+0x50/0x60 [ 984.425181][ T7307] __alloc_pages_nodemask+0x1a1/0x900 [ 984.425197][ T7307] ? __alloc_pages_slowpath+0x2520/0x2520 [ 984.425216][ T7307] ? kasan_unpoison_shadow+0x35/0x50 [ 984.441436][ T7307] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 984.441453][ T7307] alloc_pages_current+0x107/0x210 [ 984.441465][ T7307] ? ___might_sleep+0x163/0x280 [ 984.441483][ T7307] __vmalloc_node_range+0x4a9/0x7d0 [ 984.458057][ T7307] __vmalloc+0x44/0x50 [ 984.458071][ T7307] ? __do_sys_init_module+0x16e/0x240 [ 984.458088][ T7307] __do_sys_init_module+0x16e/0x240 [ 984.468089][ T7307] ? load_module+0x8220/0x8220 [ 984.468111][ T7307] ? __ia32_sys_read+0xb0/0xb0 [ 984.477505][ T7307] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 984.477523][ T7307] __x64_sys_init_module+0x6e/0xb0 [ 984.477542][ T7307] do_syscall_64+0xfd/0x6a0 [ 984.487453][ T7307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.487464][ T7307] RIP: 0033:0x4598e9 [ 984.487480][ T7307] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.498252][ T7307] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 984.498265][ T7307] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 984.498274][ T7307] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 984.498281][ T7307] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.498288][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 984.498300][ T7307] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 984.519381][ T7295] CPU: 0 PID: 7295 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 984.547144][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.547149][ T7295] Call Trace: [ 984.547167][ T7295] dump_stack+0x172/0x1f0 [ 984.547187][ T7295] should_fail.cold+0xa/0x15 [ 984.563101][ T7295] ? fault_create_debugfs_attr+0x180/0x180 [ 984.563114][ T7295] ? page_to_nid.part.0+0x20/0x20 [ 984.563134][ T7295] ? ___might_sleep+0x163/0x280 [ 984.579035][ T7295] __should_failslab+0x121/0x190 [ 984.579052][ T7295] should_failslab+0x9/0x14 [ 984.579068][ T7295] kmem_cache_alloc+0x2aa/0x710 [ 984.594360][ T7295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.594377][ T7295] ? __validate_process_creds+0x22d/0x380 [ 984.594390][ T7295] prepare_creds+0x3e/0x430 [ 984.594401][ T7295] copy_creds+0xa8/0x7a0 [ 984.594420][ T7295] copy_process+0xdd7/0x6b00 [ 984.607711][ T7295] ? _kstrtoul+0x170/0x170 [ 984.607724][ T7295] ? get_pid_task+0xc9/0x190 [ 984.607743][ T7295] ? __cleanup_sighand+0x60/0x60 [ 984.616605][ T7295] ? __f_unlock_pos+0x19/0x20 [ 984.616617][ T7295] ? __kasan_check_read+0x11/0x20 20:05:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 984.616638][ T7295] ? lock_downgrade+0x920/0x920 [ 984.627520][ T7295] ? vfs_write+0x34c/0x5d0 [ 984.627536][ T7295] _do_fork+0x146/0xfa0 [ 984.627553][ T7295] ? copy_init_mm+0x20/0x20 [ 984.637288][ T7295] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 984.637306][ T7295] ? wait_for_completion+0x440/0x440 [ 984.646643][ T7295] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 984.646668][ T7295] __x64_sys_clone+0x18d/0x250 [ 984.658570][ T7295] ? ksys_write+0x1cf/0x290 [ 984.658583][ T7295] ? __ia32_sys_vfork+0xc0/0xc0 [ 984.658600][ T7295] ? trace_hardirqs_off_caller+0x65/0x230 [ 984.667304][ T7295] ? trace_hardirqs_on+0x67/0x240 [ 984.667322][ T7295] do_syscall_64+0xfd/0x6a0 [ 984.667342][ T7295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.680867][ T7295] RIP: 0033:0x4598e9 [ 984.690443][ T7295] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.690451][ T7295] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:40 executing program 2 (fault-call:2 fault-nth:84): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:40 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 984.690463][ T7295] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 984.690470][ T7295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 984.690476][ T7295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.690483][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 984.690495][ T7295] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 984.863170][ T7219] input: syz1 as /devices/virtual/input/input460 20:05:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 984.977578][ T7428] FAULT_INJECTION: forcing a failure. [ 984.977578][ T7428] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 985.004696][ T7428] CPU: 1 PID: 7428 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 985.012094][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.022146][ T7428] Call Trace: [ 985.025437][ T7428] dump_stack+0x172/0x1f0 [ 985.029777][ T7428] should_fail.cold+0xa/0x15 [ 985.034385][ T7428] ? fault_create_debugfs_attr+0x180/0x180 [ 985.040191][ T7428] ? ___might_sleep+0x163/0x280 [ 985.040215][ T7428] should_fail_alloc_page+0x50/0x60 [ 985.040227][ T7428] __alloc_pages_nodemask+0x1a1/0x900 [ 985.040240][ T7428] ? __alloc_pages_slowpath+0x2520/0x2520 [ 985.040258][ T7428] ? kasan_unpoison_shadow+0x35/0x50 [ 985.040278][ T7428] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 985.055647][ T7428] alloc_pages_current+0x107/0x210 [ 985.055660][ T7428] ? ___might_sleep+0x163/0x280 [ 985.055678][ T7428] __vmalloc_node_range+0x4a9/0x7d0 [ 985.061872][ T7434] FAULT_INJECTION: forcing a failure. [ 985.061872][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 985.066676][ T7428] __vmalloc+0x44/0x50 [ 985.066689][ T7428] ? __do_sys_init_module+0x16e/0x240 [ 985.066707][ T7428] __do_sys_init_module+0x16e/0x240 [ 985.078106][ T7428] ? load_module+0x8220/0x8220 [ 985.078128][ T7428] ? __ia32_sys_read+0xb0/0xb0 [ 985.078147][ T7428] ? switch_fpu_return+0x1fa/0x4f0 [ 985.100706][ T7428] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 985.100725][ T7428] __x64_sys_init_module+0x6e/0xb0 [ 985.100740][ T7428] do_syscall_64+0xfd/0x6a0 [ 985.100754][ T7428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.100769][ T7428] RIP: 0033:0x4598e9 [ 985.125259][ T7428] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:05:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x05\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) ioprio_get$pid(0x2, 0x0) [ 985.125267][ T7428] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 985.125278][ T7428] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 985.125292][ T7428] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 985.141496][ T7428] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.141504][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 985.141511][ T7428] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 985.234523][ T7434] CPU: 0 PID: 7434 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 985.241904][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.241909][ T7434] Call Trace: [ 985.241928][ T7434] dump_stack+0x172/0x1f0 [ 985.241946][ T7434] should_fail.cold+0xa/0x15 [ 985.241960][ T7434] ? fault_create_debugfs_attr+0x180/0x180 [ 985.241978][ T7434] ? page_to_nid.part.0+0x20/0x20 [ 985.269957][ T7434] ? ___might_sleep+0x163/0x280 [ 985.269975][ T7434] __should_failslab+0x121/0x190 [ 985.269989][ T7434] should_failslab+0x9/0x14 [ 985.270004][ T7434] __kmalloc+0x2e0/0x770 [ 985.279852][ T7434] ? refcount_inc_not_zero_checked+0x144/0x200 [ 985.279867][ T7434] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 985.279881][ T7434] ? security_prepare_creds+0x11d/0x190 [ 985.279898][ T7434] security_prepare_creds+0x11d/0x190 [ 985.286653][ T7441] input: syz1 as /devices/virtual/input/input461 [ 985.290850][ T7434] prepare_creds+0x32a/0x430 [ 985.290863][ T7434] copy_creds+0xa8/0x7a0 20:05:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x508300, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r8, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r9, r11}}}], 0x20}, 0x0) r12 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r13, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r14, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r15 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r15, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r16, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r17 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001500)=0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r19, &(0x7f0000002b80)=[{&(0x7f0000001980)=""/49}, {&(0x7f00000019c0)=""/177}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000002a80)=""/238, 0xffffffffffffff00}], 0x1db, 0x1000000000000) getsockopt$inet6_IPV6_XFRM_POLICY(r19, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) r21 = getpid() sched_setscheduler(r21, 0x5, &(0x7f0000000380)) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r22, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xff91, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r23, r25}}}], 0x126}, 0x0) sendmsg$unix(r2, &(0x7f0000001780)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f00000000c0)="cebc0ccc0f379f90b1f45c70f275fb077a44e1b82d6e23b58504a5df48eba7f92bb618aaf6573fe4c7", 0x29}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000140)="deae", 0x2}, {&(0x7f0000000180)="9e701c450f508273e0d68d717fcefc1e953f0fbc1d808c027f3cb11843870b9adbcd622e1c602bd0a3e24d38522737e6af17b3cf07de2afd36ea7f2b45a0d972361c8eadef8a07b39287ba5372f355f6b806c05e7ece375a404320b9098815cfc152494cc899fbd4a4080b2d69bcb0b1639b8492e3480c7a6b1260cd3b6274700262ab4b08673aea07ae250d77eb54b6eb6045b1cf74f5e7046d63c5639708f73ced5889dfc551fd205c276a95655349747bad5a", 0xb4}, {&(0x7f0000000240)="5ab1cdbc43ea1ca17bcdf0265d4c56881fcc8fe5199e4da57e2fdd10ff375537731452a98fcfebef25d2155f9b8501cfacbc76695d4ad8dabb416545de713582a414aeec1005c8a0ac02ef518e477336e8281e745b36e66858ae2562ca54b754c97ea0bf9e486a8a1f359fe741b680c51a3d86b03923c562ee846e72f6559349d61ead4c30c0ea5c4405c0937c11de170e7daf56764dffab07e8092a59d335e6d6758f21f6d07befabb942025f9b6006e9fd6849d2f789adcbfce896b195f63e9d7d5cb0414f04c6d04d7222db61eff15042c7a5e63edf1daf1f431ba6e0cc7cb3a0d8b52c77ebd704c6865f1104c21644cceb13", 0xf4}], 0x5, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000f4ffffff00000034a0000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000013dfe1ee", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r20, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r25, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x40}, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c767740f5c84dff523d9a232f92e35c0a039475ad73c90b184ca199c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d6d73e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c14744fdec1c58725b0566a2013950456200e79f77362b4caeaee2fafe87b8b707006e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4504a645ccd795f395cb20805a23edaca614776c10f687576f873f88db3d132677c2b9f4d81863339fcc0626240716e65243ff932b8"], 0x1) r26 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r26, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$inet6_opts(r26, 0x29, 0x6, 0x0, 0x20b) [ 985.290877][ T7434] copy_process+0xdd7/0x6b00 [ 985.290894][ T7434] ? _kstrtoul+0x170/0x170 [ 985.301584][ T7434] ? get_pid_task+0xc9/0x190 [ 985.301603][ T7434] ? __cleanup_sighand+0x60/0x60 [ 985.301614][ T7434] ? __f_unlock_pos+0x19/0x20 [ 985.301632][ T7434] ? __kasan_check_read+0x11/0x20 [ 985.312948][ T7434] ? lock_downgrade+0x920/0x920 [ 985.312962][ T7434] ? vfs_write+0x34c/0x5d0 [ 985.312980][ T7434] _do_fork+0x146/0xfa0 [ 985.324640][ T7434] ? copy_init_mm+0x20/0x20 [ 985.324654][ T7434] ? __mutex_unlock_slowpath+0xf8/0x6b0 20:05:40 executing program 2 (fault-call:2 fault-nth:85): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 985.324670][ T7434] ? wait_for_completion+0x440/0x440 [ 985.333474][ T7434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 985.333489][ T7434] __x64_sys_clone+0x18d/0x250 [ 985.333506][ T7434] ? ksys_write+0x1cf/0x290 [ 985.342461][ T7434] ? __ia32_sys_vfork+0xc0/0xc0 [ 985.342478][ T7434] ? trace_hardirqs_off_caller+0x65/0x230 [ 985.342489][ T7434] ? trace_hardirqs_on+0x67/0x240 [ 985.342508][ T7434] do_syscall_64+0xfd/0x6a0 [ 985.351990][ T7434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.352004][ T7434] RIP: 0033:0x4598e9 [ 985.361664][ T7434] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.361675][ T7434] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 985.370893][ T7434] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 985.370902][ T7434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 985.370910][ T7434] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.370917][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 985.370924][ T7434] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 985.462953][ T7460] FAULT_INJECTION: forcing a failure. [ 985.462953][ T7460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 985.491007][ T7460] CPU: 0 PID: 7460 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 985.517234][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.517240][ T7460] Call Trace: [ 985.517263][ T7460] dump_stack+0x172/0x1f0 [ 985.517282][ T7460] should_fail.cold+0xa/0x15 [ 985.517297][ T7460] ? fault_create_debugfs_attr+0x180/0x180 [ 985.517322][ T7460] ? ___might_sleep+0x163/0x280 [ 985.557536][ T7460] should_fail_alloc_page+0x50/0x60 [ 985.562752][ T7460] __alloc_pages_nodemask+0x1a1/0x900 [ 985.562769][ T7460] ? __alloc_pages_slowpath+0x2520/0x2520 [ 985.562790][ T7460] ? kasan_unpoison_shadow+0x35/0x50 [ 985.573861][ T7460] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 985.573878][ T7460] alloc_pages_current+0x107/0x210 [ 985.573893][ T7460] ? ___might_sleep+0x163/0x280 [ 985.573907][ T7460] __vmalloc_node_range+0x4a9/0x7d0 [ 985.573925][ T7460] __vmalloc+0x44/0x50 [ 985.585401][ T7460] ? __do_sys_init_module+0x16e/0x240 [ 985.585416][ T7460] __do_sys_init_module+0x16e/0x240 [ 985.585438][ T7460] ? load_module+0x8220/0x8220 [ 985.595360][ T7460] ? __ia32_sys_read+0xb0/0xb0 [ 985.595375][ T7460] ? switch_fpu_return+0x1fa/0x4f0 [ 985.595397][ T7460] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 985.629713][ T7460] __x64_sys_init_module+0x6e/0xb0 [ 985.629730][ T7460] do_syscall_64+0xfd/0x6a0 [ 985.629746][ T7460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.629760][ T7460] RIP: 0033:0x4598e9 [ 985.651261][ T7460] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.651269][ T7460] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af 20:05:41 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 985.651282][ T7460] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 985.651295][ T7460] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 985.674758][ T7460] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 985.674765][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 985.674773][ T7460] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:41 executing program 2 (fault-call:2 fault-nth:86): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000001c80)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) sched_setscheduler(r2, 0x6, &(0x7f0000000080)=0xc01) ioprio_get$pid(0x2, 0x0) [ 985.762886][ T7441] input: syz1 as /devices/virtual/input/input462 [ 985.773625][ T7560] FAULT_INJECTION: forcing a failure. [ 985.773625][ T7560] name failslab, interval 1, probability 0, space 0, times 0 20:05:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 985.824377][ T7560] CPU: 1 PID: 7560 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 985.831771][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.841828][ T7560] Call Trace: [ 985.845126][ T7560] dump_stack+0x172/0x1f0 [ 985.849469][ T7560] should_fail.cold+0xa/0x15 [ 985.854068][ T7560] ? fault_create_debugfs_attr+0x180/0x180 [ 985.859882][ T7560] ? lock_acquire+0x20b/0x410 [ 985.864565][ T7560] ? ___might_sleep+0x163/0x280 [ 985.869418][ T7560] __should_failslab+0x121/0x190 20:05:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) r7 = getpid() ioprio_get$pid(0x2, r7) [ 985.874353][ T7560] should_failslab+0x9/0x14 [ 985.874367][ T7560] kmem_cache_alloc+0x2aa/0x710 [ 985.874382][ T7560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.874401][ T7560] __delayacct_tsk_init+0x20/0x80 [ 985.889976][ T7560] copy_process+0x4762/0x6b00 [ 985.889991][ T7560] ? _kstrtoul+0x170/0x170 [ 985.890004][ T7560] ? get_pid_task+0xc9/0x190 [ 985.890020][ T7560] ? __cleanup_sighand+0x60/0x60 [ 985.890031][ T7560] ? __f_unlock_pos+0x19/0x20 [ 985.890043][ T7560] ? __kasan_check_read+0x11/0x20 [ 985.890060][ T7560] ? lock_downgrade+0x920/0x920 [ 985.890071][ T7560] ? vfs_write+0x34c/0x5d0 [ 985.890089][ T7560] _do_fork+0x146/0xfa0 [ 985.908738][ T7560] ? copy_init_mm+0x20/0x20 [ 985.908756][ T7560] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 985.908776][ T7560] ? wait_for_completion+0x440/0x440 [ 985.928208][ T7560] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 985.928227][ T7560] __x64_sys_clone+0x18d/0x250 [ 985.928241][ T7560] ? ksys_write+0x1cf/0x290 [ 985.928253][ T7560] ? __ia32_sys_vfork+0xc0/0xc0 [ 985.928272][ T7560] ? trace_hardirqs_off_caller+0x65/0x230 [ 985.936807][ T7560] ? trace_hardirqs_on+0x67/0x240 [ 985.936827][ T7560] do_syscall_64+0xfd/0x6a0 [ 985.946848][ T7560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.946860][ T7560] RIP: 0033:0x4598e9 [ 985.946874][ T7560] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.946888][ T7560] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 985.958360][ T7560] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 985.958366][ T7560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 985.958374][ T7560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 985.958382][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 985.958390][ T7560] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x4, 0x0, 0x2}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0x37e7, 0x2726, 0x8}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 986.095061][ T7594] FAULT_INJECTION: forcing a failure. [ 986.095061][ T7594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 986.110166][ T7466] delete_channel: no stack [ 986.154613][ T7594] CPU: 0 PID: 7594 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 986.161997][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.162002][ T7594] Call Trace: [ 986.162029][ T7594] dump_stack+0x172/0x1f0 [ 986.175340][ T7594] should_fail.cold+0xa/0x15 [ 986.175359][ T7594] ? fault_create_debugfs_attr+0x180/0x180 [ 986.185460][ T7594] ? ___might_sleep+0x163/0x280 [ 986.185482][ T7594] should_fail_alloc_page+0x50/0x60 [ 986.197301][ T7594] __alloc_pages_nodemask+0x1a1/0x900 [ 986.197321][ T7594] ? __alloc_pages_slowpath+0x2520/0x2520 [ 986.213545][ T7594] ? kasan_unpoison_shadow+0x35/0x50 [ 986.213567][ T7594] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 986.225138][ T7594] alloc_pages_current+0x107/0x210 [ 986.230262][ T7594] ? ___might_sleep+0x163/0x280 [ 986.235112][ T7594] __vmalloc_node_range+0x4a9/0x7d0 [ 986.235132][ T7594] __vmalloc+0x44/0x50 [ 986.244353][ T7594] ? __do_sys_init_module+0x16e/0x240 [ 986.244366][ T7594] __do_sys_init_module+0x16e/0x240 [ 986.244382][ T7594] ? load_module+0x8220/0x8220 [ 986.254903][ T7594] ? __ia32_sys_read+0xb0/0xb0 [ 986.254922][ T7594] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 986.264395][ T7594] __x64_sys_init_module+0x6e/0xb0 [ 986.264417][ T7594] do_syscall_64+0xfd/0x6a0 [ 986.275545][ T7594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.275554][ T7594] RIP: 0033:0x4598e9 20:05:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00]\a\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 986.275571][ T7594] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.285917][ T7594] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 986.285930][ T7594] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 986.285936][ T7594] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 986.285948][ T7594] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 986.309398][ T7594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 20:05:41 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 986.309406][ T7594] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 986.362025][ T7663] input: syz1 as /devices/virtual/input/input463 [ 986.432788][ T7671] input: syz1 as /devices/virtual/input/input464 [ 986.442841][ T7669] FAULT_INJECTION: forcing a failure. [ 986.442841][ T7669] name failslab, interval 1, probability 0, space 0, times 0 [ 986.458993][ T7669] CPU: 1 PID: 7669 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 986.466379][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.476428][ T7669] Call Trace: 20:05:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) getpgid(0xffffffffffffffff) r7 = getpid() ioprio_get$pid(0x2, r7) [ 986.479723][ T7669] dump_stack+0x172/0x1f0 [ 986.484068][ T7669] should_fail.cold+0xa/0x15 [ 986.484099][ T7669] ? fault_create_debugfs_attr+0x180/0x180 [ 986.484117][ T7669] ? page_to_nid.part.0+0x20/0x20 [ 986.499510][ T7669] ? ___might_sleep+0x163/0x280 [ 986.504363][ T7669] __should_failslab+0x121/0x190 [ 986.509493][ T7669] should_failslab+0x9/0x14 [ 986.509510][ T7669] __kmalloc+0x2e0/0x770 [ 986.518237][ T7669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.524477][ T7669] ? audit_alloc+0xae/0x770 20:05:41 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 986.528983][ T7669] ? security_task_alloc+0x111/0x180 [ 986.534273][ T7669] security_task_alloc+0x111/0x180 [ 986.539388][ T7669] copy_process+0x1bc3/0x6b00 [ 986.544058][ T7669] ? _kstrtoul+0x170/0x170 [ 986.548477][ T7669] ? __cleanup_sighand+0x60/0x60 [ 986.553409][ T7669] ? __f_unlock_pos+0x19/0x20 [ 986.558697][ T7669] ? __kasan_check_read+0x11/0x20 [ 986.563707][ T7669] ? lock_downgrade+0x920/0x920 [ 986.568541][ T7669] ? vfs_write+0x34c/0x5d0 [ 986.573289][ T7669] _do_fork+0x146/0xfa0 [ 986.577437][ T7669] ? copy_init_mm+0x20/0x20 [ 986.581922][ T7669] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 986.588141][ T7669] ? wait_for_completion+0x440/0x440 [ 986.593420][ T7669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.599639][ T7669] __x64_sys_clone+0x18d/0x250 [ 986.604391][ T7669] ? ksys_write+0x1cf/0x290 [ 986.608882][ T7669] ? __ia32_sys_vfork+0xc0/0xc0 [ 986.613711][ T7669] ? trace_hardirqs_off_caller+0x65/0x230 [ 986.619407][ T7669] ? trace_hardirqs_on+0x67/0x240 [ 986.624419][ T7669] do_syscall_64+0xfd/0x6a0 [ 986.628914][ T7669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.634781][ T7669] RIP: 0033:0x4598e9 [ 986.638663][ T7669] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.658245][ T7669] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 986.666631][ T7669] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 986.674583][ T7669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:05:42 executing program 2 (fault-call:2 fault-nth:87): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 986.682545][ T7669] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 986.690495][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 986.698444][ T7669] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x10000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x5, 0x1a, 0x40, 0x5cd, "e5684c5c7f25ec1aec83781e185c333335775a6d7275797230469a64cee8aef8"}) ioctl(r1, 0x1000008912, &(0x7f0000000440)="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") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\t\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() ioprio_get$pid(0x2, r7) 20:05:42 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x10000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRESHEX=r3, @ANYRESOCT=r3, @ANYRESOCT], 0x5) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 986.875236][ T7705] FAULT_INJECTION: forcing a failure. [ 986.875236][ T7705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 986.898522][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 986.945688][ T7711] input: syz1 as /devices/virtual/input/input465 [ 986.961086][ T7705] CPU: 0 PID: 7705 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 986.968480][ T7705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.978531][ T7705] Call Trace: [ 986.981826][ T7705] dump_stack+0x172/0x1f0 [ 986.986168][ T7705] should_fail.cold+0xa/0x15 [ 986.990764][ T7705] ? fault_create_debugfs_attr+0x180/0x180 [ 986.996082][ T7755] FAULT_INJECTION: forcing a failure. [ 986.996082][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 986.996575][ T7705] ? ___might_sleep+0x163/0x280 [ 987.013970][ T7705] should_fail_alloc_page+0x50/0x60 [ 987.019168][ T7705] __alloc_pages_nodemask+0x1a1/0x900 [ 987.024619][ T7705] ? __alloc_pages_slowpath+0x2520/0x2520 [ 987.030333][ T7705] ? kasan_unpoison_shadow+0x35/0x50 [ 987.035607][ T7705] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 987.041836][ T7705] alloc_pages_current+0x107/0x210 [ 987.046938][ T7705] ? ___might_sleep+0x163/0x280 [ 987.051779][ T7705] __vmalloc_node_range+0x4a9/0x7d0 [ 987.056968][ T7705] __vmalloc+0x44/0x50 [ 987.061114][ T7705] ? __do_sys_init_module+0x16e/0x240 [ 987.066476][ T7705] __do_sys_init_module+0x16e/0x240 [ 987.071668][ T7705] ? load_module+0x8220/0x8220 [ 987.076428][ T7705] ? __ia32_sys_read+0xb0/0xb0 [ 987.081181][ T7705] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 987.087234][ T7705] __x64_sys_init_module+0x6e/0xb0 [ 987.092333][ T7705] do_syscall_64+0xfd/0x6a0 [ 987.096834][ T7705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.102714][ T7705] RIP: 0033:0x4598e9 [ 987.106604][ T7705] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.126197][ T7705] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 987.134598][ T7705] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 20:05:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) getpid() r6 = getpid() ioprio_get$pid(0x2, r6) [ 987.142554][ T7705] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 987.150514][ T7705] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.158469][ T7705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 987.166447][ T7705] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 987.174420][ T7755] CPU: 1 PID: 7755 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 987.181791][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.191840][ T7755] Call Trace: [ 987.195313][ T7755] dump_stack+0x172/0x1f0 [ 987.199647][ T7755] should_fail.cold+0xa/0x15 [ 987.204243][ T7755] ? fault_create_debugfs_attr+0x180/0x180 [ 987.210048][ T7755] ? page_to_nid.part.0+0x20/0x20 [ 987.210061][ T7755] ? ___might_sleep+0x163/0x280 [ 987.210079][ T7755] __should_failslab+0x121/0x190 [ 987.210093][ T7755] should_failslab+0x9/0x14 [ 987.210112][ T7755] kmem_cache_alloc+0x2aa/0x710 [ 987.234205][ T7755] ? kasan_kmalloc+0x9/0x10 [ 987.234221][ T7755] ? __kmalloc+0x351/0x770 [ 987.243096][ T7755] dup_fd+0x85/0xb70 [ 987.243114][ T7755] ? __kasan_check_write+0x14/0x20 [ 987.252073][ T7755] ? apparmor_task_alloc+0x1d3/0x230 [ 987.257366][ T7755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.263608][ T7755] ? security_task_alloc+0xed/0x180 [ 987.268799][ T7755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 987.275386][ T7755] copy_process+0x1c78/0x6b00 [ 987.280073][ T7755] ? _kstrtoul+0x170/0x170 [ 987.280091][ T7755] ? __cleanup_sighand+0x60/0x60 [ 987.280104][ T7755] ? __f_unlock_pos+0x19/0x20 20:05:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 987.280116][ T7755] ? __kasan_check_read+0x11/0x20 [ 987.280136][ T7755] ? lock_downgrade+0x920/0x920 [ 987.303937][ T7755] ? vfs_write+0x34c/0x5d0 [ 987.308363][ T7755] _do_fork+0x146/0xfa0 [ 987.312520][ T7755] ? copy_init_mm+0x20/0x20 [ 987.317025][ T7755] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 987.322566][ T7755] ? wait_for_completion+0x440/0x440 [ 987.327852][ T7755] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.334095][ T7755] __x64_sys_clone+0x18d/0x250 [ 987.338872][ T7755] ? ksys_write+0x1cf/0x290 [ 987.343379][ T7755] ? __ia32_sys_vfork+0xc0/0xc0 [ 987.348225][ T7755] ? trace_hardirqs_off_caller+0x65/0x230 [ 987.353927][ T7755] ? trace_hardirqs_on+0x67/0x240 [ 987.353942][ T7755] do_syscall_64+0xfd/0x6a0 [ 987.353959][ T7755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.353967][ T7755] RIP: 0033:0x4598e9 [ 987.353984][ T7755] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:05:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:42 executing program 2 (fault-call:2 fault-nth:88): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 987.363465][ T7755] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 987.392790][ T7755] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 987.392797][ T7755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.392803][ T7755] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.392810][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 987.392817][ T7755] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() ioprio_get$pid(0x2, r6) 20:05:42 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 987.501545][ T7831] FAULT_INJECTION: forcing a failure. [ 987.501545][ T7831] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 987.522291][ T7711] input: syz1 as /devices/virtual/input/input466 [ 987.535429][ T7869] FAULT_INJECTION: forcing a failure. [ 987.535429][ T7869] name failslab, interval 1, probability 0, space 0, times 0 [ 987.551408][ T7831] CPU: 0 PID: 7831 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 987.558816][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.568868][ T7831] Call Trace: [ 987.572160][ T7831] dump_stack+0x172/0x1f0 [ 987.576485][ T7831] should_fail.cold+0xa/0x15 [ 987.581070][ T7831] ? fault_create_debugfs_attr+0x180/0x180 [ 987.586902][ T7831] ? ___might_sleep+0x163/0x280 [ 987.591748][ T7831] should_fail_alloc_page+0x50/0x60 [ 987.596935][ T7831] __alloc_pages_nodemask+0x1a1/0x900 [ 987.602299][ T7831] ? __alloc_pages_slowpath+0x2520/0x2520 [ 987.608008][ T7831] ? kasan_unpoison_shadow+0x35/0x50 [ 987.613284][ T7831] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 987.619518][ T7831] alloc_pages_current+0x107/0x210 [ 987.624619][ T7831] ? ___might_sleep+0x163/0x280 [ 987.629460][ T7831] __vmalloc_node_range+0x4a9/0x7d0 [ 987.634649][ T7831] __vmalloc+0x44/0x50 [ 987.638706][ T7831] ? __do_sys_init_module+0x16e/0x240 [ 987.644067][ T7831] __do_sys_init_module+0x16e/0x240 [ 987.649255][ T7831] ? load_module+0x8220/0x8220 [ 987.654018][ T7831] ? __ia32_sys_read+0xb0/0xb0 [ 987.658771][ T7831] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 987.664831][ T7831] __x64_sys_init_module+0x6e/0xb0 [ 987.669937][ T7831] do_syscall_64+0xfd/0x6a0 [ 987.674521][ T7831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.680399][ T7831] RIP: 0033:0x4598e9 [ 987.684284][ T7831] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.703879][ T7831] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 987.712285][ T7831] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 987.720251][ T7831] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 987.728212][ T7831] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.736170][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 987.744130][ T7831] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 987.752103][ T7869] CPU: 1 PID: 7869 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 987.759471][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.769523][ T7869] Call Trace: [ 987.772812][ T7869] dump_stack+0x172/0x1f0 [ 987.777154][ T7869] should_fail.cold+0xa/0x15 [ 987.781752][ T7869] ? __kasan_check_read+0x11/0x20 [ 987.786779][ T7869] ? fault_create_debugfs_attr+0x180/0x180 [ 987.792580][ T7869] ? page_to_nid.part.0+0x20/0x20 [ 987.797632][ T7869] ? ___might_sleep+0x163/0x280 [ 987.802484][ T7869] __should_failslab+0x121/0x190 [ 987.807421][ T7869] should_failslab+0x9/0x14 [ 987.811920][ T7869] kmem_cache_alloc_trace+0x2d3/0x790 [ 987.817298][ T7869] ? rwlock_bug.part.0+0x90/0x90 [ 987.822234][ T7869] ? dup_fd+0x26f/0xb70 [ 987.826391][ T7869] alloc_fdtable+0x86/0x290 [ 987.830904][ T7869] dup_fd+0x782/0xb70 [ 987.834893][ T7869] copy_process+0x1c78/0x6b00 [ 987.839568][ T7869] ? _kstrtoul+0x170/0x170 [ 987.843989][ T7869] ? __cleanup_sighand+0x60/0x60 20:05:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x214081) mq_getsetattr(r2, &(0x7f0000000040)={0x80000000, 0x5, 0x7, 0x5, 0xffffffff, 0x3, 0x8001, 0x7}, &(0x7f0000000080)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$RTC_WIE_OFF(r4, 0x7010) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_NMI(r5, 0xae9a) [ 987.848924][ T7869] ? __f_unlock_pos+0x19/0x20 [ 987.853597][ T7869] ? __kasan_check_read+0x11/0x20 [ 987.858622][ T7869] ? lock_downgrade+0x920/0x920 [ 987.863476][ T7869] ? vfs_write+0x34c/0x5d0 [ 987.867898][ T7869] _do_fork+0x146/0xfa0 [ 987.872063][ T7869] ? copy_init_mm+0x20/0x20 [ 987.876567][ T7869] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 987.882103][ T7869] ? wait_for_completion+0x440/0x440 [ 987.882120][ T7869] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.882135][ T7869] __x64_sys_clone+0x18d/0x250 [ 987.882147][ T7869] ? ksys_write+0x1cf/0x290 [ 987.882165][ T7869] ? __ia32_sys_vfork+0xc0/0xc0 [ 987.907725][ T7869] ? trace_hardirqs_off_caller+0x65/0x230 [ 987.913449][ T7869] ? trace_hardirqs_on+0x67/0x240 [ 987.918483][ T7869] do_syscall_64+0xfd/0x6a0 [ 987.922998][ T7869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.928887][ T7869] RIP: 0033:0x4598e9 [ 987.932779][ T7869] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.952373][ T7869] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 987.952385][ T7869] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 987.952391][ T7869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.952397][ T7869] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.952404][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 987.952411][ T7869] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\xba\x0e\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) getpid() r5 = getpid() ioprio_get$pid(0x2, r5) 20:05:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:43 executing program 2 (fault-call:2 fault-nth:89): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:43 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xfff}, 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20000, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xa7d79169f2e41967, &(0x7f0000000200)=""/149, &(0x7f0000000080)=0x95) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000001c80)) r5 = getpid() ioprio_get$pid(0x2, r5) [ 988.129509][ T7963] FAULT_INJECTION: forcing a failure. [ 988.129509][ T7963] name failslab, interval 1, probability 0, space 0, times 0 [ 988.165605][ T7963] CPU: 1 PID: 7963 Comm: syz-executor.3 Not tainted 5.3.0 #0 20:05:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x624900) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r4, r6}}}], 0x20}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201300}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c020000190000032cbd7000fcdbdf25000000000000000000000000010000000000000000000000004e2300004e240080020080802c00"/64, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0x11) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_G_ENC_INDEX(r8, 0x8818564c, &(0x7f0000000b00)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bbf35354000000000000"], 0x8) r10 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x210082) getsockopt$inet_udp_int(r10, 0x11, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 988.173008][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.183058][ T7963] Call Trace: [ 988.183079][ T7963] dump_stack+0x172/0x1f0 [ 988.183102][ T7963] should_fail.cold+0xa/0x15 [ 988.195255][ T7963] ? fault_create_debugfs_attr+0x180/0x180 [ 988.201051][ T7963] ? page_to_nid.part.0+0x20/0x20 [ 988.201066][ T7963] ? ___might_sleep+0x163/0x280 [ 988.201083][ T7963] __should_failslab+0x121/0x190 [ 988.201098][ T7963] should_failslab+0x9/0x14 [ 988.201111][ T7963] kmem_cache_alloc_node_trace+0x274/0x750 [ 988.201123][ T7963] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 988.201136][ T7963] __kmalloc_node+0x3d/0x70 [ 988.201149][ T7963] kvmalloc_node+0x68/0x100 [ 988.201167][ T7963] alloc_fdtable+0xd6/0x290 [ 988.211015][ T7963] dup_fd+0x782/0xb70 [ 988.211037][ T7963] copy_process+0x1c78/0x6b00 [ 988.236483][ T7963] ? _kstrtoul+0x170/0x170 [ 988.254047][ T7963] ? __cleanup_sighand+0x60/0x60 [ 988.263455][ T7963] ? __f_unlock_pos+0x19/0x20 [ 988.268130][ T7963] ? __kasan_check_read+0x11/0x20 [ 988.273247][ T7963] ? lock_downgrade+0x920/0x920 [ 988.278094][ T7963] ? vfs_write+0x34c/0x5d0 [ 988.278110][ T7963] _do_fork+0x146/0xfa0 [ 988.278127][ T7963] ? copy_init_mm+0x20/0x20 [ 988.291141][ T7963] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 988.296684][ T7963] ? wait_for_completion+0x440/0x440 [ 988.296709][ T7963] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.308185][ T7963] __x64_sys_clone+0x18d/0x250 [ 988.308198][ T7963] ? ksys_write+0x1cf/0x290 [ 988.308214][ T7963] ? __ia32_sys_vfork+0xc0/0xc0 [ 988.317434][ T7963] ? trace_hardirqs_off_caller+0x65/0x230 [ 988.317444][ T7963] ? trace_hardirqs_on+0x67/0x240 [ 988.317464][ T7963] do_syscall_64+0xfd/0x6a0 [ 988.327990][ T7963] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.327999][ T7963] RIP: 0033:0x4598e9 [ 988.328016][ T7963] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.337493][ T7963] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 988.347230][ T7963] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 988.375204][ T7963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.375211][ T7963] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.375219][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 988.375227][ T7963] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 988.416954][ T7973] FAULT_INJECTION: forcing a failure. [ 988.416954][ T7973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 988.446457][ T7973] CPU: 0 PID: 7973 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 988.453846][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.463892][ T7973] Call Trace: [ 988.463913][ T7973] dump_stack+0x172/0x1f0 [ 988.463934][ T7973] should_fail.cold+0xa/0x15 [ 988.463950][ T7973] ? fault_create_debugfs_attr+0x180/0x180 [ 988.463971][ T7973] ? ___might_sleep+0x163/0x280 [ 988.486776][ T7973] should_fail_alloc_page+0x50/0x60 [ 988.491979][ T7973] __alloc_pages_nodemask+0x1a1/0x900 [ 988.497358][ T7973] ? __alloc_pages_slowpath+0x2520/0x2520 [ 988.503079][ T7973] ? kasan_unpoison_shadow+0x35/0x50 [ 988.508353][ T7973] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 988.514599][ T7973] alloc_pages_current+0x107/0x210 [ 988.519529][ T7965] input: syz1 as /devices/virtual/input/input467 [ 988.519707][ T7973] ? ___might_sleep+0x163/0x280 [ 988.530939][ T7973] __vmalloc_node_range+0x4a9/0x7d0 [ 988.536243][ T7973] __vmalloc+0x44/0x50 [ 988.540314][ T7973] ? __do_sys_init_module+0x16e/0x240 [ 988.545689][ T7973] __do_sys_init_module+0x16e/0x240 [ 988.550888][ T7973] ? load_module+0x8220/0x8220 [ 988.555656][ T7973] ? __ia32_sys_read+0xb0/0xb0 [ 988.555674][ T7973] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 988.555693][ T7973] __x64_sys_init_module+0x6e/0xb0 [ 988.571612][ T7973] do_syscall_64+0xfd/0x6a0 [ 988.576116][ T7973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.582002][ T7973] RIP: 0033:0x4598e9 20:05:43 executing program 3 (fault-call:2 fault-nth:9): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 988.585901][ T7973] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.605503][ T7973] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 988.613915][ T7973] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 988.620509][ T8082] FAULT_INJECTION: forcing a failure. [ 988.620509][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 988.621885][ T7973] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 20:05:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r5 = getpid() ioprio_get$pid(0x2, r5) [ 988.621894][ T7973] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 988.621901][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 988.621909][ T7973] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 988.666984][ T8082] CPU: 1 PID: 8082 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 988.674362][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.684405][ T8082] Call Trace: [ 988.684425][ T8082] dump_stack+0x172/0x1f0 [ 988.684449][ T8082] should_fail.cold+0xa/0x15 [ 988.692028][ T8082] ? fault_create_debugfs_attr+0x180/0x180 [ 988.692041][ T8082] ? page_to_nid.part.0+0x20/0x20 [ 988.692055][ T8082] ? ___might_sleep+0x163/0x280 [ 988.692077][ T8082] __should_failslab+0x121/0x190 [ 988.692092][ T8082] should_failslab+0x9/0x14 [ 988.692109][ T8082] kmem_cache_alloc_node_trace+0x274/0x750 [ 988.727564][ T8082] ? kasan_unpoison_shadow+0x35/0x50 [ 988.732856][ T8082] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 988.738669][ T8082] __kmalloc_node+0x3d/0x70 [ 988.743176][ T8082] kvmalloc_node+0x68/0x100 [ 988.747682][ T8082] alloc_fdtable+0x142/0x290 [ 988.752283][ T8082] dup_fd+0x782/0xb70 [ 988.756267][ T8082] copy_process+0x1c78/0x6b00 [ 988.760943][ T8082] ? _kstrtoul+0x170/0x170 [ 988.765368][ T8082] ? __cleanup_sighand+0x60/0x60 [ 988.770309][ T8082] ? __f_unlock_pos+0x19/0x20 [ 988.774984][ T8082] ? __kasan_check_read+0x11/0x20 [ 988.780007][ T8082] ? lock_downgrade+0x920/0x920 [ 988.780020][ T8082] ? vfs_write+0x34c/0x5d0 [ 988.780043][ T8082] _do_fork+0x146/0xfa0 [ 988.789268][ T8082] ? copy_init_mm+0x20/0x20 [ 988.789282][ T8082] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 988.789295][ T8082] ? wait_for_completion+0x440/0x440 [ 988.789312][ T8082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 988.789327][ T8082] __x64_sys_clone+0x18d/0x250 [ 988.789344][ T8082] ? ksys_write+0x1cf/0x290 [ 988.797952][ T8082] ? __ia32_sys_vfork+0xc0/0xc0 [ 988.797971][ T8082] ? trace_hardirqs_off_caller+0x65/0x230 [ 988.808745][ T8082] ? trace_hardirqs_on+0x67/0x240 [ 988.808767][ T8082] do_syscall_64+0xfd/0x6a0 [ 988.829663][ T8082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.829673][ T8082] RIP: 0033:0x4598e9 [ 988.829687][ T8082] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.829693][ T8082] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 988.829705][ T8082] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 20:05:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008916, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 988.829712][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.829719][ T8082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.829731][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 988.850778][ T8082] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 988.987812][ T8198] input: syz1 as /devices/virtual/input/input468 20:05:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x11\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:44 executing program 2 (fault-call:2 fault-nth:90): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:44 executing program 3 (fault-call:2 fault-nth:10): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r4 = getpid() ioprio_get$pid(0x2, r4) 20:05:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc04000000000000004dff523d9a233f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$void(r2, 0x5450) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0xff, 0x2, 0x2, &(0x7f0000ffd000/0x3000)=nil, 0x7ff}) [ 989.126142][ T8211] FAULT_INJECTION: forcing a failure. [ 989.126142][ T8211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 989.145776][ T8212] FAULT_INJECTION: forcing a failure. [ 989.145776][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 989.169959][ T8217] input: syz1 as /devices/virtual/input/input469 [ 989.176758][ T8212] CPU: 1 PID: 8212 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 989.184134][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.194180][ T8212] Call Trace: [ 989.194201][ T8212] dump_stack+0x172/0x1f0 [ 989.194227][ T8212] should_fail.cold+0xa/0x15 [ 989.206392][ T8212] ? fault_create_debugfs_attr+0x180/0x180 [ 989.206412][ T8212] ? page_to_nid.part.0+0x20/0x20 [ 989.217635][ T8212] ? ___might_sleep+0x163/0x280 [ 989.222495][ T8212] __should_failslab+0x121/0x190 [ 989.227435][ T8212] should_failslab+0x9/0x14 [ 989.227447][ T8212] kmem_cache_alloc+0x2aa/0x710 [ 989.227464][ T8212] ? dup_fd+0x600/0xb70 [ 989.236778][ T8212] copy_fs_struct+0x43/0x2d0 [ 989.245481][ T8212] copy_process+0x47f4/0x6b00 [ 989.245500][ T8212] ? _kstrtoul+0x170/0x170 [ 989.254550][ T8212] ? __cleanup_sighand+0x60/0x60 [ 989.254568][ T8212] ? __f_unlock_pos+0x19/0x20 [ 989.264131][ T8212] ? __kasan_check_read+0x11/0x20 [ 989.264150][ T8212] ? lock_downgrade+0x920/0x920 [ 989.264167][ T8212] ? vfs_write+0x34c/0x5d0 [ 989.279043][ T8212] _do_fork+0x146/0xfa0 [ 989.279059][ T8212] ? copy_init_mm+0x20/0x20 [ 989.279071][ T8212] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 989.279084][ T8212] ? wait_for_completion+0x440/0x440 [ 989.279102][ T8212] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.279120][ T8212] __x64_sys_clone+0x18d/0x250 [ 989.287740][ T8212] ? ksys_write+0x1cf/0x290 [ 989.287755][ T8212] ? __ia32_sys_vfork+0xc0/0xc0 [ 989.287775][ T8212] ? trace_hardirqs_off_caller+0x65/0x230 20:05:44 executing program 3 (fault-call:2 fault-nth:11): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 989.304789][ T8212] ? trace_hardirqs_on+0x67/0x240 [ 989.304813][ T8212] do_syscall_64+0xfd/0x6a0 [ 989.318888][ T8212] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.318898][ T8212] RIP: 0033:0x4598e9 [ 989.318913][ T8212] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.318919][ T8212] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 989.318930][ T8212] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 989.318936][ T8212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.318943][ T8212] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.318950][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 989.318963][ T8212] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 989.365185][ T8211] CPU: 0 PID: 8211 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 989.388233][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.404128][ T8211] Call Trace: [ 989.404147][ T8211] dump_stack+0x172/0x1f0 [ 989.404167][ T8211] should_fail.cold+0xa/0x15 [ 989.420629][ T8232] FAULT_INJECTION: forcing a failure. [ 989.420629][ T8232] name failslab, interval 1, probability 0, space 0, times 0 [ 989.429513][ T8211] ? fault_create_debugfs_attr+0x180/0x180 [ 989.429529][ T8211] ? ___might_sleep+0x163/0x280 [ 989.429553][ T8211] should_fail_alloc_page+0x50/0x60 [ 989.429571][ T8211] __alloc_pages_nodemask+0x1a1/0x900 [ 989.437157][ T8211] ? __alloc_pages_slowpath+0x2520/0x2520 [ 989.437175][ T8211] ? kasan_unpoison_shadow+0x35/0x50 [ 989.437196][ T8211] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 989.493766][ T8211] alloc_pages_current+0x107/0x210 [ 989.498869][ T8211] ? ___might_sleep+0x163/0x280 [ 989.503709][ T8211] __vmalloc_node_range+0x4a9/0x7d0 [ 989.508904][ T8211] __vmalloc+0x44/0x50 [ 989.512974][ T8211] ? __do_sys_init_module+0x16e/0x240 [ 989.518336][ T8211] __do_sys_init_module+0x16e/0x240 [ 989.523521][ T8211] ? load_module+0x8220/0x8220 [ 989.528283][ T8211] ? __ia32_sys_read+0xb0/0xb0 [ 989.533042][ T8211] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 989.539183][ T8211] __x64_sys_init_module+0x6e/0xb0 [ 989.544291][ T8211] do_syscall_64+0xfd/0x6a0 [ 989.548789][ T8211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.554677][ T8211] RIP: 0033:0x4598e9 [ 989.558564][ T8211] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.578153][ T8211] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 989.586563][ T8211] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 989.594872][ T8211] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 989.602925][ T8211] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.610885][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 989.618851][ T8211] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 989.626925][ T8232] CPU: 1 PID: 8232 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 989.634296][ T8232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.644342][ T8232] Call Trace: [ 989.644362][ T8232] dump_stack+0x172/0x1f0 [ 989.644378][ T8232] should_fail.cold+0xa/0x15 [ 989.644397][ T8232] ? fault_create_debugfs_attr+0x180/0x180 [ 989.651976][ T8232] ? page_to_nid.part.0+0x20/0x20 [ 989.651991][ T8232] ? ___might_sleep+0x163/0x280 [ 989.652008][ T8232] __should_failslab+0x121/0x190 [ 989.652031][ T8232] should_failslab+0x9/0x14 [ 989.652043][ T8232] kmem_cache_alloc+0x2aa/0x710 [ 989.652056][ T8232] ? do_raw_spin_unlock+0x57/0x270 [ 989.652071][ T8232] ? _raw_spin_unlock+0x2d/0x50 [ 989.652092][ T8232] copy_process+0x1dd0/0x6b00 [ 989.672276][ T8232] ? _kstrtoul+0x170/0x170 [ 989.672297][ T8232] ? __cleanup_sighand+0x60/0x60 [ 989.672314][ T8232] ? __f_unlock_pos+0x19/0x20 [ 989.681699][ T8232] ? __kasan_check_read+0x11/0x20 [ 989.681716][ T8232] ? lock_downgrade+0x920/0x920 [ 989.681728][ T8232] ? vfs_write+0x34c/0x5d0 20:05:45 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 989.681742][ T8232] _do_fork+0x146/0xfa0 [ 989.681759][ T8232] ? copy_init_mm+0x20/0x20 [ 989.691678][ T8232] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 989.691696][ T8232] ? wait_for_completion+0x440/0x440 [ 989.749030][ T8232] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.755278][ T8232] __x64_sys_clone+0x18d/0x250 [ 989.760058][ T8232] ? ksys_write+0x1cf/0x290 [ 989.764562][ T8232] ? __ia32_sys_vfork+0xc0/0xc0 [ 989.769435][ T8232] ? trace_hardirqs_off_caller+0x65/0x230 20:05:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 989.775153][ T8232] ? trace_hardirqs_on+0x67/0x240 [ 989.780206][ T8232] do_syscall_64+0xfd/0x6a0 [ 989.784718][ T8232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.790619][ T8232] RIP: 0033:0x4598e9 [ 989.794513][ T8232] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.814116][ T8232] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:45 executing program 2 (fault-call:2 fault-nth:91): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r4 = getpid() ioprio_get$pid(0x2, r4) [ 989.814129][ T8232] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 989.814135][ T8232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 989.814141][ T8232] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.814148][ T8232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 989.814154][ T8232] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:45 executing program 3 (fault-call:2 fault-nth:12): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 989.893020][ T8217] input: syz1 as /devices/virtual/input/input470 [ 989.949741][ T8440] FAULT_INJECTION: forcing a failure. [ 989.949741][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 989.973117][ T8443] FAULT_INJECTION: forcing a failure. [ 989.973117][ T8443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:05:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x12\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) r4 = getpid() ioprio_get$pid(0x2, r4) 20:05:45 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 990.085026][ T8443] CPU: 1 PID: 8443 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 990.092435][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.102525][ T8443] Call Trace: [ 990.105821][ T8443] dump_stack+0x172/0x1f0 [ 990.110162][ T8443] should_fail.cold+0xa/0x15 [ 990.114768][ T8443] ? fault_create_debugfs_attr+0x180/0x180 [ 990.120589][ T8443] ? ___might_sleep+0x163/0x280 [ 990.120610][ T8443] should_fail_alloc_page+0x50/0x60 [ 990.120621][ T8443] __alloc_pages_nodemask+0x1a1/0x900 [ 990.120635][ T8443] ? __alloc_pages_slowpath+0x2520/0x2520 [ 990.120652][ T8443] ? kasan_unpoison_shadow+0x35/0x50 [ 990.120667][ T8443] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 990.120681][ T8443] alloc_pages_current+0x107/0x210 [ 990.120698][ T8443] ? ___might_sleep+0x163/0x280 [ 990.147044][ T8443] __vmalloc_node_range+0x4a9/0x7d0 [ 990.147063][ T8443] __vmalloc+0x44/0x50 [ 990.172427][ T8443] ? __do_sys_init_module+0x16e/0x240 [ 990.172446][ T8443] __do_sys_init_module+0x16e/0x240 [ 990.183010][ T8443] ? load_module+0x8220/0x8220 [ 990.187798][ T8443] ? __ia32_sys_read+0xb0/0xb0 [ 990.192565][ T8443] ? switch_fpu_return+0x1fa/0x4f0 [ 990.197677][ T8443] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 990.203738][ T8443] __x64_sys_init_module+0x6e/0xb0 [ 990.208836][ T8443] do_syscall_64+0xfd/0x6a0 [ 990.208853][ T8443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.208863][ T8443] RIP: 0033:0x4598e9 [ 990.208881][ T8443] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.242723][ T8443] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 990.242737][ T8443] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 990.242745][ T8443] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 990.242752][ T8443] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 990.242758][ T8443] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 990.242765][ T8443] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 990.293757][ T8451] input: syz1 as /devices/virtual/input/input471 [ 990.297517][ T8440] CPU: 0 PID: 8440 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 990.307452][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.317512][ T8440] Call Trace: [ 990.320979][ T8440] dump_stack+0x172/0x1f0 [ 990.320998][ T8440] should_fail.cold+0xa/0x15 [ 990.321017][ T8440] ? fault_create_debugfs_attr+0x180/0x180 [ 990.335679][ T8440] ? page_to_nid.part.0+0x20/0x20 [ 990.340694][ T8440] ? ___might_sleep+0x163/0x280 [ 990.340710][ T8440] __should_failslab+0x121/0x190 [ 990.340725][ T8440] should_failslab+0x9/0x14 [ 990.340741][ T8440] kmem_cache_alloc+0x2aa/0x710 [ 990.359812][ T8440] ? trace_hardirqs_on+0x67/0x240 [ 990.364842][ T8440] ? __kasan_check_read+0x11/0x20 [ 990.371177][ T8440] copy_process+0x1f2d/0x6b00 [ 990.375860][ T8440] ? _kstrtoul+0x170/0x170 [ 990.380288][ T8440] ? __cleanup_sighand+0x60/0x60 [ 990.385226][ T8440] ? __f_unlock_pos+0x19/0x20 [ 990.389903][ T8440] ? __kasan_check_read+0x11/0x20 [ 990.394930][ T8440] ? lock_downgrade+0x920/0x920 [ 990.394943][ T8440] ? vfs_write+0x34c/0x5d0 [ 990.394962][ T8440] _do_fork+0x146/0xfa0 [ 990.404208][ T8440] ? copy_init_mm+0x20/0x20 [ 990.404221][ T8440] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 990.404233][ T8440] ? wait_for_completion+0x440/0x440 [ 990.404254][ T8440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.412876][ T8440] __x64_sys_clone+0x18d/0x250 20:05:45 executing program 2 (fault-call:2 fault-nth:92): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 990.412890][ T8440] ? ksys_write+0x1cf/0x290 [ 990.412903][ T8440] ? __ia32_sys_vfork+0xc0/0xc0 [ 990.412920][ T8440] ? trace_hardirqs_off_caller+0x65/0x230 [ 990.412935][ T8440] ? trace_hardirqs_on+0x67/0x240 [ 990.423710][ T8440] do_syscall_64+0xfd/0x6a0 [ 990.423727][ T8440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.423737][ T8440] RIP: 0033:0x4598e9 20:05:45 executing program 3 (fault-call:2 fault-nth:13): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 990.423755][ T8440] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.434712][ T8440] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 990.434726][ T8440] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 990.434733][ T8440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.434741][ T8440] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.434747][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 990.434759][ T8440] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r4, r6}}}], 0x20}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e20, 0x9, 0x4e24, 0x4, 0xa, 0x80, 0x20, 0x33, 0x0, r6}, {0x7451, 0x800, 0x800, 0x9, 0x10000, 0x0, 0x1aad400, 0x6}, {0x2, 0x650950a, 0x3de30000, 0x8}, 0xfffffffffffffffe, 0x6e6bb8, 0x0, 0x3}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in6=@loopback, 0x3504, 0x1, 0x0, 0x8001, 0x7f, 0x10003, 0xfff}}, 0xe8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 990.558114][ T8570] FAULT_INJECTION: forcing a failure. [ 990.558114][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 990.582895][ T8568] FAULT_INJECTION: forcing a failure. [ 990.582895][ T8568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:05:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r4 = getpid() ioprio_get$pid(0x2, r4) 20:05:45 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 990.615700][ T8571] input: syz1 as /devices/virtual/input/input472 [ 990.643563][ T8568] CPU: 1 PID: 8568 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 990.650951][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.661005][ T8568] Call Trace: [ 990.661026][ T8568] dump_stack+0x172/0x1f0 [ 990.661052][ T8568] should_fail.cold+0xa/0x15 [ 990.661069][ T8568] ? fault_create_debugfs_attr+0x180/0x180 [ 990.661089][ T8568] ? ___might_sleep+0x163/0x280 [ 990.684251][ T8568] should_fail_alloc_page+0x50/0x60 [ 990.689451][ T8568] __alloc_pages_nodemask+0x1a1/0x900 [ 990.694829][ T8568] ? __alloc_pages_slowpath+0x2520/0x2520 [ 990.700551][ T8568] ? kasan_unpoison_shadow+0x35/0x50 [ 990.705841][ T8568] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 990.705862][ T8568] alloc_pages_current+0x107/0x210 [ 990.717435][ T8568] ? ___might_sleep+0x163/0x280 [ 990.722288][ T8568] __vmalloc_node_range+0x4a9/0x7d0 [ 990.727495][ T8568] __vmalloc+0x44/0x50 [ 990.731560][ T8568] ? __do_sys_init_module+0x16e/0x240 [ 990.736924][ T8568] __do_sys_init_module+0x16e/0x240 [ 990.742112][ T8568] ? load_module+0x8220/0x8220 [ 990.742134][ T8568] ? __ia32_sys_read+0xb0/0xb0 [ 990.751629][ T8568] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 990.757697][ T8568] __x64_sys_init_module+0x6e/0xb0 20:05:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r3 = getpid() ioprio_get$pid(0x2, r3) [ 990.762813][ T8568] do_syscall_64+0xfd/0x6a0 [ 990.767326][ T8568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.773219][ T8568] RIP: 0033:0x4598e9 [ 990.777111][ T8568] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.796708][ T8568] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 990.805117][ T8568] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 990.813083][ T8568] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 990.821052][ T8568] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 990.829021][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 990.836987][ T8568] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 990.863550][ T8570] CPU: 0 PID: 8570 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 990.871293][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.881377][ T8570] Call Trace: [ 990.881398][ T8570] dump_stack+0x172/0x1f0 [ 990.881416][ T8570] should_fail.cold+0xa/0x15 [ 990.881429][ T8570] ? fault_create_debugfs_attr+0x180/0x180 [ 990.881449][ T8570] ? page_to_nid.part.0+0x20/0x20 [ 990.889042][ T8570] ? ___might_sleep+0x163/0x280 [ 990.889060][ T8570] __should_failslab+0x121/0x190 [ 990.889075][ T8570] should_failslab+0x9/0x14 [ 990.889087][ T8570] kmem_cache_alloc+0x2aa/0x710 [ 990.889110][ T8570] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 990.899489][ T8570] dup_mm+0x8a/0x1430 [ 990.899504][ T8570] ? copy_process+0x23a1/0x6b00 [ 990.899517][ T8570] ? __kasan_check_read+0x11/0x20 [ 990.899529][ T8570] ? __kasan_check_write+0x14/0x20 [ 990.899550][ T8570] ? lock_downgrade+0x920/0x920 [ 990.909388][ T8570] ? vm_area_dup+0x170/0x170 [ 990.909402][ T8570] ? debug_mutex_init+0x2d/0x5a [ 990.909416][ T8570] copy_process+0x28b7/0x6b00 20:05:46 executing program 2 (fault-call:2 fault-nth:93): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 990.909437][ T8570] ? _kstrtoul+0x170/0x170 [ 990.918845][ T8570] ? __cleanup_sighand+0x60/0x60 [ 990.918857][ T8570] ? __f_unlock_pos+0x19/0x20 [ 990.918871][ T8570] ? __kasan_check_read+0x11/0x20 [ 990.918891][ T8570] ? lock_downgrade+0x920/0x920 [ 990.929509][ T8570] ? vfs_write+0x34c/0x5d0 [ 990.929525][ T8570] _do_fork+0x146/0xfa0 [ 990.929539][ T8570] ? copy_init_mm+0x20/0x20 [ 990.929551][ T8570] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 990.929563][ T8570] ? wait_for_completion+0x440/0x440 20:05:46 executing program 3 (fault-call:2 fault-nth:14): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 990.929588][ T8570] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.938369][ T8570] __x64_sys_clone+0x18d/0x250 [ 990.938383][ T8570] ? ksys_write+0x1cf/0x290 [ 990.938400][ T8570] ? __ia32_sys_vfork+0xc0/0xc0 [ 990.948499][ T8570] ? trace_hardirqs_off_caller+0x65/0x230 [ 990.948511][ T8570] ? trace_hardirqs_on+0x67/0x240 [ 990.948532][ T8570] do_syscall_64+0xfd/0x6a0 [ 990.957934][ T8570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.957945][ T8570] RIP: 0033:0x4598e9 [ 990.957968][ T8570] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.967437][ T8570] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 990.967455][ T8570] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 990.967468][ T8570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 990.976761][ T8570] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:05:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x14\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 990.976769][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 990.976777][ T8570] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 991.140339][ T8604] FAULT_INJECTION: forcing a failure. [ 991.140339][ T8604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 991.161949][ T8604] CPU: 0 PID: 8604 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 991.169330][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.169336][ T8604] Call Trace: [ 991.169356][ T8604] dump_stack+0x172/0x1f0 [ 991.169375][ T8604] should_fail.cold+0xa/0x15 [ 991.169393][ T8604] ? fault_create_debugfs_attr+0x180/0x180 [ 991.169410][ T8604] ? ___might_sleep+0x163/0x280 [ 991.169430][ T8604] should_fail_alloc_page+0x50/0x60 [ 991.169448][ T8604] __alloc_pages_nodemask+0x1a1/0x900 [ 991.169462][ T8604] ? stack_trace_consume_entry+0x190/0x190 [ 991.169476][ T8604] ? __alloc_pages_slowpath+0x2520/0x2520 [ 991.169495][ T8604] ? percpu_ref_put_many+0x94/0x190 [ 991.169513][ T8604] ? __kasan_check_read+0x11/0x20 [ 991.197502][ T8604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 991.197518][ T8604] alloc_pages_current+0x107/0x210 [ 991.197534][ T8604] __get_free_pages+0xc/0x40 [ 991.207548][ T8604] pgd_alloc+0x8b/0x3f0 [ 991.207563][ T8604] ? pgd_page_get_mm+0x40/0x40 [ 991.207580][ T8604] ? lockdep_init_map+0x1be/0x6d0 [ 991.246695][ T8629] FAULT_INJECTION: forcing a failure. [ 991.246695][ T8629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 991.250523][ T8604] ? lockdep_init_map+0x1be/0x6d0 [ 991.250541][ T8604] mm_init+0x590/0x9b0 [ 991.250553][ T8604] dup_mm+0xde/0x1430 [ 991.250571][ T8604] ? copy_process+0x23a1/0x6b00 [ 991.295793][ T8604] ? __kasan_check_read+0x11/0x20 [ 991.300809][ T8604] ? __kasan_check_write+0x14/0x20 [ 991.305908][ T8604] ? lock_downgrade+0x920/0x920 [ 991.310745][ T8604] ? vm_area_dup+0x170/0x170 [ 991.315322][ T8604] ? debug_mutex_init+0x2d/0x5a [ 991.320161][ T8604] copy_process+0x28b7/0x6b00 [ 991.324827][ T8604] ? _kstrtoul+0x170/0x170 [ 991.329238][ T8604] ? __cleanup_sighand+0x60/0x60 [ 991.334161][ T8604] ? __f_unlock_pos+0x19/0x20 [ 991.338826][ T8604] ? __kasan_check_read+0x11/0x20 [ 991.343842][ T8604] ? lock_downgrade+0x920/0x920 [ 991.348678][ T8604] ? vfs_write+0x34c/0x5d0 [ 991.353100][ T8604] _do_fork+0x146/0xfa0 [ 991.357258][ T8604] ? copy_init_mm+0x20/0x20 [ 991.361750][ T8604] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 991.367284][ T8604] ? wait_for_completion+0x440/0x440 [ 991.372569][ T8604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 991.378798][ T8604] __x64_sys_clone+0x18d/0x250 [ 991.383546][ T8604] ? ksys_write+0x1cf/0x290 [ 991.388035][ T8604] ? __ia32_sys_vfork+0xc0/0xc0 [ 991.393137][ T8604] ? trace_hardirqs_off_caller+0x65/0x230 [ 991.398840][ T8604] ? trace_hardirqs_on+0x67/0x240 [ 991.404026][ T8604] do_syscall_64+0xfd/0x6a0 [ 991.408521][ T8604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.414394][ T8604] RIP: 0033:0x4598e9 [ 991.418286][ T8604] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.438048][ T8604] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 991.446445][ T8604] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 991.454413][ T8604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 991.462374][ T8604] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 991.471038][ T8604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 991.478993][ T8604] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 991.486966][ T8629] CPU: 1 PID: 8629 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 991.494362][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.504594][ T8629] Call Trace: [ 991.507904][ T8629] dump_stack+0x172/0x1f0 [ 991.512251][ T8629] should_fail.cold+0xa/0x15 [ 991.516858][ T8629] ? fault_create_debugfs_attr+0x180/0x180 [ 991.516874][ T8629] ? ___might_sleep+0x163/0x280 [ 991.516895][ T8629] should_fail_alloc_page+0x50/0x60 [ 991.527516][ T8629] __alloc_pages_nodemask+0x1a1/0x900 [ 991.527532][ T8629] ? __alloc_pages_slowpath+0x2520/0x2520 [ 991.527553][ T8629] ? kasan_unpoison_shadow+0x35/0x50 [ 991.538076][ T8629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 991.538094][ T8629] alloc_pages_current+0x107/0x210 [ 991.538111][ T8629] ? ___might_sleep+0x163/0x280 20:05:46 executing program 3 (fault-call:2 fault-nth:15): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 991.549684][ T8629] __vmalloc_node_range+0x4a9/0x7d0 [ 991.549704][ T8629] __vmalloc+0x44/0x50 [ 991.549718][ T8629] ? __do_sys_init_module+0x16e/0x240 [ 991.549731][ T8629] __do_sys_init_module+0x16e/0x240 [ 991.549744][ T8629] ? load_module+0x8220/0x8220 [ 991.549764][ T8629] ? __ia32_sys_read+0xb0/0xb0 [ 991.549783][ T8629] ? switch_fpu_return+0x1fa/0x4f0 [ 991.561090][ T8629] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 991.561107][ T8629] __x64_sys_init_module+0x6e/0xb0 [ 991.561125][ T8629] do_syscall_64+0xfd/0x6a0 [ 991.561138][ T8629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.561153][ T8629] RIP: 0033:0x4598e9 [ 991.571150][ T8629] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.571158][ T8629] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 991.571171][ T8629] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 991.571178][ T8629] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 20:05:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r3 = getpid() ioprio_get$pid(0x2, r3) [ 991.571186][ T8629] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 991.571193][ T8629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 991.571200][ T8629] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 20:05:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x15\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:47 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:47 executing program 2 (fault-call:2 fault-nth:94): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000a912, &(0x7f0000000200)="11dca50d6f0bcf6c7bf0700719ac11e896fbbbe3c7c2ce53883dde0a0a0b9ac81347707659fef4f5c3f23e9949f8d5afc0794e00664b62ea480aff6061b8f6105fbd526a94ffdcb279b00132239e9a0a8e5732f031b0861923a6d7d74a116f946e19f57ad78f495df74dc712b87d21aab9db8a9ab7a907402318d583cf80dacb0517f92068c5733035c13ff4df975914aa93904f0011438ab76d") sendto$inet6(r0, &(0x7f0000000000)="e2368a253379c7b96b0f82d3a28071fa9f7105380f0a374cbeab152294762dabd1a92b13d3e26f79fae305005bf229949bae528eeb2518686b19b93925c6dcc4e61c98470865ffe861d78b230a14a05dba9f4b57f91d08a86382dd016f31ab2ead98b2", 0x280, 0x8040000, &(0x7f00000000c0)={0xa, 0x8000, 0xfffffffffffffff8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 991.861588][ T8712] input: syz1 as /devices/virtual/input/input474 [ 991.878434][ T8709] FAULT_INJECTION: forcing a failure. [ 991.878434][ T8709] name failslab, interval 1, probability 0, space 0, times 0 [ 991.888619][ T8711] FAULT_INJECTION: forcing a failure. [ 991.888619][ T8711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 991.901162][ T8709] CPU: 0 PID: 8709 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 991.911631][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.921699][ T8709] Call Trace: [ 991.921721][ T8709] dump_stack+0x172/0x1f0 [ 991.921741][ T8709] should_fail.cold+0xa/0x15 [ 991.921762][ T8709] ? fault_create_debugfs_attr+0x180/0x180 [ 991.929367][ T8709] ? page_to_nid.part.0+0x20/0x20 [ 991.929382][ T8709] ? ___might_sleep+0x163/0x280 [ 991.929402][ T8709] __should_failslab+0x121/0x190 [ 991.929422][ T8709] should_failslab+0x9/0x14 [ 991.939768][ T8709] kmem_cache_alloc+0x2aa/0x710 [ 991.939783][ T8709] ? get_mm_exe_file+0x283/0x3e0 [ 991.939795][ T8709] ? copy_clone_args_from_user+0x5b0/0x5b0 [ 991.939813][ T8709] __khugepaged_enter+0x3b/0x3a0 [ 991.954654][ T8709] dup_mm+0xca2/0x1430 [ 991.954669][ T8709] ? __kasan_check_read+0x11/0x20 [ 991.954690][ T8709] ? lock_downgrade+0x920/0x920 [ 991.974849][ T8709] ? vm_area_dup+0x170/0x170 [ 991.974864][ T8709] ? debug_mutex_init+0x2d/0x5a [ 991.974882][ T8709] copy_process+0x28b7/0x6b00 [ 991.988868][ T8709] ? _kstrtoul+0x170/0x170 [ 991.988897][ T8709] ? __cleanup_sighand+0x60/0x60 [ 992.003111][ T8709] ? __f_unlock_pos+0x19/0x20 [ 992.003129][ T8709] ? __kasan_check_read+0x11/0x20 [ 992.017082][ T8709] ? lock_downgrade+0x920/0x920 [ 992.017096][ T8709] ? vfs_write+0x34c/0x5d0 [ 992.017116][ T8709] _do_fork+0x146/0xfa0 [ 992.035978][ T8709] ? copy_init_mm+0x20/0x20 [ 992.035992][ T8709] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 992.036010][ T8709] ? wait_for_completion+0x440/0x440 [ 992.050151][ T8709] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 992.050167][ T8709] __x64_sys_clone+0x18d/0x250 [ 992.050184][ T8709] ? ksys_write+0x1cf/0x290 [ 992.062535][ T8709] ? __ia32_sys_vfork+0xc0/0xc0 [ 992.062552][ T8709] ? trace_hardirqs_off_caller+0x65/0x230 [ 992.062563][ T8709] ? trace_hardirqs_on+0x67/0x240 [ 992.062585][ T8709] do_syscall_64+0xfd/0x6a0 [ 992.076629][ T8709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.076640][ T8709] RIP: 0033:0x4598e9 [ 992.076652][ T8709] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.076664][ T8709] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.101563][ T8709] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 992.101571][ T8709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 992.101579][ T8709] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.101586][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 992.101593][ T8709] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 992.112000][ T8711] CPU: 0 PID: 8711 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 992.145531][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.145536][ T8711] Call Trace: [ 992.145554][ T8711] dump_stack+0x172/0x1f0 [ 992.145570][ T8711] should_fail.cold+0xa/0x15 [ 992.145588][ T8711] ? fault_create_debugfs_attr+0x180/0x180 [ 992.161492][ T8711] ? ___might_sleep+0x163/0x280 [ 992.161513][ T8711] should_fail_alloc_page+0x50/0x60 [ 992.161526][ T8711] __alloc_pages_nodemask+0x1a1/0x900 [ 992.161543][ T8711] ? __alloc_pages_slowpath+0x2520/0x2520 [ 992.176880][ T8711] ? kasan_unpoison_shadow+0x35/0x50 [ 992.176898][ T8711] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 992.176917][ T8711] alloc_pages_current+0x107/0x210 [ 992.190225][ T8711] ? ___might_sleep+0x163/0x280 [ 992.190243][ T8711] __vmalloc_node_range+0x4a9/0x7d0 [ 992.190260][ T8711] __vmalloc+0x44/0x50 [ 992.190279][ T8711] ? __do_sys_init_module+0x16e/0x240 [ 992.199146][ T8711] __do_sys_init_module+0x16e/0x240 [ 992.199161][ T8711] ? load_module+0x8220/0x8220 [ 992.199182][ T8711] ? __ia32_sys_read+0xb0/0xb0 [ 992.199202][ T8711] ? switch_fpu_return+0x1fa/0x4f0 [ 992.209801][ T8711] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 992.209818][ T8711] __x64_sys_init_module+0x6e/0xb0 [ 992.209833][ T8711] do_syscall_64+0xfd/0x6a0 [ 992.209852][ T8711] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.220358][ T8711] RIP: 0033:0x4598e9 20:05:47 executing program 3 (fault-call:2 fault-nth:16): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe3a5, 0x40042) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r2, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x161) 20:05:47 executing program 2 (fault-call:2 fault-nth:95): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 992.220378][ T8711] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.220385][ T8711] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 992.220402][ T8711] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 992.231354][ T8711] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 992.231361][ T8711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.231373][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 992.231381][ T8711] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 992.354145][ T8794] FAULT_INJECTION: forcing a failure. [ 992.354145][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 992.394342][ T8712] input: syz1 as /devices/virtual/input/input475 [ 992.402381][ T8794] CPU: 1 PID: 8794 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 992.409756][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.419796][ T8794] Call Trace: [ 992.419817][ T8794] dump_stack+0x172/0x1f0 [ 992.419837][ T8794] should_fail.cold+0xa/0x15 [ 992.419858][ T8794] ? fault_create_debugfs_attr+0x180/0x180 [ 992.419877][ T8794] ? page_to_nid.part.0+0x20/0x20 [ 992.427462][ T8794] ? ___might_sleep+0x163/0x280 [ 992.427486][ T8794] __should_failslab+0x121/0x190 [ 992.437836][ T8794] should_failslab+0x9/0x14 [ 992.437860][ T8794] kmem_cache_alloc+0x2aa/0x710 [ 992.447681][ T8794] ? __kasan_check_read+0x11/0x20 [ 992.447694][ T8794] ? do_raw_spin_unlock+0x57/0x270 [ 992.447712][ T8794] vm_area_dup+0x21/0x170 [ 992.457104][ T8794] dup_mm+0x549/0x1430 [ 992.457126][ T8794] ? __kasan_check_read+0x11/0x20 [ 992.466950][ T8794] ? vm_area_dup+0x170/0x170 [ 992.466970][ T8794] ? debug_mutex_init+0x2d/0x5a [ 992.476357][ T8794] copy_process+0x28b7/0x6b00 [ 992.476371][ T8794] ? _kstrtoul+0x170/0x170 [ 992.476390][ T8794] ? __cleanup_sighand+0x60/0x60 [ 992.490010][ T8794] ? __f_unlock_pos+0x19/0x20 [ 992.490025][ T8794] ? __kasan_check_read+0x11/0x20 [ 992.490044][ T8794] ? lock_downgrade+0x920/0x920 [ 992.490056][ T8794] ? vfs_write+0x34c/0x5d0 [ 992.490073][ T8794] _do_fork+0x146/0xfa0 [ 992.490086][ T8794] ? copy_init_mm+0x20/0x20 [ 992.490098][ T8794] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 992.490114][ T8794] ? wait_for_completion+0x440/0x440 [ 992.499616][ T8794] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 992.499633][ T8794] __x64_sys_clone+0x18d/0x250 [ 992.499645][ T8794] ? ksys_write+0x1cf/0x290 20:05:47 executing program 3 (fault-call:2 fault-nth:17): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 992.499662][ T8794] ? __ia32_sys_vfork+0xc0/0xc0 [ 992.508969][ T8794] ? trace_hardirqs_off_caller+0x65/0x230 [ 992.508981][ T8794] ? trace_hardirqs_on+0x67/0x240 [ 992.508998][ T8794] do_syscall_64+0xfd/0x6a0 [ 992.509015][ T8794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.509025][ T8794] RIP: 0033:0x4598e9 [ 992.509036][ T8794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.509048][ T8794] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 992.518714][ T8794] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 992.518721][ T8794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 992.518733][ T8794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 992.527959][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 992.527968][ T8794] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 992.630752][ T8832] FAULT_INJECTION: forcing a failure. [ 992.630752][ T8832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 992.646982][ T8832] CPU: 0 PID: 8832 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 992.682800][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.692853][ T8832] Call Trace: [ 992.696154][ T8832] dump_stack+0x172/0x1f0 [ 992.700493][ T8832] should_fail.cold+0xa/0x15 [ 992.705089][ T8832] ? fault_create_debugfs_attr+0x180/0x180 20:05:48 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 992.710910][ T8832] ? ___might_sleep+0x163/0x280 [ 992.715763][ T8832] should_fail_alloc_page+0x50/0x60 [ 992.720984][ T8832] __alloc_pages_nodemask+0x1a1/0x900 [ 992.726364][ T8832] ? __alloc_pages_slowpath+0x2520/0x2520 [ 992.732081][ T8832] ? kasan_unpoison_shadow+0x35/0x50 [ 992.732096][ T8832] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 992.732116][ T8832] alloc_pages_current+0x107/0x210 [ 992.748693][ T8832] ? ___might_sleep+0x163/0x280 [ 992.748712][ T8832] __vmalloc_node_range+0x4a9/0x7d0 [ 992.748732][ T8832] __vmalloc+0x44/0x50 [ 992.748745][ T8832] ? __do_sys_init_module+0x16e/0x240 [ 992.748764][ T8832] __do_sys_init_module+0x16e/0x240 [ 992.773382][ T8832] ? load_module+0x8220/0x8220 [ 992.778161][ T8832] ? __ia32_sys_read+0xb0/0xb0 [ 992.782925][ T8832] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 992.785406][ T8837] FAULT_INJECTION: forcing a failure. [ 992.785406][ T8837] name failslab, interval 1, probability 0, space 0, times 0 [ 992.788989][ T8832] __x64_sys_init_module+0x6e/0xb0 [ 992.789008][ T8832] do_syscall_64+0xfd/0x6a0 [ 992.789025][ T8832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.789034][ T8832] RIP: 0033:0x4598e9 [ 992.789052][ T8832] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.842014][ T8832] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 992.850426][ T8832] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 992.858453][ T8832] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 992.866416][ T8832] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 992.874375][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 992.882334][ T8832] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 992.890318][ T8837] CPU: 1 PID: 8837 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 992.897685][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.907739][ T8837] Call Trace: [ 992.911029][ T8837] dump_stack+0x172/0x1f0 [ 992.911050][ T8837] should_fail.cold+0xa/0x15 [ 992.920057][ T8837] ? fault_create_debugfs_attr+0x180/0x180 [ 992.920071][ T8837] ? page_to_nid.part.0+0x20/0x20 [ 992.920085][ T8837] ? ___might_sleep+0x163/0x280 [ 992.920100][ T8837] __should_failslab+0x121/0x190 [ 992.920119][ T8837] should_failslab+0x9/0x14 [ 992.930899][ T8837] kmem_cache_alloc+0x2aa/0x710 [ 992.930914][ T8837] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 992.930927][ T8837] ? __vm_enough_memory+0x17e/0x3a0 [ 992.930949][ T8837] vm_area_dup+0x21/0x170 [ 992.940780][ T8837] dup_mm+0x549/0x1430 [ 992.950099][ T8837] ? vm_area_dup+0x170/0x170 [ 992.950113][ T8837] ? debug_mutex_init+0x2d/0x5a [ 992.950131][ T8837] copy_process+0x28b7/0x6b00 [ 992.969351][ T8837] ? _kstrtoul+0x170/0x170 [ 992.969371][ T8837] ? __cleanup_sighand+0x60/0x60 [ 992.969383][ T8837] ? __f_unlock_pos+0x19/0x20 [ 992.969395][ T8837] ? __kasan_check_read+0x11/0x20 [ 992.969415][ T8837] ? lock_downgrade+0x920/0x920 [ 992.978815][ T8837] ? vfs_write+0x34c/0x5d0 [ 992.978830][ T8837] _do_fork+0x146/0xfa0 [ 992.978843][ T8837] ? copy_init_mm+0x20/0x20 [ 992.978855][ T8837] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 992.978874][ T8837] ? wait_for_completion+0x440/0x440 [ 992.987933][ T8837] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 992.987951][ T8837] __x64_sys_clone+0x18d/0x250 [ 993.042208][ T8837] ? ksys_write+0x1cf/0x290 [ 993.046692][ T8837] ? __ia32_sys_vfork+0xc0/0xc0 [ 993.051540][ T8837] ? trace_hardirqs_off_caller+0x65/0x230 [ 993.057236][ T8837] ? trace_hardirqs_on+0x67/0x240 [ 993.062242][ T8837] do_syscall_64+0xfd/0x6a0 [ 993.066725][ T8837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.072595][ T8837] RIP: 0033:0x4598e9 [ 993.076485][ T8837] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.096065][ T8837] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 993.104452][ T8837] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 20:05:48 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x16\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = getpid() ioprio_get$pid(0x2, r3) 20:05:48 executing program 2 (fault-call:2 fault-nth:96): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 993.112406][ T8837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.120361][ T8837] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.128309][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 993.136252][ T8837] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:48 executing program 3 (fault-call:2 fault-nth:18): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:48 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 993.225415][ T8947] FAULT_INJECTION: forcing a failure. [ 993.225415][ T8947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 993.254538][ T8948] input: syz1 as /devices/virtual/input/input476 [ 993.309254][ T8947] CPU: 1 PID: 8947 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 993.316655][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.326703][ T8947] Call Trace: [ 993.329993][ T8947] dump_stack+0x172/0x1f0 [ 993.330014][ T8947] should_fail.cold+0xa/0x15 [ 993.330032][ T8947] ? fault_create_debugfs_attr+0x180/0x180 [ 993.330052][ T8947] ? ___might_sleep+0x163/0x280 [ 993.349570][ T8947] should_fail_alloc_page+0x50/0x60 [ 993.354771][ T8947] __alloc_pages_nodemask+0x1a1/0x900 [ 993.360145][ T8947] ? __alloc_pages_slowpath+0x2520/0x2520 [ 993.365868][ T8947] ? kasan_unpoison_shadow+0x35/0x50 [ 993.371158][ T8947] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 993.377394][ T8947] alloc_pages_current+0x107/0x210 [ 993.377412][ T8947] ? ___might_sleep+0x163/0x280 [ 993.383886][ T8998] FAULT_INJECTION: forcing a failure. [ 993.383886][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 993.387332][ T8947] __vmalloc_node_range+0x4a9/0x7d0 [ 993.387352][ T8947] __vmalloc+0x44/0x50 [ 993.405104][ T8947] ? __do_sys_init_module+0x16e/0x240 [ 993.405121][ T8947] __do_sys_init_module+0x16e/0x240 [ 993.414532][ T8947] ? load_module+0x8220/0x8220 [ 993.414555][ T8947] ? __ia32_sys_read+0xb0/0xb0 [ 993.424471][ T8947] ? switch_fpu_return+0x1fa/0x4f0 [ 993.434295][ T8947] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 993.434315][ T8947] __x64_sys_init_module+0x6e/0xb0 [ 993.445464][ T8947] do_syscall_64+0xfd/0x6a0 [ 993.449966][ T8947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.455848][ T8947] RIP: 0033:0x4598e9 [ 993.455861][ T8947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.455874][ T8947] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 993.482021][ T8947] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 993.482029][ T8947] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 993.482035][ T8947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.482042][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 993.482049][ T8947] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 993.519398][ T8998] CPU: 0 PID: 8998 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 993.537736][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.537749][ T8998] Call Trace: [ 993.551162][ T8998] dump_stack+0x172/0x1f0 [ 993.555491][ T8998] should_fail.cold+0xa/0x15 [ 993.560100][ T8998] ? fault_create_debugfs_attr+0x180/0x180 [ 993.565900][ T8998] ? percpu_ref_put_many+0x94/0x190 [ 993.571080][ T8998] ? __kasan_check_read+0x11/0x20 [ 993.571096][ T8998] __should_failslab+0x121/0x190 [ 993.571116][ T8998] should_failslab+0x9/0x14 [ 993.581031][ T8998] kmem_cache_alloc+0x47/0x710 [ 993.581049][ T8998] anon_vma_clone+0xde/0x480 [ 993.581066][ T8998] anon_vma_fork+0x8f/0x4a0 [ 993.587066][ T8948] input: syz1 as /devices/virtual/input/input477 [ 993.590297][ T8998] ? dup_userfaultfd+0x15e/0x6d0 [ 993.590310][ T8998] ? memcpy+0x46/0x50 [ 993.590332][ T8998] dup_mm+0xa47/0x1430 [ 993.599378][ T8998] ? vm_area_dup+0x170/0x170 [ 993.599394][ T8998] ? debug_mutex_init+0x2d/0x5a [ 993.599413][ T8998] copy_process+0x28b7/0x6b00 [ 993.632712][ T8998] ? _kstrtoul+0x170/0x170 [ 993.637143][ T8998] ? __cleanup_sighand+0x60/0x60 [ 993.642085][ T8998] ? __f_unlock_pos+0x19/0x20 [ 993.646878][ T8998] ? __kasan_check_read+0x11/0x20 [ 993.651904][ T8998] ? lock_downgrade+0x920/0x920 [ 993.656740][ T8998] ? vfs_write+0x34c/0x5d0 [ 993.656755][ T8998] _do_fork+0x146/0xfa0 [ 993.656773][ T8998] ? copy_init_mm+0x20/0x20 [ 993.665294][ T8998] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 993.665308][ T8998] ? wait_for_completion+0x440/0x440 [ 993.665328][ T8998] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 993.665346][ T8998] __x64_sys_clone+0x18d/0x250 [ 993.675338][ T8998] ? ksys_write+0x1cf/0x290 [ 993.675352][ T8998] ? __ia32_sys_vfork+0xc0/0xc0 [ 993.675368][ T8998] ? trace_hardirqs_off_caller+0x65/0x230 20:05:49 executing program 2 (fault-call:2 fault-nth:97): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 993.675384][ T8998] ? trace_hardirqs_on+0x67/0x240 [ 993.686965][ T8998] do_syscall_64+0xfd/0x6a0 [ 993.686983][ T8998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.686998][ T8998] RIP: 0033:0x4598e9 [ 993.696221][ T8998] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.696228][ T8998] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:49 executing program 3 (fault-call:2 fault-nth:19): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 993.696246][ T8998] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 993.696258][ T8998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 993.706773][ T8998] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.706781][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 993.706788][ T8998] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 993.807045][ T9072] FAULT_INJECTION: forcing a failure. [ 993.807045][ T9072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 993.820518][ T9072] CPU: 1 PID: 9072 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 993.827893][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.837939][ T9072] Call Trace: [ 993.841236][ T9072] dump_stack+0x172/0x1f0 [ 993.845571][ T9072] should_fail.cold+0xa/0x15 [ 993.850171][ T9072] ? fault_create_debugfs_attr+0x180/0x180 [ 993.855985][ T9072] ? ___might_sleep+0x163/0x280 20:05:49 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 993.860839][ T9072] should_fail_alloc_page+0x50/0x60 [ 993.860854][ T9072] __alloc_pages_nodemask+0x1a1/0x900 [ 993.860870][ T9072] ? __alloc_pages_slowpath+0x2520/0x2520 [ 993.860888][ T9072] ? kasan_unpoison_shadow+0x35/0x50 [ 993.860903][ T9072] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 993.860922][ T9072] alloc_pages_current+0x107/0x210 [ 993.871448][ T9072] ? ___might_sleep+0x163/0x280 [ 993.871466][ T9072] __vmalloc_node_range+0x4a9/0x7d0 [ 993.871484][ T9072] __vmalloc+0x44/0x50 [ 993.871499][ T9072] ? __do_sys_init_module+0x16e/0x240 [ 993.871512][ T9072] __do_sys_init_module+0x16e/0x240 [ 993.871525][ T9072] ? load_module+0x8220/0x8220 [ 993.871549][ T9072] ? __ia32_sys_read+0xb0/0xb0 [ 993.882531][ T9072] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 993.882549][ T9072] __x64_sys_init_module+0x6e/0xb0 [ 993.882569][ T9072] do_syscall_64+0xfd/0x6a0 [ 993.928003][ T9072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.943613][ T9072] RIP: 0033:0x4598e9 [ 993.943628][ T9072] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.943636][ T9072] RSP: 002b:00007f473b6b5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 993.970664][ T9078] FAULT_INJECTION: forcing a failure. [ 993.970664][ T9078] name failslab, interval 1, probability 0, space 0, times 0 [ 993.972986][ T9072] RAX: ffffffffffffffda RBX: 00007f473b6b5c90 RCX: 00000000004598e9 [ 993.972995][ T9072] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 20:05:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = getpid() ioprio_get$pid(0x2, r3) 20:05:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00t\x1d\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 993.973003][ T9072] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 993.973011][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6b66d4 [ 993.973018][ T9072] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 994.110092][ T9119] input: syz1 as /devices/virtual/input/input478 [ 994.113812][ T9078] CPU: 0 PID: 9078 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 994.123802][ T9078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.123808][ T9078] Call Trace: [ 994.123826][ T9078] dump_stack+0x172/0x1f0 [ 994.123849][ T9078] should_fail.cold+0xa/0x15 [ 994.141492][ T9078] ? fault_create_debugfs_attr+0x180/0x180 [ 994.141508][ T9078] ? lock_acquire+0x190/0x410 [ 994.141522][ T9078] ? anon_vma_clone+0x143/0x480 [ 994.141542][ T9078] __should_failslab+0x121/0x190 [ 994.151897][ T9078] should_failslab+0x9/0x14 [ 994.151910][ T9078] kmem_cache_alloc+0x47/0x710 [ 994.151925][ T9078] ? anon_vma_chain_link+0x154/0x1c0 [ 994.151949][ T9078] anon_vma_clone+0xde/0x480 [ 994.161440][ T9078] anon_vma_fork+0x8f/0x4a0 [ 994.161455][ T9078] ? dup_userfaultfd+0x15e/0x6d0 [ 994.161465][ T9078] ? memcpy+0x46/0x50 [ 994.161484][ T9078] dup_mm+0xa47/0x1430 [ 994.170877][ T9078] ? vm_area_dup+0x170/0x170 [ 994.170892][ T9078] ? debug_mutex_init+0x2d/0x5a [ 994.170906][ T9078] copy_process+0x28b7/0x6b00 [ 994.170924][ T9078] ? _kstrtoul+0x170/0x170 [ 994.180925][ T9078] ? __cleanup_sighand+0x60/0x60 [ 994.180939][ T9078] ? __f_unlock_pos+0x19/0x20 [ 994.180952][ T9078] ? __kasan_check_read+0x11/0x20 [ 994.180973][ T9078] ? lock_downgrade+0x920/0x920 [ 994.190013][ T9078] ? vfs_write+0x34c/0x5d0 [ 994.190030][ T9078] _do_fork+0x146/0xfa0 [ 994.190044][ T9078] ? copy_init_mm+0x20/0x20 [ 994.190061][ T9078] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 994.198953][ T9078] ? wait_for_completion+0x440/0x440 [ 994.198974][ T9078] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 994.198988][ T9078] __x64_sys_clone+0x18d/0x250 [ 994.199004][ T9078] ? ksys_write+0x1cf/0x290 [ 994.207611][ T9078] ? __ia32_sys_vfork+0xc0/0xc0 [ 994.207629][ T9078] ? trace_hardirqs_off_caller+0x65/0x230 [ 994.207639][ T9078] ? trace_hardirqs_on+0x67/0x240 [ 994.207665][ T9078] do_syscall_64+0xfd/0x6a0 [ 994.217139][ T9078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.217150][ T9078] RIP: 0033:0x4598e9 [ 994.217162][ T9078] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.217174][ T9078] RSP: 002b:00007fef4a783c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 994.226501][ T9078] RAX: ffffffffffffffda RBX: 00007fef4a783c90 RCX: 00000000004598e9 [ 994.226508][ T9078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:05:49 executing program 3 (fault-call:2 fault-nth:20): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:49 executing program 2 (fault-call:2 fault-nth:98): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 994.226516][ T9078] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 994.226524][ T9078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7846d4 [ 994.226531][ T9078] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000003 20:05:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(r3, 0x1, &(0x7f0000000040)="11dca50d3aa5255d88199e10f36f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffc, 0x80000) sendmmsg$alg(r4, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x41, "d09971a68fcba5826cc35786172f3d476f2d628d1b21f37ba2c7b1e6704e0953f259a7c4ef8e19c60d7f7f75dfa4c4c02d490fbbbc4135d7c2f6ba553aeab5af01"}], 0x70, 0xc002}, {0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="4c5ac7de102af66b8a854945bcb8639be76bc4f8cdaf0e90f64023dee92d1cc771b1270e485e7918de8195c4f70f64abc05aef8836945effa653b1a2dea88aa55524db364f76db", 0x47}], 0x1, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="22bf79e3121992439e881660d5dab342b5bbc63e1f3eb206cb77d8a37cdbf63f108a6291", 0x24}, {&(0x7f0000001300)="c860f9ade467a1fac4ce9e337bb84a6dec24aa4fb07c180d7491fa66ce9cbddb54a3fda1fd8b929876242d52100a171ca326c1558bda4d9d711bd55914b7e80967423a56419268161bbf78da8b4bea822146580667fc926573d7f698d79f8be4e2c6e45f0b0674122e51ec3bd9ee4cbfed9dd3fd3836c881f9a36793a70b6f302eda65e54bb057e41242aa250c111d1f7ad299e1f54c6f48088d1d3aebae77c9b6603553f1d03575cc6fc536", 0xac}, {&(0x7f00000013c0)="73d54170a42b729722727cf74523cfd5bed52f248bb2f994ad89715a189e5c639d4c89d003d34a5abcaf1ed699449bb6b50103f8ff643f6c716df8ff41a7ea33f73088b22a4ca9a691202626cc78634e8db0cc850f273af35742eccfc9b99a7f6ecab96248075a0429e397791953f8f5b5e5bc489dd52e0044f9c95bc3ad21a3c7c14591d3edcefcc3f90cad06a5d973ee6c29aa6ffe3898bf06becdeddad0c4c9855ca0510e8744cf92914cc09518e7f3b9af9191a040e514a236cfcc", 0xbd}, {&(0x7f0000001480)="19c6584f490498efe480122b40a6c6f0ab4afaf0bc444f95aa7ab2ccae192aabe2701a4c8e4933d725f18ab542a2048c14596d2453247e38f7ba3bf4e0d26ea108f2b525e21c115b5f0589924ff483cf38c83b02a4c6f4af7f9b7715130709b4f120517cf7114b9d4696b092774d89afc60553d0a276f0a1ea00d5113e93dd0361238c80190adf682d6ddc911b15e7b5235d34ea60ebb3a514dfebabe626d0434929b8de873714b36c41", 0xaa}], 0x5, &(0x7f00000015c0)=[@assoc={0x18, 0x117, 0x4, 0xb84e}, @op={0x18, 0x117, 0x3, 0xcbd71bec66e3dade}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x81}, @iv={0x90, 0x117, 0x2, 0x78, "b5d3eb26e38c79b9e3024eebd92ed8cf90205eae537c8c2a7e0985b9af81099e30c4c879df85d31864fe410db84e5aa69d9c9d687c40febcc3fa4cd496316508ad653b4abde393d10c4f7c9692ed06c64f0ce06602341325ab708d20b149f3e56964408d8c86ae5bb1748c50b6e4accfb1d3cb7f5d5283cf"}], 0xf0, 0x80}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="6c3e4043bcd69c383bdb8f76a822030abd1f773ae3cc8536c7a76930af8941d59f896aa82a999f35c5eee538aa781d10fdec0ba7bac259df71e93f55359d32133a54d35a8b65ced816d382d61790d730cfb6fc8e19784d449181cbc23cde9bbd18838df74377daf0a4b7ded1fc4747713032056dad91eec456baa514891d66faea2908bde46e1773a99b4e59a2659f824b4f74713c453ff22a88df3171c49e59daf92dc247458dc611e0bdd964a0174a17c06e956b8f6101d4700efd472302604abe0c4301", 0xc5}], 0x1, &(0x7f0000001800)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0xd8, 0x117, 0x2, 0xbd, "ac4fbd7c7b4db42f52f4c5943de6b12accb96fc6fc7f156581dc84312afa587580405dec4314cc35ca86e39e7d9230297619dc1e2019cad774a49ddd316b322eeb8eb7c7587d8b703af05aeeb124e8cb5aabfe18147ffb7f8e213a3e8478a3157f0297bdf2594327dcf3e56cfde26b8d14996fe83bfc83459f5abf308208bd230c23c768739f0a8202718fa6ea38d96aeeae6af54455dc1e1158ed70130ba13354fd97487c669459c9d2d25985040d3667913a1207cf3623d38166af82"}], 0x108, 0x24048000}], 0x4, 0xc0) 20:05:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = getpid() ioprio_get$pid(0x2, r3) 20:05:49 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, r4, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 994.459407][ T9195] input: syz1 as /devices/virtual/input/input479 [ 994.531138][ T9201] FAULT_INJECTION: forcing a failure. [ 994.531138][ T9201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 994.554717][ T9207] FAULT_INJECTION: forcing a failure. [ 994.554717][ T9207] name failslab, interval 1, probability 0, space 0, times 0 [ 994.582542][ T9207] CPU: 0 PID: 9207 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 994.589932][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.589936][ T9207] Call Trace: [ 994.589955][ T9207] dump_stack+0x172/0x1f0 [ 994.589979][ T9207] should_fail.cold+0xa/0x15 [ 994.603296][ T9207] ? fault_create_debugfs_attr+0x180/0x180 [ 994.603311][ T9207] ? lock_acquire+0x190/0x410 [ 994.603330][ T9207] ? anon_vma_clone+0x143/0x480 [ 994.612208][ T9207] __should_failslab+0x121/0x190 [ 994.612227][ T9207] should_failslab+0x9/0x14 [ 994.612245][ T9207] kmem_cache_alloc+0x47/0x710 [ 994.612269][ T9207] ? anon_vma_chain_link+0x154/0x1c0 [ 994.622699][ T9207] anon_vma_clone+0xde/0x480 [ 994.622717][ T9207] anon_vma_fork+0x8f/0x4a0 [ 994.622730][ T9207] ? dup_userfaultfd+0x15e/0x6d0 [ 994.622746][ T9207] ? memcpy+0x46/0x50 [ 994.632482][ T9207] dup_mm+0xa47/0x1430 [ 994.632502][ T9207] ? vm_area_dup+0x170/0x170 [ 994.632521][ T9207] ? debug_mutex_init+0x2d/0x5a [ 994.641738][ T9207] copy_process+0x28b7/0x6b00 [ 994.641752][ T9207] ? _kstrtoul+0x170/0x170 [ 994.641775][ T9207] ? __cleanup_sighand+0x60/0x60 [ 994.651701][ T9207] ? __f_unlock_pos+0x19/0x20 [ 994.651715][ T9207] ? __kasan_check_read+0x11/0x20 [ 994.651731][ T9207] ? lock_downgrade+0x920/0x920 [ 994.651748][ T9207] ? vfs_write+0x34c/0x5d0 [ 994.661134][ T9207] _do_fork+0x146/0xfa0 [ 994.661150][ T9207] ? copy_init_mm+0x20/0x20 [ 994.661161][ T9207] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 994.661177][ T9207] ? wait_for_completion+0x440/0x440 [ 994.669177][ T9207] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 994.669192][ T9207] __x64_sys_clone+0x18d/0x250 [ 994.669209][ T9207] ? ksys_write+0x1cf/0x290 [ 994.678597][ T9207] ? __ia32_sys_vfork+0xc0/0xc0 [ 994.678613][ T9207] ? trace_hardirqs_off_caller+0x65/0x230 [ 994.678628][ T9207] ? trace_hardirqs_on+0x67/0x240 [ 994.687696][ T9207] do_syscall_64+0xfd/0x6a0 [ 994.687714][ T9207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.687728][ T9207] RIP: 0033:0x4598e9 [ 994.697379][ T9207] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.697386][ T9207] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 994.697397][ T9207] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 994.697410][ T9207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.707262][ T9207] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.707269][ T9207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 994.707275][ T9207] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 994.708134][ T9201] CPU: 0 PID: 9201 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 994.729284][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.740078][ T9201] Call Trace: [ 994.740100][ T9201] dump_stack+0x172/0x1f0 [ 994.740118][ T9201] should_fail.cold+0xa/0x15 20:05:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = getpid() ioprio_get$pid(0x2, r3) 20:05:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x1f\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:50 executing program 3 (fault-call:2 fault-nth:21): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 994.740132][ T9201] ? fault_create_debugfs_attr+0x180/0x180 [ 994.740146][ T9201] ? ___might_sleep+0x163/0x280 [ 994.740175][ T9201] should_fail_alloc_page+0x50/0x60 [ 994.755981][ T9201] __alloc_pages_nodemask+0x1a1/0x900 [ 994.755996][ T9201] ? retint_kernel+0x2b/0x2b [ 994.756014][ T9201] ? __alloc_pages_slowpath+0x2520/0x2520 [ 994.766573][ T9201] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 994.766590][ T9201] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 994.766612][ T9201] alloc_pages_current+0x107/0x210 [ 994.776718][ T9201] ? ___might_sleep+0x163/0x280 [ 994.776735][ T9201] __vmalloc_node_range+0x4a9/0x7d0 [ 994.776753][ T9201] __vmalloc+0x44/0x50 [ 994.776773][ T9201] ? __do_sys_init_module+0x16e/0x240 [ 994.786509][ T9201] __do_sys_init_module+0x16e/0x240 [ 994.786525][ T9201] ? load_module+0x8220/0x8220 [ 994.786546][ T9201] ? __ia32_sys_read+0xb0/0xb0 [ 994.786567][ T9201] ? switch_fpu_return+0x1fa/0x4f0 [ 994.814530][ T9201] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 20:05:50 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 994.814548][ T9201] __x64_sys_init_module+0x6e/0xb0 [ 994.814566][ T9201] do_syscall_64+0xfd/0x6a0 [ 994.814584][ T9201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.830486][ T9201] RIP: 0033:0x4598e9 [ 994.830502][ T9201] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.830510][ T9201] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af 20:05:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() ioprio_get$pid(0x2, r2) [ 994.830523][ T9201] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 994.830530][ T9201] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 994.830542][ T9201] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.891114][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 994.891122][ T9201] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 994.898560][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 995.008723][ T9220] FAULT_INJECTION: forcing a failure. [ 995.008723][ T9220] name failslab, interval 1, probability 0, space 0, times 0 [ 995.107482][ T9220] CPU: 1 PID: 9220 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 995.114860][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.114865][ T9220] Call Trace: [ 995.114883][ T9220] dump_stack+0x172/0x1f0 [ 995.114901][ T9220] should_fail.cold+0xa/0x15 [ 995.114917][ T9220] ? fault_create_debugfs_attr+0x180/0x180 [ 995.114929][ T9220] ? page_to_nid.part.0+0x20/0x20 [ 995.114944][ T9220] ? ___might_sleep+0x163/0x280 [ 995.114960][ T9220] __should_failslab+0x121/0x190 [ 995.114976][ T9220] should_failslab+0x9/0x14 [ 995.114988][ T9220] kmem_cache_alloc+0x2aa/0x710 [ 995.115000][ T9220] ? anon_vma_clone+0x320/0x480 [ 995.115016][ T9220] anon_vma_fork+0xfc/0x4a0 [ 995.115031][ T9220] ? dup_userfaultfd+0x15e/0x6d0 [ 995.115042][ T9220] ? memcpy+0x46/0x50 [ 995.115055][ T9220] dup_mm+0xa47/0x1430 [ 995.115075][ T9220] ? vm_area_dup+0x170/0x170 [ 995.132693][ T9220] ? debug_mutex_init+0x2d/0x5a [ 995.143046][ T9220] copy_process+0x28b7/0x6b00 [ 995.143059][ T9220] ? _kstrtoul+0x170/0x170 [ 995.143076][ T9220] ? __cleanup_sighand+0x60/0x60 [ 995.143088][ T9220] ? __f_unlock_pos+0x19/0x20 [ 995.143101][ T9220] ? __kasan_check_read+0x11/0x20 [ 995.143117][ T9220] ? lock_downgrade+0x920/0x920 [ 995.143134][ T9220] ? vfs_write+0x34c/0x5d0 [ 995.150338][ T9214] input: syz1 as /devices/virtual/input/input480 [ 995.152984][ T9220] _do_fork+0x146/0xfa0 [ 995.176529][ T9220] ? copy_init_mm+0x20/0x20 [ 995.185401][ T9220] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 995.185418][ T9220] ? wait_for_completion+0x440/0x440 [ 995.198867][ T9220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 995.198884][ T9220] __x64_sys_clone+0x18d/0x250 [ 995.198902][ T9220] ? ksys_write+0x1cf/0x290 [ 995.252294][ T9220] ? __ia32_sys_vfork+0xc0/0xc0 [ 995.252312][ T9220] ? trace_hardirqs_off_caller+0x65/0x230 [ 995.263814][ T9220] ? trace_hardirqs_on+0x67/0x240 [ 995.263834][ T9220] do_syscall_64+0xfd/0x6a0 [ 995.273049][ T9220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.273058][ T9220] RIP: 0033:0x4598e9 20:05:50 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x5, 0x0, [{0x40000000, 0x5, 0x2, 0x3, 0x200, 0x0, 0x9}, {0x7, 0x740, 0x7, 0x200, 0x8, 0x40, 0xffffffff}, {0xc0000000, 0x5, 0x0, 0x7, 0x1ff, 0x1000, 0x8e}, {0x40000000, 0x1, 0x1, 0x4, 0x80, 0xfffffffffffeffff, 0x5}, {0x0, 0x400, 0x2, 0x1f, 0x9f, 0x401, 0x8c4}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x1, 0xfc, "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"}) ioctl$TIOCNOTTY(r0, 0x5422) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) [ 995.273073][ T9220] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.273080][ T9220] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.273091][ T9220] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 995.273103][ T9220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.283616][ T9220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:05:50 executing program 2 (fault-call:2 fault-nth:99): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 995.283624][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 995.283636][ T9220] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:50 executing program 3 (fault-call:2 fault-nth:22): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:50 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4}, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x9, 0x6, 0x5}, &(0x7f0000000240)=0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x2}}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() ioprio_get$pid(0x2, r2) [ 995.452858][ T9285] FAULT_INJECTION: forcing a failure. [ 995.452858][ T9285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 995.538059][ T9347] FAULT_INJECTION: forcing a failure. [ 995.538059][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 995.541432][ T9285] CPU: 1 PID: 9285 Comm: syz-executor.2 Not tainted 5.3.0 #0 [ 995.558211][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.568264][ T9285] Call Trace: [ 995.571551][ T9285] dump_stack+0x172/0x1f0 [ 995.575884][ T9285] should_fail.cold+0xa/0x15 [ 995.580475][ T9285] ? fault_create_debugfs_attr+0x180/0x180 [ 995.586283][ T9285] ? ___might_sleep+0x163/0x280 [ 995.591128][ T9285] should_fail_alloc_page+0x50/0x60 [ 995.596316][ T9285] __alloc_pages_nodemask+0x1a1/0x900 [ 995.601690][ T9285] ? __alloc_pages_slowpath+0x2520/0x2520 [ 995.607413][ T9285] ? kasan_unpoison_shadow+0x35/0x50 [ 995.612705][ T9285] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 995.618949][ T9285] alloc_pages_current+0x107/0x210 [ 995.624068][ T9285] ? ___might_sleep+0x163/0x280 [ 995.628914][ T9285] __vmalloc_node_range+0x4a9/0x7d0 [ 995.634110][ T9285] __vmalloc+0x44/0x50 [ 995.638173][ T9285] ? __do_sys_init_module+0x16e/0x240 [ 995.643532][ T9285] __do_sys_init_module+0x16e/0x240 [ 995.648719][ T9285] ? load_module+0x8220/0x8220 [ 995.653480][ T9285] ? __ia32_sys_read+0xb0/0xb0 [ 995.658230][ T9285] ? switch_fpu_return+0x1fa/0x4f0 [ 995.663354][ T9285] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 995.669427][ T9285] __x64_sys_init_module+0x6e/0xb0 [ 995.674544][ T9285] do_syscall_64+0xfd/0x6a0 [ 995.679058][ T9285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.685031][ T9285] RIP: 0033:0x4598e9 [ 995.688915][ T9285] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.688922][ T9285] RSP: 002b:00007f473b6d6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 995.688934][ T9285] RAX: ffffffffffffffda RBX: 00007f473b6d6c90 RCX: 00000000004598e9 [ 995.688941][ T9285] RDX: 00000000200016c0 RSI: 00000000000ffeab RDI: 0000000020001680 [ 995.688948][ T9285] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.688955][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f473b6d76d4 [ 995.688962][ T9285] R13: 00000000004c0175 R14: 00000000004d3c90 R15: 0000000000000004 [ 995.699216][ T9347] CPU: 1 PID: 9347 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 995.764575][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.774621][ T9347] Call Trace: [ 995.774642][ T9347] dump_stack+0x172/0x1f0 [ 995.774664][ T9347] should_fail.cold+0xa/0x15 [ 995.786829][ T9347] ? fault_create_debugfs_attr+0x180/0x180 [ 995.792643][ T9347] ? page_to_nid.part.0+0x20/0x20 [ 995.797653][ T9347] ? ___might_sleep+0x163/0x280 [ 995.802496][ T9347] __should_failslab+0x121/0x190 [ 995.802511][ T9347] should_failslab+0x9/0x14 [ 995.802523][ T9347] kmem_cache_alloc+0x2aa/0x710 [ 995.802536][ T9347] ? anon_vma_clone+0x320/0x480 [ 995.802550][ T9347] anon_vma_fork+0xfc/0x4a0 [ 995.802569][ T9347] ? dup_userfaultfd+0x15e/0x6d0 [ 995.831042][ T9347] ? memcpy+0x46/0x50 [ 995.835027][ T9347] dup_mm+0xa47/0x1430 20:05:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00/\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0xc1, 0x0}}, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x6, [0x6, 0x724, 0x5, 0x1b6, 0x1ff, 0x8, 0x734a, 0xfffffffffffffff8]}, 0x5c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000000)={0xfffffffffffffff8, 0x6, 0x8, 0x180000000000000}) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000300)={"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"}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edab0614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f3535400"/250], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x24, r4, 0x302, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0xc0010) [ 995.839106][ T9347] ? vm_area_dup+0x170/0x170 [ 995.843702][ T9347] ? debug_mutex_init+0x2d/0x5a [ 995.848552][ T9347] copy_process+0x28b7/0x6b00 [ 995.848571][ T9347] ? _kstrtoul+0x170/0x170 [ 995.857654][ T9347] ? __cleanup_sighand+0x60/0x60 [ 995.863063][ T9347] ? __f_unlock_pos+0x19/0x20 [ 995.867742][ T9347] ? __kasan_check_read+0x11/0x20 [ 995.872770][ T9347] ? lock_downgrade+0x920/0x920 [ 995.877622][ T9347] ? vfs_write+0x34c/0x5d0 [ 995.882042][ T9347] _do_fork+0x146/0xfa0 20:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x04\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 995.886204][ T9347] ? copy_init_mm+0x20/0x20 [ 995.890710][ T9347] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 995.896255][ T9347] ? wait_for_completion+0x440/0x440 [ 995.901547][ T9347] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 995.907780][ T9347] __x64_sys_clone+0x18d/0x250 [ 995.912543][ T9347] ? ksys_write+0x1cf/0x290 [ 995.912557][ T9347] ? __ia32_sys_vfork+0xc0/0xc0 [ 995.912571][ T9347] ? trace_hardirqs_off_caller+0x65/0x230 [ 995.912582][ T9347] ? trace_hardirqs_on+0x67/0x240 [ 995.912597][ T9347] do_syscall_64+0xfd/0x6a0 [ 995.912614][ T9347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 995.912623][ T9347] RIP: 0033:0x4598e9 [ 995.912638][ T9347] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 995.912644][ T9347] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 995.974984][ T9347] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 20:05:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x7, {0xffffffff, 0x4, 0x0, 0x4}}) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r3 = socket$inet6(0xa, 0x3, 0xffffffffffffffc1) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x83d, 0x2c40}) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x3d) 20:05:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = getpid() ioprio_get$pid(0x2, r2) [ 995.982959][ T9347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.990934][ T9347] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 995.998908][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 996.006876][ T9347] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = getpid() ioprio_get$pid(0x2, r2) [ 996.067583][ T9370] input: syz1 as /devices/virtual/input/input482 [ 996.093844][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 20:05:51 executing program 3 (fault-call:2 fault-nth:23): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x02\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 996.180070][ T9380] input: syz1 as /devices/virtual/input/input483 20:05:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00?\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00?et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() ioprio_get$pid(0x2, r1) [ 996.408517][ T9463] FAULT_INJECTION: forcing a failure. [ 996.408517][ T9463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 996.444537][ T9463] CPU: 1 PID: 9463 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 996.451941][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.461996][ T9463] Call Trace: [ 996.465289][ T9463] dump_stack+0x172/0x1f0 [ 996.469630][ T9463] should_fail.cold+0xa/0x15 [ 996.474224][ T9463] ? fault_create_debugfs_attr+0x180/0x180 [ 996.474244][ T9463] ? ___might_sleep+0x163/0x280 [ 996.484876][ T9463] should_fail_alloc_page+0x50/0x60 [ 996.490088][ T9463] __alloc_pages_nodemask+0x1a1/0x900 [ 996.495473][ T9463] ? __alloc_pages_slowpath+0x2520/0x2520 [ 996.501203][ T9463] ? anon_vma_clone+0xde/0x480 [ 996.505969][ T9463] ? save_stack+0x5c/0x90 [ 996.505979][ T9463] ? save_stack+0x23/0x90 [ 996.505997][ T9463] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 996.514615][ T9463] ? kasan_slab_alloc+0xf/0x20 [ 996.523963][ T9420] input: syz1 as /devices/virtual/input/input484 [ 996.525147][ T9463] ? kmem_cache_alloc+0x121/0x710 [ 996.525161][ T9463] ? anon_vma_fork+0x1ea/0x4a0 [ 996.525179][ T9463] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 996.525199][ T9463] alloc_pages_current+0x107/0x210 [ 996.536498][ T9463] ? _do_fork+0x146/0xfa0 20:05:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = dup2(r2, r3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x100000001) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00@et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 996.536513][ T9463] get_zeroed_page+0x14/0x50 [ 996.536524][ T9463] __pud_alloc+0x3b/0x250 [ 996.536541][ T9463] pud_alloc+0xde/0x150 [ 996.547503][ T9463] copy_page_range+0x37a/0x1ee0 [ 996.547519][ T9463] ? mark_held_locks+0xf0/0xf0 [ 996.547538][ T9463] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 996.556932][ T9463] ? mark_held_locks+0xf0/0xf0 [ 996.556947][ T9463] ? __kasan_check_read+0x11/0x20 [ 996.556965][ T9463] ? dup_mm+0x7cd/0x1430 [ 996.569998][ T9463] ? __kasan_check_read+0x11/0x20 [ 996.570013][ T9463] ? dup_mm+0x776/0x1430 [ 996.570027][ T9463] ? pmd_alloc+0x180/0x180 [ 996.570040][ T9463] ? lock_downgrade+0x920/0x920 [ 996.570054][ T9463] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 996.570069][ T9463] ? validate_mm_rb+0xa3/0xc0 [ 996.570084][ T9463] ? __vma_link_rb+0x275/0x370 [ 996.600081][ T9463] ? __kasan_check_write+0x14/0x20 [ 996.600098][ T9463] dup_mm+0xa67/0x1430 [ 996.600122][ T9463] ? vm_area_dup+0x170/0x170 [ 996.600137][ T9463] ? debug_mutex_init+0x2d/0x5a [ 996.600152][ T9463] copy_process+0x28b7/0x6b00 [ 996.600164][ T9463] ? _kstrtoul+0x170/0x170 [ 996.600182][ T9463] ? __cleanup_sighand+0x60/0x60 [ 996.613813][ T9463] ? __f_unlock_pos+0x19/0x20 [ 996.613828][ T9463] ? __kasan_check_read+0x11/0x20 [ 996.613851][ T9463] ? lock_downgrade+0x920/0x920 [ 996.624389][ T9463] ? vfs_write+0x34c/0x5d0 [ 996.624406][ T9463] _do_fork+0x146/0xfa0 [ 996.624422][ T9463] ? copy_init_mm+0x20/0x20 [ 996.634247][ T9463] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 996.634263][ T9463] ? wait_for_completion+0x440/0x440 [ 996.634281][ T9463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 996.634298][ T9463] __x64_sys_clone+0x18d/0x250 [ 996.643447][ T9463] ? ksys_write+0x1cf/0x290 [ 996.643463][ T9463] ? __ia32_sys_vfork+0xc0/0xc0 [ 996.643479][ T9463] ? trace_hardirqs_off_caller+0x65/0x230 [ 996.643494][ T9463] ? trace_hardirqs_on+0x67/0x240 [ 996.652896][ T9463] do_syscall_64+0xfd/0x6a0 [ 996.652915][ T9463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.652929][ T9463] RIP: 0033:0x4598e9 20:05:52 executing program 3 (fault-call:2 fault-nth:24): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 996.661992][ T9463] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 996.662000][ T9463] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 996.662013][ T9463] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 996.662019][ T9463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.662025][ T9463] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 996.662032][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 996.662039][ T9463] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x200000000003, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="018461ebb96f6ba8e8d88e81f5f06191", 0x10) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x2}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 996.913933][ T9605] FAULT_INJECTION: forcing a failure. [ 996.913933][ T9605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x02et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() ioprio_get$pid(0x2, r1) [ 996.993590][ T9420] input: syz1 as /devices/virtual/input/input485 [ 996.995486][ T9605] CPU: 1 PID: 9605 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 997.007312][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.017359][ T9605] Call Trace: [ 997.020653][ T9605] dump_stack+0x172/0x1f0 [ 997.020672][ T9605] should_fail.cold+0xa/0x15 [ 997.020690][ T9605] ? fault_create_debugfs_attr+0x180/0x180 [ 997.020705][ T9605] ? ___might_sleep+0x163/0x280 [ 997.020726][ T9605] should_fail_alloc_page+0x50/0x60 [ 997.045492][ T9605] __alloc_pages_nodemask+0x1a1/0x900 [ 997.045510][ T9605] ? __alloc_pages_slowpath+0x2520/0x2520 [ 997.056574][ T9605] ? lock_downgrade+0x920/0x920 [ 997.061429][ T9605] ? rwlock_bug.part.0+0x90/0x90 [ 997.066376][ T9605] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 997.072625][ T9605] alloc_pages_current+0x107/0x210 [ 997.077737][ T9605] ? do_raw_spin_unlock+0x57/0x270 [ 997.082846][ T9605] __pmd_alloc+0x41/0x460 [ 997.082856][ T9605] ? pmd_val+0x100/0x100 [ 997.082873][ T9605] pmd_alloc+0x10c/0x180 [ 997.095638][ T9605] copy_page_range+0x610/0x1ee0 [ 997.100500][ T9605] ? mark_held_locks+0xf0/0xf0 [ 997.100517][ T9605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.100532][ T9605] ? mark_held_locks+0xf0/0xf0 [ 997.100546][ T9605] ? __kasan_check_read+0x11/0x20 [ 997.100568][ T9605] ? dup_mm+0x7cd/0x1430 [ 997.125501][ T9605] ? __kasan_check_read+0x11/0x20 [ 997.130524][ T9605] ? pmd_alloc+0x180/0x180 [ 997.130541][ T9605] ? lock_downgrade+0x920/0x920 [ 997.130556][ T9605] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 997.130572][ T9605] ? validate_mm_rb+0xa3/0xc0 [ 997.130585][ T9605] ? __vma_link_rb+0x275/0x370 [ 997.130603][ T9605] ? __kasan_check_write+0x14/0x20 [ 997.139840][ T9605] dup_mm+0xa67/0x1430 [ 997.139860][ T9605] ? vm_area_dup+0x170/0x170 [ 997.139875][ T9605] ? debug_mutex_init+0x2d/0x5a [ 997.139890][ T9605] copy_process+0x28b7/0x6b00 [ 997.139903][ T9605] ? _kstrtoul+0x170/0x170 [ 997.139923][ T9605] ? __cleanup_sighand+0x60/0x60 [ 997.160097][ T9605] ? __f_unlock_pos+0x19/0x20 [ 997.160112][ T9605] ? __kasan_check_read+0x11/0x20 [ 997.160135][ T9605] ? lock_downgrade+0x920/0x920 [ 997.160157][ T9605] ? vfs_write+0x34c/0x5d0 [ 997.168783][ T9605] _do_fork+0x146/0xfa0 [ 997.210663][ T9605] ? copy_init_mm+0x20/0x20 [ 997.215176][ T9605] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 997.220739][ T9605] ? wait_for_completion+0x440/0x440 [ 997.220759][ T9605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 997.220774][ T9605] __x64_sys_clone+0x18d/0x250 [ 997.220791][ T9605] ? ksys_write+0x1cf/0x290 [ 997.232285][ T9605] ? __ia32_sys_vfork+0xc0/0xc0 [ 997.232301][ T9605] ? trace_hardirqs_off_caller+0x65/0x230 [ 997.232312][ T9605] ? trace_hardirqs_on+0x67/0x240 [ 997.232327][ T9605] do_syscall_64+0xfd/0x6a0 [ 997.232343][ T9605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 997.232353][ T9605] RIP: 0033:0x4598e9 [ 997.232366][ T9605] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.232371][ T9605] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.257136][ T9605] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 997.257144][ T9605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.257156][ T9605] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.271417][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 997.271426][ T9605] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\a]\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:52 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x02\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:52 executing program 3 (fault-call:2 fault-nth:25): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:52 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) [ 997.440482][ T9656] FAULT_INJECTION: forcing a failure. [ 997.440482][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 997.477942][ T9664] input: syz1 as /devices/virtual/input/input486 [ 997.479998][ T9656] CPU: 1 PID: 9656 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 997.491660][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.501707][ T9656] Call Trace: [ 997.501729][ T9656] dump_stack+0x172/0x1f0 [ 997.501748][ T9656] should_fail.cold+0xa/0x15 [ 997.501766][ T9656] ? fault_create_debugfs_attr+0x180/0x180 [ 997.501785][ T9656] ? page_to_nid.part.0+0x20/0x20 [ 997.513955][ T9656] ? ___might_sleep+0x163/0x280 [ 997.524824][ T9656] __should_failslab+0x121/0x190 [ 997.524846][ T9656] should_failslab+0x9/0x14 [ 997.534586][ T9656] kmem_cache_alloc+0x2aa/0x710 [ 997.534605][ T9656] ? alloc_pages_current+0x10f/0x210 [ 997.534624][ T9656] ? do_raw_spin_unlock+0x57/0x270 [ 997.549221][ T9656] __pmd_alloc+0xc9/0x460 [ 997.549232][ T9656] ? pmd_val+0x100/0x100 [ 997.549245][ T9656] pmd_alloc+0x10c/0x180 [ 997.549259][ T9656] copy_page_range+0x610/0x1ee0 [ 997.549275][ T9656] ? mark_held_locks+0xf0/0xf0 [ 997.549290][ T9656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.549308][ T9656] ? mark_held_locks+0xf0/0xf0 20:05:52 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() ioprio_get$pid(0x2, r0) [ 997.558725][ T9656] ? __kasan_check_read+0x11/0x20 [ 997.558746][ T9656] ? dup_mm+0x7cd/0x1430 [ 997.567179][ T9656] ? __kasan_check_read+0x11/0x20 [ 997.567198][ T9656] ? pmd_alloc+0x180/0x180 [ 997.576760][ T9656] ? lock_downgrade+0x920/0x920 [ 997.576777][ T9656] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 997.576801][ T9656] ? validate_mm_rb+0xa3/0xc0 [ 997.587774][ T9656] ? __vma_link_rb+0x275/0x370 [ 997.587788][ T9656] ? __kasan_check_write+0x14/0x20 [ 997.587804][ T9656] dup_mm+0xa67/0x1430 [ 997.587824][ T9656] ? vm_area_dup+0x170/0x170 [ 997.587839][ T9656] ? debug_mutex_init+0x2d/0x5a [ 997.587856][ T9656] copy_process+0x28b7/0x6b00 [ 997.587870][ T9656] ? _kstrtoul+0x170/0x170 [ 997.587888][ T9656] ? __cleanup_sighand+0x60/0x60 [ 997.587901][ T9656] ? __f_unlock_pos+0x19/0x20 [ 997.587913][ T9656] ? __kasan_check_read+0x11/0x20 [ 997.587930][ T9656] ? lock_downgrade+0x920/0x920 [ 997.587942][ T9656] ? vfs_write+0x34c/0x5d0 [ 997.587957][ T9656] _do_fork+0x146/0xfa0 [ 997.587971][ T9656] ? copy_init_mm+0x20/0x20 20:05:53 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() ioprio_get$pid(0x2, r0) 20:05:53 executing program 3 (fault-call:2 fault-nth:26): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 997.587984][ T9656] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 997.587997][ T9656] ? wait_for_completion+0x440/0x440 [ 997.588017][ T9656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 997.588032][ T9656] __x64_sys_clone+0x18d/0x250 [ 997.588042][ T9656] ? ksys_write+0x1cf/0x290 [ 997.588056][ T9656] ? __ia32_sys_vfork+0xc0/0xc0 [ 997.588073][ T9656] ? trace_hardirqs_off_caller+0x65/0x230 [ 997.588085][ T9656] ? trace_hardirqs_on+0x67/0x240 [ 997.588102][ T9656] do_syscall_64+0xfd/0x6a0 [ 997.588118][ T9656] entry_SYSCALL_64_after_hwframe+0x49/0xbe 20:05:53 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() ioprio_get$pid(0x2, r0) [ 997.588129][ T9656] RIP: 0033:0x4598e9 [ 997.588143][ T9656] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 997.588150][ T9656] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 997.588163][ T9656] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 997.588170][ T9656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 997.588177][ T9656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 997.588185][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 997.588193][ T9656] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 997.804965][ T9798] FAULT_INJECTION: forcing a failure. [ 997.804965][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 997.832567][ T9798] CPU: 0 PID: 9798 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 997.839977][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 997.850029][ T9798] Call Trace: [ 997.853321][ T9798] dump_stack+0x172/0x1f0 [ 997.853343][ T9798] should_fail.cold+0xa/0x15 [ 997.862327][ T9798] ? fault_create_debugfs_attr+0x180/0x180 [ 997.862347][ T9798] ? page_to_nid.part.0+0x20/0x20 [ 997.873135][ T9798] ? ___might_sleep+0x163/0x280 [ 997.873153][ T9798] __should_failslab+0x121/0x190 [ 997.873168][ T9798] should_failslab+0x9/0x14 [ 997.873184][ T9798] kmem_cache_alloc+0x2aa/0x710 [ 997.892268][ T9798] ? alloc_pages_current+0x10f/0x210 [ 997.899480][ T9798] ? do_raw_spin_unlock+0x57/0x270 [ 997.904609][ T9798] __pmd_alloc+0xc9/0x460 [ 997.908946][ T9798] ? pmd_val+0x100/0x100 [ 997.913199][ T9798] pmd_alloc+0x10c/0x180 [ 997.917446][ T9798] copy_page_range+0x610/0x1ee0 [ 997.922303][ T9798] ? mark_held_locks+0xf0/0xf0 [ 997.927073][ T9798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 997.933320][ T9798] ? mark_held_locks+0xf0/0xf0 [ 997.938090][ T9798] ? __kasan_check_read+0x11/0x20 [ 997.943117][ T9798] ? dup_mm+0x7cd/0x1430 [ 997.947365][ T9798] ? __kasan_check_read+0x11/0x20 [ 997.952376][ T9798] ? pmd_alloc+0x180/0x180 [ 997.952390][ T9798] ? lock_downgrade+0x920/0x920 [ 997.952403][ T9798] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 997.952421][ T9798] ? validate_mm_rb+0xa3/0xc0 [ 997.972008][ T9798] ? __vma_link_rb+0x275/0x370 [ 997.976777][ T9798] ? __kasan_check_write+0x14/0x20 [ 997.981897][ T9798] dup_mm+0xa67/0x1430 [ 997.985979][ T9798] ? vm_area_dup+0x170/0x170 [ 997.990573][ T9798] ? debug_mutex_init+0x2d/0x5a [ 997.995429][ T9798] copy_process+0x28b7/0x6b00 [ 998.000106][ T9798] ? _kstrtoul+0x170/0x170 [ 998.004528][ T9798] ? __cleanup_sighand+0x60/0x60 [ 998.009507][ T9798] ? __f_unlock_pos+0x19/0x20 [ 998.009521][ T9798] ? __kasan_check_read+0x11/0x20 [ 998.009542][ T9798] ? lock_downgrade+0x920/0x920 [ 998.019199][ T9798] ? vfs_write+0x34c/0x5d0 [ 998.019214][ T9798] _do_fork+0x146/0xfa0 [ 998.019232][ T9798] ? copy_init_mm+0x20/0x20 [ 998.037093][ T9798] ? __mutex_unlock_slowpath+0xf8/0x6b0 20:05:53 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) 20:05:53 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) [ 998.042648][ T9798] ? wait_for_completion+0x440/0x440 [ 998.048207][ T9798] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 998.054459][ T9798] __x64_sys_clone+0x18d/0x250 [ 998.059230][ T9798] ? ksys_write+0x1cf/0x290 [ 998.063734][ T9798] ? __ia32_sys_vfork+0xc0/0xc0 [ 998.068592][ T9798] ? trace_hardirqs_off_caller+0x65/0x230 [ 998.074312][ T9798] ? trace_hardirqs_on+0x67/0x240 [ 998.079338][ T9798] do_syscall_64+0xfd/0x6a0 [ 998.083847][ T9798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.089727][ T9798] RIP: 0033:0x4598e9 [ 998.093600][ T9798] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.113183][ T9798] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 998.121572][ T9798] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 998.129530][ T9798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 998.137478][ T9798] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.145428][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 998.153383][ T9798] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 998.196331][ T9829] input: syz1 as /devices/virtual/input/input487 20:05:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x1dt\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:53 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) 20:05:53 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00?\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:53 executing program 3 (fault-call:2 fault-nth:27): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) select(0x40, &(0x7f0000000040)={0xffffffffffffff00, 0xfffffffffffffffd, 0x3ff, 0xc77, 0x3ff, 0x2, 0x7, 0x100}, &(0x7f0000000080)={0x69, 0x9, 0x0, 0xffffffffffffff39, 0xd06, 0x8, 0x7fff, 0x6}, &(0x7f00000000c0)={0xbaca, 0x4, 0x5, 0xb9e6, 0xfff, 0xfffffffffffffff7, 0x7, 0x3ff}, &(0x7f0000000200)={0x0, 0x7530}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001840)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001940)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001980)={@rand_addr="b8d8f5c6466b97a552293c2db06ed405", 0x27, r3}) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000240)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fchown(r6, r4, r7) 20:05:53 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) [ 998.343235][ T9846] FAULT_INJECTION: forcing a failure. [ 998.343235][ T9846] name failslab, interval 1, probability 0, space 0, times 0 20:05:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00@\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 998.388568][ T9853] input: syz1 as /devices/virtual/input/input488 [ 998.423753][ T9846] CPU: 1 PID: 9846 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 998.431151][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.441210][ T9846] Call Trace: [ 998.444500][ T9846] dump_stack+0x172/0x1f0 [ 998.444528][ T9846] should_fail.cold+0xa/0x15 [ 998.453423][ T9846] ? fault_create_debugfs_attr+0x180/0x180 [ 998.459232][ T9846] ? page_to_nid.part.0+0x20/0x20 [ 998.464260][ T9846] ? ___might_sleep+0x163/0x280 [ 998.469122][ T9846] __should_failslab+0x121/0x190 [ 998.474059][ T9846] should_failslab+0x9/0x14 [ 998.474072][ T9846] kmem_cache_alloc+0x2aa/0x710 [ 998.474095][ T9846] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 998.483411][ T9846] ptlock_alloc+0x20/0x70 [ 998.483426][ T9846] pte_alloc_one+0x6d/0x1a0 [ 998.483444][ T9846] __pte_alloc+0x20/0x310 [ 998.502782][ T9846] copy_page_range+0x1520/0x1ee0 [ 998.507725][ T9846] ? mark_held_locks+0xf0/0xf0 [ 998.512494][ T9846] ? __kasan_check_read+0x11/0x20 [ 998.512517][ T9846] ? dup_mm+0x7cd/0x1430 [ 998.521734][ T9846] ? pmd_alloc+0x180/0x180 [ 998.521747][ T9846] ? lock_downgrade+0x920/0x920 [ 998.521762][ T9846] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 998.521776][ T9846] ? validate_mm_rb+0xa3/0xc0 [ 998.521791][ T9846] ? __vma_link_rb+0x275/0x370 [ 998.531016][ T9846] ? __kasan_check_write+0x14/0x20 [ 998.541394][ T9846] dup_mm+0xa67/0x1430 [ 998.541416][ T9846] ? vm_area_dup+0x170/0x170 [ 998.551244][ T9846] ? debug_mutex_init+0x2d/0x5a [ 998.551260][ T9846] copy_process+0x28b7/0x6b00 [ 998.551273][ T9846] ? _kstrtoul+0x170/0x170 [ 998.551292][ T9846] ? __cleanup_sighand+0x60/0x60 [ 998.551310][ T9846] ? __f_unlock_pos+0x19/0x20 [ 998.559917][ T9846] ? __kasan_check_read+0x11/0x20 [ 998.559935][ T9846] ? lock_downgrade+0x920/0x920 [ 998.559948][ T9846] ? vfs_write+0x34c/0x5d0 [ 998.559961][ T9846] _do_fork+0x146/0xfa0 [ 998.559978][ T9846] ? copy_init_mm+0x20/0x20 [ 998.569455][ T9846] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 998.569470][ T9846] ? wait_for_completion+0x440/0x440 [ 998.569487][ T9846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 998.569501][ T9846] __x64_sys_clone+0x18d/0x250 [ 998.569513][ T9846] ? ksys_write+0x1cf/0x290 [ 998.569529][ T9846] ? __ia32_sys_vfork+0xc0/0xc0 20:05:53 executing program 3 (fault-call:2 fault-nth:28): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:54 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) [ 998.578854][ T9846] ? trace_hardirqs_off_caller+0x65/0x230 [ 998.578866][ T9846] ? trace_hardirqs_on+0x67/0x240 [ 998.578884][ T9846] do_syscall_64+0xfd/0x6a0 [ 998.578900][ T9846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 998.578909][ T9846] RIP: 0033:0x4598e9 [ 998.578922][ T9846] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 998.578935][ T9846] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 998.593413][ T9846] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 998.593421][ T9846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 998.593428][ T9846] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 998.593436][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 998.593444][ T9846] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 998.693693][ T9970] FAULT_INJECTION: forcing a failure. 20:05:54 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r0 = getpid() ioprio_get$pid(0x2, r0) [ 998.693693][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 998.750164][ T9853] input: syz1 as /devices/virtual/input/input489 20:05:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000), 0x4) [ 998.844791][ T9970] CPU: 1 PID: 9970 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 998.852187][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 998.862236][ T9970] Call Trace: [ 998.862257][ T9970] dump_stack+0x172/0x1f0 [ 998.862275][ T9970] should_fail.cold+0xa/0x15 [ 998.862289][ T9970] ? fault_create_debugfs_attr+0x180/0x180 [ 998.862307][ T9970] ? page_to_nid.part.0+0x20/0x20 [ 998.874462][ T9970] ? ___might_sleep+0x163/0x280 [ 998.874483][ T9970] __should_failslab+0x121/0x190 [ 998.895033][ T9970] should_failslab+0x9/0x14 [ 998.899534][ T9970] kmem_cache_alloc+0x2aa/0x710 [ 998.899551][ T9970] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 998.899572][ T9970] ptlock_alloc+0x20/0x70 [ 998.910648][ T9970] pte_alloc_one+0x6d/0x1a0 [ 998.910662][ T9970] __pte_alloc+0x20/0x310 [ 998.910675][ T9970] copy_page_range+0x1520/0x1ee0 [ 998.910690][ T9970] ? mark_held_locks+0xf0/0xf0 [ 998.910707][ T9970] ? __kasan_check_read+0x11/0x20 [ 998.910728][ T9970] ? dup_mm+0x7cd/0x1430 [ 998.928753][ T9970] ? pmd_alloc+0x180/0x180 [ 998.947161][ T9970] ? lock_downgrade+0x920/0x920 [ 998.952019][ T9970] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 998.957736][ T9970] ? validate_mm_rb+0xa3/0xc0 [ 998.962411][ T9970] ? __vma_link_rb+0x275/0x370 [ 998.967175][ T9970] ? __kasan_check_write+0x14/0x20 [ 998.972291][ T9970] dup_mm+0xa67/0x1430 [ 998.976363][ T9970] ? vm_area_dup+0x170/0x170 [ 998.980957][ T9970] ? debug_mutex_init+0x2d/0x5a [ 998.985813][ T9970] copy_process+0x28b7/0x6b00 [ 998.990488][ T9970] ? _kstrtoul+0x170/0x170 [ 998.994917][ T9970] ? __cleanup_sighand+0x60/0x60 [ 998.999854][ T9970] ? __f_unlock_pos+0x19/0x20 [ 999.004534][ T9970] ? __kasan_check_read+0x11/0x20 [ 999.009571][ T9970] ? lock_downgrade+0x920/0x920 [ 999.014526][ T9970] ? vfs_write+0x34c/0x5d0 [ 999.018948][ T9970] _do_fork+0x146/0xfa0 [ 999.023104][ T9970] ? copy_init_mm+0x20/0x20 [ 999.027609][ T9970] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 999.033158][ T9970] ? wait_for_completion+0x440/0x440 [ 999.038453][ T9970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 20:05:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x0e\xba\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x10\x10', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:54 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 999.044708][ T9970] __x64_sys_clone+0x18d/0x250 [ 999.049476][ T9970] ? ksys_write+0x1cf/0x290 [ 999.054010][ T9970] ? __ia32_sys_vfork+0xc0/0xc0 [ 999.058862][ T9970] ? trace_hardirqs_off_caller+0x65/0x230 [ 999.064584][ T9970] ? trace_hardirqs_on+0x67/0x240 [ 999.069614][ T9970] do_syscall_64+0xfd/0x6a0 [ 999.074121][ T9970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.080005][ T9970] RIP: 0033:0x4598e9 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 999.083903][ T9970] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.103499][ T9970] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.103515][ T9970] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 999.103522][ T9970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 999.103536][ T9970] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.127849][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 999.143758][ T9970] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 999.162993][ T9994] input: syz1 as /devices/virtual/input/input490 20:05:54 executing program 3 (fault-call:2 fault-nth:29): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 999.227149][T10011] input: syz1 as /devices/virtual/input/input491 20:05:54 executing program 1: r0 = socket$inet6(0xa, 0x1720d65c5f3853f4, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x408001, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockname(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000300)={'ipvs\x00'}, &(0x7f0000000340)=0x1e) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0xfffffffffffffbff, 0x1, 0x0, 0x4, 0x7947}, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000003c0)={'bridge0\x00', &(0x7f0000000380)=@ethtool_pauseparam={0x13, 0x0, 0x80000000, 0x401}}) 20:05:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x01\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 999.302122][T10056] FAULT_INJECTION: forcing a failure. [ 999.302122][T10056] name failslab, interval 1, probability 0, space 0, times 0 20:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:54 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() ioprio_get$pid(0x2, r1) [ 999.474799][T10120] input: syz1 as /devices/virtual/input/input492 [ 999.521246][T10056] CPU: 0 PID: 10056 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 999.528715][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 999.538763][T10056] Call Trace: [ 999.542077][T10056] dump_stack+0x172/0x1f0 [ 999.546852][T10056] should_fail.cold+0xa/0x15 [ 999.551453][T10056] ? fault_create_debugfs_attr+0x180/0x180 [ 999.557271][T10056] ? percpu_ref_put_many+0x94/0x190 [ 999.562578][T10056] ? __kasan_check_read+0x11/0x20 [ 999.567610][T10056] __should_failslab+0x121/0x190 [ 999.572561][T10056] should_failslab+0x9/0x14 [ 999.577062][T10056] kmem_cache_alloc+0x47/0x710 [ 999.581834][T10056] anon_vma_clone+0xde/0x480 [ 999.586432][T10056] anon_vma_fork+0x8f/0x4a0 [ 999.590941][T10056] ? dup_userfaultfd+0x15e/0x6d0 [ 999.595880][T10056] ? memcpy+0x46/0x50 [ 999.599867][T10056] dup_mm+0xa47/0x1430 [ 999.604037][T10056] ? vm_area_dup+0x170/0x170 [ 999.608629][T10056] ? debug_mutex_init+0x2d/0x5a [ 999.613483][T10056] copy_process+0x28b7/0x6b00 [ 999.618164][T10056] ? _kstrtoul+0x170/0x170 [ 999.622581][T10056] ? __cleanup_sighand+0x60/0x60 [ 999.627521][T10056] ? __f_unlock_pos+0x19/0x20 [ 999.632199][T10056] ? __kasan_check_read+0x11/0x20 [ 999.637234][T10056] ? lock_downgrade+0x920/0x920 [ 999.642084][T10056] ? vfs_write+0x34c/0x5d0 [ 999.646508][T10056] _do_fork+0x146/0xfa0 [ 999.650665][T10056] ? copy_init_mm+0x20/0x20 [ 999.655174][T10056] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 999.660727][T10056] ? wait_for_completion+0x440/0x440 [ 999.666032][T10056] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 999.672286][T10056] __x64_sys_clone+0x18d/0x250 [ 999.677052][T10056] ? ksys_write+0x1cf/0x290 [ 999.681556][T10056] ? __ia32_sys_vfork+0xc0/0xc0 [ 999.686415][T10056] ? trace_hardirqs_off_caller+0x65/0x230 [ 999.692162][T10056] ? trace_hardirqs_on+0x67/0x240 [ 999.697190][T10056] do_syscall_64+0xfd/0x6a0 [ 999.701699][T10056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 999.707586][T10056] RIP: 0033:0x4598e9 [ 999.711482][T10056] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 999.731083][T10056] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 999.739494][T10056] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 999.747467][T10056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 999.755572][T10056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 999.763544][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 999.771518][T10056] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:55 executing program 3 (fault-call:2 fault-nth:30): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 999.812720][T10126] input: syz1 as /devices/virtual/input/input493 20:05:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x02\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = accept(r2, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000480)="43107afd1bc67cf8d10d4fb5ee1d377c90719c229060baaa48a7ecdfb14116a5c2875fa73b1c09508603901badf28c246a612ea0") ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x800000, 0x100000000, 0x2002, 0x1000000000000], 0xb}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r6, 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x80000000, 0x0, 0xf40}, 0x10) 20:05:55 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1000.008361][T10279] FAULT_INJECTION: forcing a failure. [ 1000.008361][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.044425][T10279] CPU: 1 PID: 10279 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1000.051905][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.061948][T10279] Call Trace: [ 1000.061970][T10279] dump_stack+0x172/0x1f0 [ 1000.061989][T10279] should_fail.cold+0xa/0x15 [ 1000.062006][T10279] ? fault_create_debugfs_attr+0x180/0x180 [ 1000.062024][T10279] ? percpu_ref_put_many+0x94/0x190 [ 1000.062036][T10279] ? __kasan_check_read+0x11/0x20 [ 1000.062051][T10279] __should_failslab+0x121/0x190 [ 1000.062065][T10279] should_failslab+0x9/0x14 [ 1000.062076][T10279] kmem_cache_alloc+0x47/0x710 [ 1000.062098][T10279] anon_vma_clone+0xde/0x480 [ 1000.074270][T10279] anon_vma_fork+0x8f/0x4a0 [ 1000.074285][T10279] ? dup_userfaultfd+0x15e/0x6d0 [ 1000.074302][T10279] ? memcpy+0x46/0x50 [ 1000.095183][T10279] dup_mm+0xa47/0x1430 [ 1000.095206][T10279] ? vm_area_dup+0x170/0x170 [ 1000.095226][T10279] ? debug_mutex_init+0x2d/0x5a [ 1000.109044][T10279] copy_process+0x28b7/0x6b00 [ 1000.109060][T10279] ? _kstrtoul+0x170/0x170 [ 1000.109078][T10279] ? __cleanup_sighand+0x60/0x60 [ 1000.109091][T10279] ? __f_unlock_pos+0x19/0x20 20:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1000.109104][T10279] ? __kasan_check_read+0x11/0x20 [ 1000.109124][T10279] ? lock_downgrade+0x920/0x920 [ 1000.118521][T10279] ? vfs_write+0x34c/0x5d0 [ 1000.118539][T10279] _do_fork+0x146/0xfa0 [ 1000.118552][T10279] ? copy_init_mm+0x20/0x20 [ 1000.118569][T10279] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1000.126574][T10279] ? wait_for_completion+0x440/0x440 [ 1000.126595][T10279] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1000.126614][T10279] __x64_sys_clone+0x18d/0x250 [ 1000.136015][T10279] ? ksys_write+0x1cf/0x290 [ 1000.136031][T10279] ? __ia32_sys_vfork+0xc0/0xc0 [ 1000.136047][T10279] ? trace_hardirqs_off_caller+0x65/0x230 [ 1000.136062][T10279] ? trace_hardirqs_on+0x67/0x240 [ 1000.145115][T10279] do_syscall_64+0xfd/0x6a0 [ 1000.145135][T10279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.145145][T10279] RIP: 0033:0x4598e9 [ 1000.145167][T10279] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:05:55 executing program 3 (fault-call:2 fault-nth:31): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1000.154716][T10279] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.154729][T10279] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1000.154737][T10279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.154745][T10279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1000.154753][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1000.154759][T10279] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1000.235073][T10282] input: syz1 as /devices/virtual/input/input494 20:05:55 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) 20:05:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x80000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x2) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)) r1 = getpid() ioprio_get$pid(0x2, r1) [ 1000.390012][T10389] input: syz1 as /devices/virtual/input/input495 [ 1000.435203][T10393] FAULT_INJECTION: forcing a failure. [ 1000.435203][T10393] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.537656][T10393] CPU: 0 PID: 10393 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1000.545129][T10393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.545134][T10393] Call Trace: [ 1000.545153][T10393] dump_stack+0x172/0x1f0 [ 1000.545180][T10393] should_fail.cold+0xa/0x15 [ 1000.562911][T10393] ? fault_create_debugfs_attr+0x180/0x180 [ 1000.562926][T10393] ? lock_acquire+0x190/0x410 [ 1000.562943][T10393] ? anon_vma_clone+0x143/0x480 [ 1000.573400][T10393] __should_failslab+0x121/0x190 [ 1000.573416][T10393] should_failslab+0x9/0x14 [ 1000.573428][T10393] kmem_cache_alloc+0x47/0x710 [ 1000.573446][T10393] ? anon_vma_chain_link+0x154/0x1c0 [ 1000.582919][T10393] anon_vma_clone+0xde/0x480 [ 1000.582937][T10393] anon_vma_fork+0x8f/0x4a0 [ 1000.582951][T10393] ? dup_userfaultfd+0x15e/0x6d0 [ 1000.582967][T10393] ? memcpy+0x46/0x50 [ 1000.592362][T10393] dup_mm+0xa47/0x1430 [ 1000.592384][T10393] ? vm_area_dup+0x170/0x170 [ 1000.592405][T10393] ? debug_mutex_init+0x2d/0x5a [ 1000.602397][T10393] copy_process+0x28b7/0x6b00 [ 1000.602412][T10393] ? _kstrtoul+0x170/0x170 [ 1000.602435][T10393] ? __cleanup_sighand+0x60/0x60 [ 1000.611472][T10393] ? __f_unlock_pos+0x19/0x20 [ 1000.611487][T10393] ? __kasan_check_read+0x11/0x20 [ 1000.611505][T10393] ? lock_downgrade+0x920/0x920 [ 1000.611523][T10393] ? vfs_write+0x34c/0x5d0 [ 1000.620398][T10393] _do_fork+0x146/0xfa0 [ 1000.620413][T10393] ? copy_init_mm+0x20/0x20 [ 1000.620426][T10393] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1000.620442][T10393] ? wait_for_completion+0x440/0x440 [ 1000.629067][T10393] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1000.629083][T10393] __x64_sys_clone+0x18d/0x250 [ 1000.629101][T10393] ? ksys_write+0x1cf/0x290 [ 1000.638573][T10393] ? __ia32_sys_vfork+0xc0/0xc0 [ 1000.638590][T10393] ? trace_hardirqs_off_caller+0x65/0x230 [ 1000.638606][T10393] ? trace_hardirqs_on+0x67/0x240 [ 1000.647915][T10393] do_syscall_64+0xfd/0x6a0 [ 1000.647933][T10393] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1000.647947][T10393] RIP: 0033:0x4598e9 [ 1000.657593][T10393] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1000.657601][T10393] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1000.657613][T10393] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1000.657625][T10393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.666847][T10393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:05:56 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) [ 1000.666856][T10393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1000.666864][T10393] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x03\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0b") r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:56 executing program 3 (fault-call:2 fault-nth:32): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/253, 0xfd, 0x22042, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6c61, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0xf) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c7) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f0000000040)=0x1) 20:05:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0b") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1000.948100][T10583] FAULT_INJECTION: forcing a failure. [ 1000.948100][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.972577][T10583] CPU: 1 PID: 10583 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1000.981012][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1000.991083][T10583] Call Trace: [ 1000.994381][T10583] dump_stack+0x172/0x1f0 [ 1000.998729][T10583] should_fail.cold+0xa/0x15 [ 1001.003332][T10583] ? fault_create_debugfs_attr+0x180/0x180 [ 1001.009141][T10583] ? page_to_nid.part.0+0x20/0x20 [ 1001.014162][T10583] ? ___might_sleep+0x163/0x280 [ 1001.014186][T10583] __should_failslab+0x121/0x190 [ 1001.023933][T10583] should_failslab+0x9/0x14 [ 1001.028442][T10583] kmem_cache_alloc+0x2aa/0x710 [ 1001.033293][T10583] ? anon_vma_clone+0x320/0x480 [ 1001.038150][T10583] anon_vma_fork+0xfc/0x4a0 [ 1001.042657][T10583] ? dup_userfaultfd+0x15e/0x6d0 [ 1001.047594][T10583] ? memcpy+0x46/0x50 [ 1001.051578][T10583] dup_mm+0xa47/0x1430 [ 1001.055650][T10583] ? vm_area_dup+0x170/0x170 [ 1001.055669][T10583] ? debug_mutex_init+0x2d/0x5a [ 1001.065077][T10583] copy_process+0x28b7/0x6b00 [ 1001.069755][T10583] ? _kstrtoul+0x170/0x170 [ 1001.074177][T10583] ? __cleanup_sighand+0x60/0x60 [ 1001.079107][T10583] ? __f_unlock_pos+0x19/0x20 [ 1001.079122][T10583] ? __kasan_check_read+0x11/0x20 [ 1001.079138][T10583] ? lock_downgrade+0x920/0x920 [ 1001.079149][T10583] ? vfs_write+0x34c/0x5d0 20:05:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0b") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1001.079163][T10583] _do_fork+0x146/0xfa0 [ 1001.079176][T10583] ? copy_init_mm+0x20/0x20 [ 1001.079194][T10583] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1001.098095][T10583] ? wait_for_completion+0x440/0x440 [ 1001.106709][T10583] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1001.106728][T10583] __x64_sys_clone+0x18d/0x250 [ 1001.117529][T10583] ? ksys_write+0x1cf/0x290 [ 1001.117545][T10583] ? __ia32_sys_vfork+0xc0/0xc0 [ 1001.117563][T10583] ? trace_hardirqs_off_caller+0x65/0x230 [ 1001.143532][T10583] ? trace_hardirqs_on+0x67/0x240 [ 1001.148565][T10583] do_syscall_64+0xfd/0x6a0 [ 1001.153077][T10583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.158975][T10583] RIP: 0033:0x4598e9 [ 1001.161128][T10586] input: syz1 as /devices/virtual/input/input496 [ 1001.162866][T10583] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1001.162874][T10583] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x02\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:56 executing program 3 (fault-call:2 fault-nth:33): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1001.162886][T10583] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1001.162899][T10583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.188783][T10583] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1001.188791][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1001.188798][T10583] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:56 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000640)) [ 1001.373885][T10647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1001.386554][T10654] FAULT_INJECTION: forcing a failure. [ 1001.386554][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.412564][T10654] CPU: 1 PID: 10654 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1001.420039][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.430079][T10654] Call Trace: [ 1001.430100][T10654] dump_stack+0x172/0x1f0 [ 1001.430119][T10654] should_fail.cold+0xa/0x15 [ 1001.430140][T10654] ? fault_create_debugfs_attr+0x180/0x180 [ 1001.442304][T10654] ? page_to_nid.part.0+0x20/0x20 [ 1001.442323][T10654] ? ___might_sleep+0x163/0x280 [ 1001.453114][T10654] __should_failslab+0x121/0x190 [ 1001.453133][T10654] should_failslab+0x9/0x14 [ 1001.467410][T10654] kmem_cache_alloc+0x2aa/0x710 [ 1001.472247][T10654] ? anon_vma_clone+0x320/0x480 [ 1001.472262][T10654] anon_vma_fork+0x1ea/0x4a0 [ 1001.472276][T10654] ? dup_userfaultfd+0x15e/0x6d0 [ 1001.472292][T10654] dup_mm+0xa47/0x1430 [ 1001.472311][T10654] ? vm_area_dup+0x170/0x170 [ 1001.490680][T10654] ? debug_mutex_init+0x2d/0x5a [ 1001.500084][T10654] copy_process+0x28b7/0x6b00 [ 1001.500098][T10654] ? _kstrtoul+0x170/0x170 [ 1001.500116][T10654] ? __cleanup_sighand+0x60/0x60 [ 1001.500134][T10654] ? __f_unlock_pos+0x19/0x20 [ 1001.518786][T10654] ? __kasan_check_read+0x11/0x20 [ 1001.523806][T10654] ? lock_downgrade+0x920/0x920 [ 1001.528654][T10654] ? vfs_write+0x34c/0x5d0 [ 1001.533076][T10654] _do_fork+0x146/0xfa0 [ 1001.537328][T10654] ? copy_init_mm+0x20/0x20 [ 1001.541838][T10654] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1001.547385][T10654] ? wait_for_completion+0x440/0x440 [ 1001.552682][T10654] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1001.558935][T10654] __x64_sys_clone+0x18d/0x250 [ 1001.563839][T10654] ? ksys_write+0x1cf/0x290 [ 1001.568331][T10654] ? __ia32_sys_vfork+0xc0/0xc0 [ 1001.573172][T10654] ? trace_hardirqs_off_caller+0x65/0x230 [ 1001.578863][T10654] ? trace_hardirqs_on+0x67/0x240 [ 1001.583864][T10654] do_syscall_64+0xfd/0x6a0 [ 1001.588387][T10654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1001.594250][T10654] RIP: 0033:0x4598e9 [ 1001.598120][T10654] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1001.617908][T10654] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1001.626295][T10654] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1001.634246][T10654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.642197][T10654] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1001.650145][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1001.658090][T10654] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x04\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7b") r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000000)=""/240) 20:05:57 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00?', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:57 executing program 3 (fault-call:2 fault-nth:34): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1001.707480][T10586] input: syz1 as /devices/virtual/input/input497 [ 1001.803186][T10669] FAULT_INJECTION: forcing a failure. [ 1001.803186][T10669] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.829613][T10669] CPU: 1 PID: 10669 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1001.837090][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.847135][T10669] Call Trace: [ 1001.847158][T10669] dump_stack+0x172/0x1f0 [ 1001.847179][T10669] should_fail.cold+0xa/0x15 [ 1001.847195][T10669] ? fault_create_debugfs_attr+0x180/0x180 [ 1001.847207][T10669] ? page_to_nid.part.0+0x20/0x20 [ 1001.847225][T10669] ? ___might_sleep+0x163/0x280 [ 1001.856738][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1001.859387][T10669] __should_failslab+0x121/0x190 [ 1001.859403][T10669] should_failslab+0x9/0x14 [ 1001.859415][T10669] kmem_cache_alloc+0x2aa/0x710 [ 1001.859429][T10669] ? validate_mm_rb+0xa3/0xc0 [ 1001.859446][T10669] vm_area_dup+0x21/0x170 [ 1001.859463][T10669] dup_mm+0x549/0x1430 [ 1001.884353][T10669] ? vm_area_dup+0x170/0x170 [ 1001.884375][T10669] ? debug_mutex_init+0x2d/0x5a [ 1001.898626][T10669] copy_process+0x28b7/0x6b00 [ 1001.898641][T10669] ? _kstrtoul+0x170/0x170 [ 1001.898661][T10669] ? __cleanup_sighand+0x60/0x60 [ 1001.911708][T10669] ? __f_unlock_pos+0x19/0x20 [ 1001.921091][T10669] ? __kasan_check_read+0x11/0x20 [ 1001.921109][T10669] ? lock_downgrade+0x920/0x920 [ 1001.921128][T10669] ? vfs_write+0x34c/0x5d0 [ 1001.930186][T10669] _do_fork+0x146/0xfa0 [ 1001.930207][T10669] ? copy_init_mm+0x20/0x20 [ 1001.949614][T10669] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1001.949630][T10669] ? wait_for_completion+0x440/0x440 [ 1001.949649][T10669] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1001.949664][T10669] __x64_sys_clone+0x18d/0x250 [ 1001.949676][T10669] ? ksys_write+0x1cf/0x290 [ 1001.949693][T10669] ? __ia32_sys_vfork+0xc0/0xc0 [ 1001.984482][T10672] input: syz1 as /devices/virtual/input/input498 [ 1001.989540][T10669] ? trace_hardirqs_off_caller+0x65/0x230 [ 1001.989552][T10669] ? trace_hardirqs_on+0x67/0x240 [ 1001.989568][T10669] do_syscall_64+0xfd/0x6a0 [ 1001.989587][T10669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.011414][T10669] RIP: 0033:0x4598e9 [ 1002.011428][T10669] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.011439][T10669] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:05:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00@', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80c00) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") bind(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3, 0x4, 0x2}}, 0x80) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:57 executing program 0 (fault-call:9 fault-nth:0): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7b") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1002.045244][T10669] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1002.045250][T10669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.045257][T10669] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.045264][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1002.045270][T10669] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:57 executing program 3 (fault-call:2 fault-nth:35): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1002.206481][T10729] FAULT_INJECTION: forcing a failure. [ 1002.206481][T10729] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.221107][T10729] CPU: 1 PID: 10729 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1002.228597][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.238645][T10729] Call Trace: [ 1002.241934][T10729] dump_stack+0x172/0x1f0 [ 1002.246270][T10729] should_fail.cold+0xa/0x15 [ 1002.250871][T10729] ? fault_create_debugfs_attr+0x180/0x180 [ 1002.256668][T10729] ? page_to_nid.part.0+0x20/0x20 [ 1002.261690][T10729] ? ___might_sleep+0x163/0x280 [ 1002.261706][T10729] __should_failslab+0x121/0x190 [ 1002.261722][T10729] should_failslab+0x9/0x14 [ 1002.261733][T10729] kmem_cache_alloc+0x2aa/0x710 [ 1002.261747][T10729] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1002.261761][T10729] ? __vm_enough_memory+0x17e/0x3a0 [ 1002.261778][T10729] vm_area_dup+0x21/0x170 [ 1002.261788][T10729] dup_mm+0x549/0x1430 [ 1002.261807][T10729] ? vm_area_dup+0x170/0x170 [ 1002.261822][T10729] ? debug_mutex_init+0x2d/0x5a [ 1002.261838][T10729] copy_process+0x28b7/0x6b00 [ 1002.261852][T10729] ? _kstrtoul+0x170/0x170 [ 1002.261872][T10729] ? __cleanup_sighand+0x60/0x60 [ 1002.261884][T10729] ? __f_unlock_pos+0x19/0x20 [ 1002.261896][T10729] ? __kasan_check_read+0x11/0x20 [ 1002.261914][T10729] ? lock_downgrade+0x920/0x920 [ 1002.261926][T10729] ? vfs_write+0x34c/0x5d0 [ 1002.261941][T10729] _do_fork+0x146/0xfa0 [ 1002.261956][T10729] ? copy_init_mm+0x20/0x20 [ 1002.261970][T10729] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1002.261984][T10729] ? wait_for_completion+0x440/0x440 [ 1002.262000][T10729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1002.262015][T10729] __x64_sys_clone+0x18d/0x250 [ 1002.262026][T10729] ? ksys_write+0x1cf/0x290 [ 1002.262040][T10729] ? __ia32_sys_vfork+0xc0/0xc0 [ 1002.262056][T10729] ? trace_hardirqs_off_caller+0x65/0x230 [ 1002.262068][T10729] ? trace_hardirqs_on+0x67/0x240 [ 1002.262085][T10729] do_syscall_64+0xfd/0x6a0 [ 1002.262101][T10729] entry_SYSCALL_64_after_hwframe+0x49/0xbe 20:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7b") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1002.262110][T10729] RIP: 0033:0x4598e9 [ 1002.262123][T10729] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.262129][T10729] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1002.262146][T10729] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1002.300447][T10729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1002.309848][T10729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.309855][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1002.309862][T10729] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1002.479751][T10677] input: syz1 as /devices/virtual/input/input499 20:05:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x10', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:57 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0xbb) 20:05:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:57 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:57 executing program 3 (fault-call:2 fault-nth:36): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf0") r1 = getpid() ioprio_get$pid(0x2, r1) 20:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf0") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1002.601665][T10809] FAULT_INJECTION: forcing a failure. [ 1002.601665][T10809] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.659090][T10809] CPU: 1 PID: 10809 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1002.666578][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.676627][T10809] Call Trace: [ 1002.679910][T10809] dump_stack+0x172/0x1f0 [ 1002.679930][T10809] should_fail.cold+0xa/0x15 [ 1002.679946][T10809] ? fault_create_debugfs_attr+0x180/0x180 [ 1002.679967][T10809] ? percpu_ref_put_many+0x94/0x190 [ 1002.694631][T10809] ? __kasan_check_read+0x11/0x20 [ 1002.694656][T10809] __should_failslab+0x121/0x190 [ 1002.709761][T10809] should_failslab+0x9/0x14 [ 1002.714266][T10809] kmem_cache_alloc+0x47/0x710 [ 1002.719052][T10809] anon_vma_clone+0xde/0x480 [ 1002.723643][T10809] anon_vma_fork+0x8f/0x4a0 [ 1002.728147][T10809] ? dup_userfaultfd+0x15e/0x6d0 [ 1002.733086][T10809] ? memcpy+0x46/0x50 [ 1002.737074][T10809] dup_mm+0xa47/0x1430 [ 1002.740728][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1002.741152][T10809] ? vm_area_dup+0x170/0x170 [ 1002.752646][T10821] input: syz1 as /devices/virtual/input/input500 [ 1002.754970][T10809] ? debug_mutex_init+0x2d/0x5a [ 1002.754987][T10809] copy_process+0x28b7/0x6b00 [ 1002.755009][T10809] ? _kstrtoul+0x170/0x170 [ 1002.775224][T10809] ? __cleanup_sighand+0x60/0x60 [ 1002.775237][T10809] ? __f_unlock_pos+0x19/0x20 [ 1002.775254][T10809] ? __kasan_check_read+0x11/0x20 [ 1002.790968][T10809] ? lock_downgrade+0x920/0x920 [ 1002.795815][T10809] ? vfs_write+0x34c/0x5d0 [ 1002.800227][T10809] _do_fork+0x146/0xfa0 [ 1002.800242][T10809] ? copy_init_mm+0x20/0x20 [ 1002.800255][T10809] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1002.800267][T10809] ? wait_for_completion+0x440/0x440 [ 1002.800283][T10809] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1002.800296][T10809] __x64_sys_clone+0x18d/0x250 [ 1002.800309][T10809] ? ksys_write+0x1cf/0x290 [ 1002.800326][T10809] ? __ia32_sys_vfork+0xc0/0xc0 [ 1002.835171][T10809] ? trace_hardirqs_off_caller+0x65/0x230 [ 1002.835183][T10809] ? trace_hardirqs_on+0x67/0x240 [ 1002.835202][T10809] do_syscall_64+0xfd/0x6a0 20:05:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=ANY=[], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xfff) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1002.856102][T10809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1002.861994][T10809] RIP: 0033:0x4598e9 [ 1002.865890][T10809] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1002.885487][T10809] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1002.885499][T10809] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1002.885505][T10809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:05:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:58 executing program 3 (fault-call:2 fault-nth:37): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1002.885512][T10809] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1002.885519][T10809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1002.885526][T10809] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1003.001242][T10840] FAULT_INJECTION: forcing a failure. [ 1003.001242][T10840] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.016667][T10840] CPU: 1 PID: 10840 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1003.024139][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.024145][T10840] Call Trace: [ 1003.024165][T10840] dump_stack+0x172/0x1f0 [ 1003.024190][T10840] should_fail.cold+0xa/0x15 [ 1003.046414][T10840] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.052227][T10840] ? __anon_vma_interval_tree_augment_rotate+0x1ac/0x220 [ 1003.059320][T10840] ? __rb_insert_augmented+0x20c/0xd90 [ 1003.064791][T10840] __should_failslab+0x121/0x190 [ 1003.069741][T10840] should_failslab+0x9/0x14 [ 1003.074246][T10840] kmem_cache_alloc+0x47/0x710 [ 1003.074261][T10840] ? anon_vma_chain_link+0x154/0x1c0 [ 1003.074279][T10840] anon_vma_clone+0xde/0x480 [ 1003.088858][T10840] anon_vma_fork+0x8f/0x4a0 [ 1003.088874][T10840] ? dup_userfaultfd+0x15e/0x6d0 [ 1003.088886][T10840] ? memcpy+0x46/0x50 [ 1003.088901][T10840] dup_mm+0xa47/0x1430 [ 1003.088924][T10840] ? vm_area_dup+0x170/0x170 [ 1003.098321][T10840] ? debug_mutex_init+0x2d/0x5a [ 1003.098338][T10840] copy_process+0x28b7/0x6b00 [ 1003.098356][T10840] ? _kstrtoul+0x170/0x170 [ 1003.106367][T10840] ? __cleanup_sighand+0x60/0x60 [ 1003.106381][T10840] ? __f_unlock_pos+0x19/0x20 [ 1003.106398][T10840] ? __kasan_check_read+0x11/0x20 [ 1003.115812][T10840] ? lock_downgrade+0x920/0x920 [ 1003.115830][T10840] ? vfs_write+0x34c/0x5d0 20:05:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) process_vm_writev(r2, &(0x7f0000001540)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/131, 0x83}, {&(0x7f0000001500)=""/42, 0x2a}], 0x7, &(0x7f0000003880)=[{&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000001640)=""/40, 0x28}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/204, 0xcc}, {&(0x7f0000003780)=""/246, 0xf6}], 0x6, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1003.124873][T10840] _do_fork+0x146/0xfa0 [ 1003.124889][T10840] ? copy_init_mm+0x20/0x20 [ 1003.124901][T10840] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1003.124917][T10840] ? wait_for_completion+0x440/0x440 [ 1003.134491][T10840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1003.134507][T10840] __x64_sys_clone+0x18d/0x250 [ 1003.134526][T10840] ? ksys_write+0x1cf/0x290 [ 1003.144344][T10840] ? __ia32_sys_vfork+0xc0/0xc0 [ 1003.144360][T10840] ? trace_hardirqs_off_caller+0x65/0x230 [ 1003.144375][T10840] ? trace_hardirqs_on+0x67/0x240 20:05:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf0") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1003.157382][T10840] do_syscall_64+0xfd/0x6a0 [ 1003.168179][T10840] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.168189][T10840] RIP: 0033:0x4598e9 [ 1003.168207][T10840] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.179158][T10840] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1003.179171][T10840] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1003.179179][T10840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.179185][T10840] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1003.179193][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1003.179200][T10840] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1003.293654][T10821] input: syz1 as /devices/virtual/input/input501 20:05:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\t\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x0, r1) 20:05:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:58 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000000)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:05:58 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:58 executing program 3 (fault-call:2 fault-nth:38): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1003.521574][T10974] input: syz1 as /devices/virtual/input/input502 [ 1003.536060][T10975] FAULT_INJECTION: forcing a failure. [ 1003.536060][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.578212][T10975] CPU: 0 PID: 10975 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1003.585691][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.585697][T10975] Call Trace: [ 1003.585717][T10975] dump_stack+0x172/0x1f0 [ 1003.585741][T10975] should_fail.cold+0xa/0x15 [ 1003.607956][T10975] ? fault_create_debugfs_attr+0x180/0x180 [ 1003.613768][T10975] ? __anon_vma_interval_tree_augment_rotate+0x1ac/0x220 [ 1003.620802][T10975] ? __rb_insert_augmented+0x20c/0xd90 [ 1003.626287][T10975] __should_failslab+0x121/0x190 [ 1003.631225][T10975] should_failslab+0x9/0x14 [ 1003.635744][T10975] kmem_cache_alloc+0x47/0x710 [ 1003.640504][T10975] ? anon_vma_chain_link+0x154/0x1c0 [ 1003.645788][T10975] anon_vma_clone+0xde/0x480 [ 1003.650381][T10975] anon_vma_fork+0x8f/0x4a0 [ 1003.654876][T10975] ? dup_userfaultfd+0x15e/0x6d0 [ 1003.659797][T10975] ? memcpy+0x46/0x50 [ 1003.659814][T10975] dup_mm+0xa47/0x1430 [ 1003.659834][T10975] ? vm_area_dup+0x170/0x170 [ 1003.672414][T10975] ? debug_mutex_init+0x2d/0x5a [ 1003.677277][T10975] copy_process+0x28b7/0x6b00 [ 1003.681961][T10975] ? _kstrtoul+0x170/0x170 [ 1003.686389][T10975] ? __cleanup_sighand+0x60/0x60 [ 1003.691325][T10975] ? __f_unlock_pos+0x19/0x20 [ 1003.696001][T10975] ? __kasan_check_read+0x11/0x20 [ 1003.701025][T10975] ? lock_downgrade+0x920/0x920 [ 1003.701038][T10975] ? vfs_write+0x34c/0x5d0 [ 1003.701056][T10975] _do_fork+0x146/0xfa0 [ 1003.714432][T10975] ? copy_init_mm+0x20/0x20 [ 1003.718938][T10975] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1003.724488][T10975] ? wait_for_completion+0x440/0x440 [ 1003.724512][T10975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1003.736000][T10975] __x64_sys_clone+0x18d/0x250 [ 1003.740770][T10975] ? ksys_write+0x1cf/0x290 [ 1003.745279][T10975] ? __ia32_sys_vfork+0xc0/0xc0 [ 1003.750576][T10975] ? trace_hardirqs_off_caller+0x65/0x230 [ 1003.756294][T10975] ? trace_hardirqs_on+0x67/0x240 [ 1003.761314][T10975] do_syscall_64+0xfd/0x6a0 [ 1003.761333][T10975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1003.761342][T10975] RIP: 0033:0x4598e9 20:05:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x100000001) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)={r4, 0x0, 0x67, "28bde1b1237a43763dcf8ac4063aa7ed56cf46bcceb3bee3a81f7eca10b210b6b2dd2742b199fa24d47c9062ced8a8352964a315656856ff91c979f4ed35792d2b11896c44e1d1f0d9d49ae74ede7877c2d3244209c4c46dc8e6b51da918af369b295c5bf7e01d"}, 0x6f) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x3, 0xb239}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x4, 0x400, 0x81, 0x6, 0x0, 0x7, 0x2008000000000000, r7}, 0x20) kexec_load(0x401, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000480)="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", 0x1000, 0x0, 0x3}, {&(0x7f0000001480)="c481496f24cce32367b2778b7ddb27ed735e0daabd96f2480d72fc8cf6ba7cbef8fef5747f01102c60436b3c943e2b1162f973649d9be55ec722a32e8460f12a01ee34b1eead10981cf5bd61fee0e51d028989f459915ad86a381a5e1b2b5483dfa9c4d7238bbe566f9f6a526866d10c0c4f56e7c06c2255007312f6a3aeacae6237285db909a4f22785da0f80b576dd4cad9c562ef056504c232e25054eb6ccda28affe0aa30155d49b2acabcd522596bf768fcae1bb1da5e8c020e6e22eb170e032f0040ff5333bece0da4fe13d73eef1381", 0xd3, 0x1, 0x7ff}, {&(0x7f0000001580)="dc80af34dfd0014ff36438e832b160d53820dbf5b7cd1a25a99a6a6ca8e49b49402c72590e8b5246bc3954e404921c917fd316bee1365d915e58fb6056a00d45f15877e76f7b95e65a447e9b", 0x4c, 0x8, 0x8001}, {&(0x7f0000001600)="24cb5668b8621c42ed15ab5fd6f693427f6a20b5d878a29f7652168160becd99e3c16b52b9ce4a4ca5f5deea34c4f9e90befedf3d40e0702c0e3f2", 0x3b, 0x3800000}, {&(0x7f0000001640)="9fe5ad1eb7d9700ebcf86ed1296c0155f25d5b2b63bee1b36895d47edcbca0d7018940d927c241f3ae97a417eb232bb4577f46a2186214b1bf596487b2e85a1d412e3f11db0819d523567bfb3cf424d7621d3843ffacd07fd23b427005540959", 0x60, 0x3, 0xc06}], 0x80000) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getpeername$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) [ 1003.761356][T10975] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1003.761370][T10975] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1003.795195][T10975] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1003.795203][T10975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.795211][T10975] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:05:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x0, r1) [ 1003.795218][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1003.795224][T10975] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x11\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:05:59 executing program 3 (fault-call:2 fault-nth:39): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1003.981309][T11161] FAULT_INJECTION: forcing a failure. [ 1003.981309][T11161] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.009873][T11161] CPU: 1 PID: 11161 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1004.017351][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.027397][T11161] Call Trace: [ 1004.027419][T11161] dump_stack+0x172/0x1f0 [ 1004.027439][T11161] should_fail.cold+0xa/0x15 [ 1004.027459][T11161] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.035042][T11161] ? __anon_vma_interval_tree_augment_rotate+0x1ac/0x220 [ 1004.035060][T11161] ? __rb_insert_augmented+0x20c/0xd90 [ 1004.035076][T11161] __should_failslab+0x121/0x190 [ 1004.035095][T11161] should_failslab+0x9/0x14 [ 1004.045443][T11161] kmem_cache_alloc+0x47/0x710 [ 1004.045458][T11161] ? anon_vma_chain_link+0x154/0x1c0 [ 1004.045473][T11161] anon_vma_clone+0xde/0x480 [ 1004.045491][T11161] anon_vma_fork+0x8f/0x4a0 [ 1004.057924][T11161] ? dup_userfaultfd+0x15e/0x6d0 [ 1004.057937][T11161] ? memcpy+0x46/0x50 [ 1004.057953][T11161] dup_mm+0xa47/0x1430 [ 1004.057973][T11161] ? vm_area_dup+0x170/0x170 [ 1004.067359][T11161] ? debug_mutex_init+0x2d/0x5a [ 1004.067376][T11161] copy_process+0x28b7/0x6b00 [ 1004.067389][T11161] ? _kstrtoul+0x170/0x170 [ 1004.067408][T11161] ? __cleanup_sighand+0x60/0x60 [ 1004.077424][T11161] ? __f_unlock_pos+0x19/0x20 [ 1004.077438][T11161] ? __kasan_check_read+0x11/0x20 [ 1004.077456][T11161] ? lock_downgrade+0x920/0x920 [ 1004.077473][T11161] ? vfs_write+0x34c/0x5d0 [ 1004.086511][T11161] _do_fork+0x146/0xfa0 [ 1004.086527][T11161] ? copy_init_mm+0x20/0x20 [ 1004.086540][T11161] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1004.086560][T11161] ? wait_for_completion+0x440/0x440 [ 1004.095426][T11161] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1004.095443][T11161] __x64_sys_clone+0x18d/0x250 [ 1004.095454][T11161] ? ksys_write+0x1cf/0x290 [ 1004.095471][T11161] ? __ia32_sys_vfork+0xc0/0xc0 [ 1004.104095][T11161] ? trace_hardirqs_off_caller+0x65/0x230 [ 1004.104107][T11161] ? trace_hardirqs_on+0x67/0x240 [ 1004.104123][T11161] do_syscall_64+0xfd/0x6a0 [ 1004.104143][T11161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.113623][T11161] RIP: 0033:0x4598e9 [ 1004.113638][T11161] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:05:59 executing program 3 (fault-call:2 fault-nth:40): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:05:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x0, r1) 20:05:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000000)=""/201) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000300)={0x0, 0x3, 0x4, 0x100, {}, {0x1, 0xb, 0x8, 0x687, 0x7, 0x2, "c0f0bb98"}, 0x4, 0x3, @planes=&(0x7f0000000200)={0x401, 0x675e, @fd=0xffffffffffffffff, 0x2800000000000000}, 0x4}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000380)={r0, 0x0, 0x80, 0x8, 0x1f}) [ 1004.113645][T11161] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1004.113657][T11161] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1004.113668][T11161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.122973][T11161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1004.122980][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1004.122986][T11161] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1004.303539][T11200] input: syz1 as /devices/virtual/input/input504 20:05:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9b29e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b7336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049154000000000000"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x4, 0x1800}, 0x4) 20:05:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getpid() ioprio_get$pid(0x2, 0x0) [ 1004.434375][T11260] FAULT_INJECTION: forcing a failure. [ 1004.434375][T11260] name failslab, interval 1, probability 0, space 0, times 0 20:05:59 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1004.485895][T11260] CPU: 1 PID: 11260 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1004.493382][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.503432][T11260] Call Trace: [ 1004.503455][T11260] dump_stack+0x172/0x1f0 [ 1004.503475][T11260] should_fail.cold+0xa/0x15 [ 1004.503493][T11260] ? fault_create_debugfs_attr+0x180/0x180 [ 1004.503507][T11260] ? page_to_nid.part.0+0x20/0x20 [ 1004.503528][T11260] ? ___might_sleep+0x163/0x280 [ 1004.531293][T11260] __should_failslab+0x121/0x190 20:05:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:05:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x12\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1004.536236][T11260] should_failslab+0x9/0x14 [ 1004.540737][T11260] kmem_cache_alloc+0x2aa/0x710 [ 1004.545582][T11260] ? anon_vma_clone+0x320/0x480 [ 1004.550431][T11260] anon_vma_fork+0x1ea/0x4a0 [ 1004.550446][T11260] ? dup_userfaultfd+0x15e/0x6d0 [ 1004.550463][T11260] dup_mm+0xa47/0x1430 [ 1004.550481][T11260] ? vm_area_dup+0x170/0x170 [ 1004.550496][T11260] ? debug_mutex_init+0x2d/0x5a [ 1004.550515][T11260] copy_process+0x28b7/0x6b00 [ 1004.578124][T11260] ? _kstrtoul+0x170/0x170 20:05:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getpid() ioprio_get$pid(0x2, 0x0) [ 1004.582559][T11260] ? __cleanup_sighand+0x60/0x60 [ 1004.587498][T11260] ? __f_unlock_pos+0x19/0x20 [ 1004.592182][T11260] ? __kasan_check_read+0x11/0x20 [ 1004.597206][T11260] ? lock_downgrade+0x920/0x920 [ 1004.597223][T11260] ? vfs_write+0x34c/0x5d0 [ 1004.606453][T11260] _do_fork+0x146/0xfa0 [ 1004.610613][T11260] ? copy_init_mm+0x20/0x20 [ 1004.615116][T11260] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1004.620661][T11260] ? wait_for_completion+0x440/0x440 [ 1004.625943][T11260] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1004.625958][T11260] __x64_sys_clone+0x18d/0x250 [ 1004.625976][T11260] ? ksys_write+0x1cf/0x290 [ 1004.641421][T11260] ? __ia32_sys_vfork+0xc0/0xc0 [ 1004.646271][T11260] ? trace_hardirqs_off_caller+0x65/0x230 [ 1004.651986][T11260] ? trace_hardirqs_on+0x67/0x240 [ 1004.657019][T11260] do_syscall_64+0xfd/0x6a0 [ 1004.661540][T11260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1004.667423][T11260] RIP: 0033:0x4598e9 [ 1004.667438][T11260] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1004.667445][T11260] RSP: 002b:00007fef4a783c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1004.667465][T11260] RAX: ffffffffffffffda RBX: 00007fef4a783c90 RCX: 00000000004598e9 [ 1004.690920][T11260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1004.690928][T11260] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1004.690935][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7846d4 [ 1004.690942][T11260] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000003 20:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1004.777972][T11347] input: syz1 as /devices/virtual/input/input506 20:06:00 executing program 3 (fault-call:2 fault-nth:41): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getpid() ioprio_get$pid(0x2, 0x0) [ 1004.822699][T11389] input: syz1 as /devices/virtual/input/input507 20:06:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:00 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) 20:06:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x14\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1004.990950][T11465] FAULT_INJECTION: forcing a failure. [ 1004.990950][T11465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:06:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1005.091687][T11479] input: syz1 as /devices/virtual/input/input508 [ 1005.121710][T11465] CPU: 1 PID: 11465 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1005.129192][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:06:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x3, r1) 20:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x02', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1005.139242][T11465] Call Trace: [ 1005.139262][T11465] dump_stack+0x172/0x1f0 [ 1005.139282][T11465] should_fail.cold+0xa/0x15 [ 1005.139298][T11465] ? fault_create_debugfs_attr+0x180/0x180 [ 1005.139318][T11465] ? ___might_sleep+0x163/0x280 [ 1005.146917][T11465] should_fail_alloc_page+0x50/0x60 [ 1005.146935][T11465] __alloc_pages_nodemask+0x1a1/0x900 [ 1005.172675][T11465] ? save_stack+0x5c/0x90 [ 1005.177007][T11465] ? save_stack+0x23/0x90 [ 1005.181334][T11465] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1005.187145][T11465] ? kasan_slab_alloc+0xf/0x20 [ 1005.191916][T11465] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1005.197632][T11465] ? kasan_slab_alloc+0xf/0x20 [ 1005.202380][T11465] ? kmem_cache_alloc+0x121/0x710 [ 1005.202392][T11465] ? anon_vma_fork+0x1ea/0x4a0 [ 1005.202405][T11465] ? dup_mm+0xa47/0x1430 [ 1005.202417][T11465] ? copy_process+0x28b7/0x6b00 [ 1005.202433][T11465] ? _do_fork+0x146/0xfa0 [ 1005.225568][T11465] ? __x64_sys_clone+0x18d/0x250 [ 1005.230513][T11465] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1005.236764][T11465] alloc_pages_current+0x107/0x210 20:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1005.241878][T11465] pte_alloc_one+0x1b/0x1a0 [ 1005.246381][T11465] __pte_alloc+0x20/0x310 [ 1005.250714][T11465] copy_page_range+0x1520/0x1ee0 [ 1005.255652][T11465] ? mark_held_locks+0xf0/0xf0 [ 1005.260420][T11465] ? __kasan_check_read+0x11/0x20 [ 1005.265447][T11465] ? pmd_alloc+0x180/0x180 [ 1005.269950][T11465] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1005.275501][T11465] ? validate_mm_rb+0xa3/0xc0 [ 1005.280175][T11465] ? __vma_link_rb+0x275/0x370 [ 1005.284935][T11465] dup_mm+0xa67/0x1430 20:06:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000)=0x23, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(r0, 0x6, &(0x7f0000000140)="11dca10d650bcf6c7bf0707907fad93fa4dc719fc2ca77f94bc6605109020e714a979b7d1f1190394abe5f6fb5860001236df2df8256a43c0375efeae5e430fcdbdad0e8e729db7c5224ac177dcf557d3ad2f2fe81cbd731b245b5c0ce1710f9d91a2b8dfcc4c9b207aaca38e51760bac7b73afdda027d39039d39de81dbd8216d18e7592e74d3be54da18d81033482e8f683ca39855855bb0cf3c84df168bf6") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") listen(r4, 0x20000000000003d) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(r5, 0xfffffffffffffffa, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = getpid() setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x7b, 0x4, 0x0, "c7025ed4a70dcf53ba33211fafce6165", "83d8cc2851d623d541594bcc12a0d43e6654fc55cc93bfa3bf33b98312ee32f51138232f499897b8d895868b4ecb2a48ae3cca41da46ec455eee8fa95589789d4a2df3824c1106555d293717294034c21a21677c79a2c3832b624ddef69eed965edb7aa7337f"}, 0x7b, 0x2) ioprio_get$pid(0x2, r7) [ 1005.289009][T11465] ? vm_area_dup+0x170/0x170 [ 1005.293599][T11465] ? debug_mutex_init+0x2d/0x5a [ 1005.298450][T11465] copy_process+0x28b7/0x6b00 [ 1005.303128][T11465] ? _kstrtoul+0x170/0x170 [ 1005.307552][T11465] ? __cleanup_sighand+0x60/0x60 [ 1005.312481][T11465] ? __f_unlock_pos+0x19/0x20 [ 1005.317142][T11465] ? __kasan_check_read+0x11/0x20 [ 1005.322167][T11465] ? lock_downgrade+0x920/0x920 [ 1005.327025][T11465] ? vfs_write+0x34c/0x5d0 [ 1005.331447][T11465] _do_fork+0x146/0xfa0 [ 1005.335600][T11465] ? copy_init_mm+0x20/0x20 [ 1005.340101][T11465] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1005.345656][T11465] ? wait_for_completion+0x440/0x440 [ 1005.350951][T11465] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1005.357194][T11465] __x64_sys_clone+0x18d/0x250 [ 1005.361960][T11465] ? ksys_write+0x1cf/0x290 [ 1005.366642][T11465] ? __ia32_sys_vfork+0xc0/0xc0 [ 1005.371502][T11465] ? trace_hardirqs_off_caller+0x65/0x230 [ 1005.377216][T11465] ? trace_hardirqs_on+0x67/0x240 [ 1005.382242][T11465] do_syscall_64+0xfd/0x6a0 [ 1005.386746][T11465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.392629][T11465] RIP: 0033:0x4598e9 [ 1005.396528][T11465] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.416299][T11465] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1005.424793][T11465] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1005.432773][T11465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:06:00 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1005.440745][T11465] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1005.448713][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1005.456697][T11465] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:00 executing program 3 (fault-call:2 fault-nth:42): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x15\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1005.595245][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 20:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r2, 0x0) r3 = socket$isdn(0x22, 0x2, 0x21) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setregid(r4, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x6}, [], {0x4, 0x1}, [{0x8, 0x2, r2}, {0x8, 0x4, r4}], {0x10, 0x2}, {0x20, 0x4}}, 0x34, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10000, 0x0) write$capi20_data(r6, &(0x7f0000000140)={{0x10, 0x0, 0xe81aade5d0cdd2a2, 0x82, 0x9, 0x3f}, 0x58, "ecf43c73ee6cf43db8aacd623fd7c5aa20f7145c2aec525a5e2d4ba94585bbc81d9e859c5723e57d1d96f1591b35cce533b34bea4f2887002b14ebb012062d38c1c2709f4b2867808d45aff4f64f2a6e7d49834fc53e6276"}, 0x6a) r7 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioprio_get$pid(0x2, r7) [ 1005.662233][T11615] FAULT_INJECTION: forcing a failure. [ 1005.662233][T11615] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.720571][T11639] input: syz1 as /devices/virtual/input/input510 [ 1005.745890][T11615] CPU: 1 PID: 11615 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1005.753394][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1005.753400][T11615] Call Trace: [ 1005.753418][T11615] dump_stack+0x172/0x1f0 [ 1005.753444][T11615] should_fail.cold+0xa/0x15 [ 1005.775670][T11615] ? fault_create_debugfs_attr+0x180/0x180 [ 1005.781507][T11615] ? page_to_nid.part.0+0x20/0x20 [ 1005.786539][T11615] ? ___might_sleep+0x163/0x280 [ 1005.791394][T11615] __should_failslab+0x121/0x190 [ 1005.796333][T11615] should_failslab+0x9/0x14 [ 1005.800829][T11615] kmem_cache_alloc+0x2aa/0x710 [ 1005.800843][T11615] ? _do_fork+0x146/0xfa0 [ 1005.800854][T11615] ? __x64_sys_clone+0x18d/0x250 [ 1005.800868][T11615] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1005.800892][T11615] ptlock_alloc+0x20/0x70 [ 1005.825485][T11615] pte_alloc_one+0x6d/0x1a0 [ 1005.830004][T11615] __pte_alloc+0x20/0x310 [ 1005.834419][T11615] copy_page_range+0x1520/0x1ee0 [ 1005.834434][T11615] ? mark_held_locks+0xf0/0xf0 [ 1005.834453][T11615] ? __kasan_check_read+0x11/0x20 [ 1005.849133][T11615] ? pmd_alloc+0x180/0x180 [ 1005.853551][T11615] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1005.859100][T11615] ? validate_mm_rb+0xa3/0xc0 [ 1005.863779][T11615] ? __vma_link_rb+0x275/0x370 20:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1005.868586][T11615] dup_mm+0xa67/0x1430 [ 1005.872660][T11615] ? vm_area_dup+0x170/0x170 [ 1005.877254][T11615] ? debug_mutex_init+0x2d/0x5a [ 1005.882104][T11615] copy_process+0x28b7/0x6b00 [ 1005.886777][T11615] ? _kstrtoul+0x170/0x170 [ 1005.891198][T11615] ? __cleanup_sighand+0x60/0x60 [ 1005.894030][T11718] delete_channel: no stack [ 1005.896151][T11615] ? __f_unlock_pos+0x19/0x20 [ 1005.905334][T11615] ? __kasan_check_read+0x11/0x20 [ 1005.910371][T11615] ? lock_downgrade+0x920/0x920 [ 1005.915239][T11615] ? vfs_write+0x34c/0x5d0 [ 1005.919669][T11615] _do_fork+0x146/0xfa0 [ 1005.923831][T11615] ? copy_init_mm+0x20/0x20 [ 1005.928334][T11615] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1005.933881][T11615] ? wait_for_completion+0x440/0x440 [ 1005.939171][T11615] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1005.942127][T11718] delete_channel: no stack [ 1005.945418][T11615] __x64_sys_clone+0x18d/0x250 [ 1005.945437][T11615] ? ksys_write+0x1cf/0x290 [ 1005.959066][T11615] ? __ia32_sys_vfork+0xc0/0xc0 [ 1005.963923][T11615] ? trace_hardirqs_off_caller+0x65/0x230 [ 1005.963941][T11615] ? trace_hardirqs_on+0x67/0x240 [ 1005.974658][T11615] do_syscall_64+0xfd/0x6a0 [ 1005.979167][T11615] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1005.985050][T11615] RIP: 0033:0x4598e9 [ 1005.985064][T11615] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1005.985075][T11615] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.016943][T11615] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1006.016952][T11615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1006.016959][T11615] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.016967][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1006.016980][T11615] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1006.034062][T11718] delete_channel: no stack 20:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1006.080278][T11718] delete_channel: no stack [ 1006.118713][T11639] input: syz1 as /devices/virtual/input/input511 20:06:01 executing program 3 (fault-call:2 fault-nth:43): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x16\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1006.280033][T11771] FAULT_INJECTION: forcing a failure. [ 1006.280033][T11771] name failslab, interval 1, probability 0, space 0, times 0 20:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1006.346834][T11771] CPU: 1 PID: 11771 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1006.354317][T11771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.354332][T11843] input: syz1 as /devices/virtual/input/input512 [ 1006.364355][T11771] Call Trace: [ 1006.364378][T11771] dump_stack+0x172/0x1f0 [ 1006.364398][T11771] should_fail.cold+0xa/0x15 [ 1006.364414][T11771] ? fault_create_debugfs_attr+0x180/0x180 [ 1006.364427][T11771] ? page_to_nid.part.0+0x20/0x20 [ 1006.364439][T11771] ? ___might_sleep+0x163/0x280 [ 1006.364455][T11771] __should_failslab+0x121/0x190 [ 1006.364474][T11771] should_failslab+0x9/0x14 [ 1006.408379][T11771] kmem_cache_alloc+0x2aa/0x710 [ 1006.413223][T11771] ? _do_fork+0x146/0xfa0 [ 1006.413234][T11771] ? __x64_sys_clone+0x18d/0x250 [ 1006.413248][T11771] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1006.413266][T11771] ptlock_alloc+0x20/0x70 [ 1006.413281][T11771] pte_alloc_one+0x6d/0x1a0 [ 1006.413294][T11771] __pte_alloc+0x20/0x310 [ 1006.413308][T11771] copy_page_range+0x1520/0x1ee0 [ 1006.413326][T11771] ? mark_held_locks+0xf0/0xf0 [ 1006.422564][T11771] ? __kasan_check_read+0x11/0x20 [ 1006.441914][T11771] ? pmd_alloc+0x180/0x180 [ 1006.441928][T11771] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1006.441943][T11771] ? validate_mm_rb+0xa3/0xc0 [ 1006.441955][T11771] ? __vma_link_rb+0x275/0x370 [ 1006.441972][T11771] dup_mm+0xa67/0x1430 [ 1006.441988][T11771] ? vm_area_dup+0x170/0x170 [ 1006.442006][T11771] ? debug_mutex_init+0x2d/0x5a [ 1006.456679][T11771] copy_process+0x28b7/0x6b00 20:06:01 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)={0x2c, r2, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000020}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x88, r2, 0x2d2056645d48e5b5, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x356a516}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5748}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000012}, 0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = getpid() ioprio_get$pid(0x2, r4) 20:06:01 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1006.456697][T11771] ? _kstrtoul+0x170/0x170 [ 1006.466618][T11771] ? __cleanup_sighand+0x60/0x60 [ 1006.466636][T11771] ? __f_unlock_pos+0x19/0x20 [ 1006.477413][T11771] ? __kasan_check_read+0x11/0x20 [ 1006.477435][T11771] ? lock_downgrade+0x920/0x920 [ 1006.519954][T11771] ? vfs_write+0x34c/0x5d0 [ 1006.524376][T11771] _do_fork+0x146/0xfa0 [ 1006.528541][T11771] ? copy_init_mm+0x20/0x20 [ 1006.533047][T11771] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1006.538585][T11771] ? wait_for_completion+0x440/0x440 [ 1006.538610][T11771] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1006.538629][T11771] __x64_sys_clone+0x18d/0x250 [ 1006.554875][T11771] ? ksys_write+0x1cf/0x290 [ 1006.559388][T11771] ? __ia32_sys_vfork+0xc0/0xc0 [ 1006.564242][T11771] ? trace_hardirqs_off_caller+0x65/0x230 [ 1006.569958][T11771] ? trace_hardirqs_on+0x67/0x240 [ 1006.574986][T11771] do_syscall_64+0xfd/0x6a0 [ 1006.579498][T11771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.585386][T11771] RIP: 0033:0x4598e9 [ 1006.589273][T11771] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.589280][T11771] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.589291][T11771] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1006.589297][T11771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1006.589304][T11771] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1006.589311][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1006.589318][T11771] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000280)="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") r1 = getpid() ioprio_get$pid(0x2, r1) 20:06:02 executing program 3 (fault-call:2 fault-nth:44): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x1f\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1006.848090][T11968] FAULT_INJECTION: forcing a failure. [ 1006.848090][T11968] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.869258][T11968] CPU: 1 PID: 11968 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1006.876730][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1006.876736][T11968] Call Trace: [ 1006.876757][T11968] dump_stack+0x172/0x1f0 [ 1006.876782][T11968] should_fail.cold+0xa/0x15 [ 1006.898986][T11968] ? fault_create_debugfs_attr+0x180/0x180 [ 1006.899000][T11968] ? page_to_nid.part.0+0x20/0x20 [ 1006.899015][T11968] ? ___might_sleep+0x163/0x280 [ 1006.899032][T11968] __should_failslab+0x121/0x190 [ 1006.899048][T11968] should_failslab+0x9/0x14 [ 1006.899057][T11968] kmem_cache_alloc+0x2aa/0x710 [ 1006.899077][T11968] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1006.909892][T11968] ptlock_alloc+0x20/0x70 [ 1006.909910][T11968] pte_alloc_one+0x6d/0x1a0 [ 1006.909921][T11968] __pte_alloc+0x20/0x310 [ 1006.909935][T11968] copy_page_range+0x1520/0x1ee0 [ 1006.909949][T11968] ? mark_held_locks+0xf0/0xf0 [ 1006.909971][T11968] ? pmd_alloc+0x180/0x180 [ 1006.919724][T11968] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1006.919741][T11968] ? validate_mm_rb+0xa3/0xc0 [ 1006.919753][T11968] ? __vma_link_rb+0x275/0x370 [ 1006.919769][T11968] dup_mm+0xa67/0x1430 [ 1006.919787][T11968] ? vm_area_dup+0x170/0x170 [ 1006.919806][T11968] ? debug_mutex_init+0x2d/0x5a [ 1006.929136][T11968] copy_process+0x28b7/0x6b00 [ 1006.929151][T11968] ? _kstrtoul+0x170/0x170 [ 1006.929168][T11968] ? __cleanup_sighand+0x60/0x60 [ 1006.929186][T11968] ? __f_unlock_pos+0x19/0x20 [ 1006.940494][T11968] ? __kasan_check_read+0x11/0x20 [ 1006.940513][T11968] ? lock_downgrade+0x920/0x920 [ 1006.940526][T11968] ? vfs_write+0x34c/0x5d0 [ 1006.940545][T11968] _do_fork+0x146/0xfa0 [ 1006.940559][T11968] ? copy_init_mm+0x20/0x20 [ 1006.940577][T11968] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1006.949364][T11968] ? wait_for_completion+0x440/0x440 20:06:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1006.949389][T11968] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1006.949405][T11968] __x64_sys_clone+0x18d/0x250 [ 1006.949422][T11968] ? ksys_write+0x1cf/0x290 [ 1006.959073][T11968] ? __ia32_sys_vfork+0xc0/0xc0 [ 1006.959090][T11968] ? trace_hardirqs_off_caller+0x65/0x230 [ 1006.959102][T11968] ? trace_hardirqs_on+0x67/0x240 [ 1006.959119][T11968] do_syscall_64+0xfd/0x6a0 [ 1006.959134][T11968] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1006.959148][T11968] RIP: 0033:0x4598e9 [ 1006.969061][T11968] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1006.969069][T11968] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1006.969082][T11968] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1006.969089][T11968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1006.969096][T11968] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:06:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x6888a813ee747c3c, 0x2, 0x627c, 0x36a1, 0xffffffffffffffff}) r1 = getpid() ioprio_get$pid(0x2, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='tls\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r7 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$update(0x2, r7, &(0x7f00000004c0)="c47fd735a5ba8ece353ba75a365580cb8febffed3c7677d30911c71e355c58e5bf2765801b7b351494c6aa4efa7198fa3166f56c21f9f9bd8e83b5a2a4c224c24078becdf993b983d4f580c2f4475bc13fd9cb00eef98b52fec66346da3a4c317747dcf05e570785092d5e21d5fa73ee77354846912e3963aebaa97ea3852d855b6e6f56feacca9fc0f77f662a71a0787e65c4f9059935da7ce6745760e3b544381335ed4c6904ef05e30c69c6fe69c58707389a21a4feea27768aa2949098f14c2d543986aca3d5d6a47534d44038d7b1b54915e0ac6037e5a13be2f2233f00b6a6f7b93f09", 0xe6) sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r4, r6}}}], 0x20}, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x7, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="c29a4cf64ce70e275d3f5147fcb61ed8ce555df1536abbe4f7eb5331ee94eb250dd1ae13bf8b8a366e4f9984de3f070118bbb7f42b7446f102da411eb40dfebb9c6b6377cbd6ebccd333f44b612b7e4d51f6f7fdb8bd124c8e74d0ad90adf915f6d97a2f03cd72e639981169da8d15c268a4aaca48e29f38b8e6ab445b2d4e7c9b063cc564f3100f1a59926b40cc8b86068950e25b3bbf3fe2bb50fc6b4f6d6b6acf786199bc714d59ca9363f3827d186d907dc48427e2a2c5f9670e4509a2eace6bd7b11f30cd2a6c27216e64205a0416936fe8a4701f4be96c02", 0xdb, 0x674}], 0x828, &(0x7f0000000300)={[{@shortname_winnt='shortname=winnt'}, {@shortname_win95='shortname=win95'}, {@shortname_mixed='shortname=mixed'}, {@rodir='rodir'}, {@uni_xlateno='uni_xlate=0'}, {@uni_xlate='uni_xlate=1'}], [{@euid_eq={'euid', 0x3d, r6}}, {@obj_role={'obj_role', 0x3d, 'wlan0()!/\x93]vmnet1,trustedposix_acl_access '}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@audit='audit'}, {@dont_appraise='dont_appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/full\x00'}}]}) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 1006.969103][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1006.969115][T11968] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:02 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:02 executing program 3 (fault-call:2 fault-nth:45): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1007.236903][T11976] input: syz1 as /devices/virtual/input/input513 20:06:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$getregs(0xc, r2, 0x80, &(0x7f0000000000)=""/17) ioprio_get$pid(0x0, r1) [ 1007.316701][T12083] input: syz1 as /devices/virtual/input/input514 [ 1007.405210][T12096] FAULT_INJECTION: forcing a failure. [ 1007.405210][T12096] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.458555][T12096] CPU: 1 PID: 12096 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1007.466051][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.476096][T12096] Call Trace: [ 1007.476118][T12096] dump_stack+0x172/0x1f0 [ 1007.476141][T12096] should_fail.cold+0xa/0x15 [ 1007.488312][T12096] ? fault_create_debugfs_attr+0x180/0x180 [ 1007.494121][T12096] ? page_to_nid.part.0+0x20/0x20 [ 1007.499497][T12096] ? ___might_sleep+0x163/0x280 [ 1007.504351][T12096] __should_failslab+0x121/0x190 [ 1007.504371][T12096] should_failslab+0x9/0x14 [ 1007.513776][T12096] kmem_cache_alloc+0x2aa/0x710 [ 1007.518646][T12096] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1007.524369][T12096] ? __vm_enough_memory+0x17e/0x3a0 [ 1007.529569][T12096] vm_area_dup+0x21/0x170 [ 1007.529582][T12096] dup_mm+0x549/0x1430 [ 1007.529600][T12096] ? vm_area_dup+0x170/0x170 [ 1007.529616][T12096] ? debug_mutex_init+0x2d/0x5a [ 1007.529635][T12096] copy_process+0x28b7/0x6b00 [ 1007.552064][T12096] ? _kstrtoul+0x170/0x170 20:06:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffff70, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x7, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2c9d9d6ac50845f7}, 0x8101) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc061) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1007.556483][T12096] ? __cleanup_sighand+0x60/0x60 [ 1007.556496][T12096] ? __f_unlock_pos+0x19/0x20 [ 1007.556513][T12096] ? __kasan_check_read+0x11/0x20 [ 1007.571093][T12096] ? lock_downgrade+0x920/0x920 [ 1007.575945][T12096] ? vfs_write+0x34c/0x5d0 [ 1007.580366][T12096] _do_fork+0x146/0xfa0 [ 1007.584523][T12096] ? copy_init_mm+0x20/0x20 [ 1007.584537][T12096] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1007.584551][T12096] ? wait_for_completion+0x440/0x440 [ 1007.584567][T12096] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1007.584585][T12096] __x64_sys_clone+0x18d/0x250 [ 1007.606103][T12096] ? ksys_write+0x1cf/0x290 [ 1007.606118][T12096] ? __ia32_sys_vfork+0xc0/0xc0 [ 1007.606136][T12096] ? trace_hardirqs_off_caller+0x65/0x230 [ 1007.625887][T12096] ? trace_hardirqs_on+0x67/0x240 [ 1007.625906][T12096] do_syscall_64+0xfd/0x6a0 [ 1007.625921][T12096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1007.625936][T12096] RIP: 0033:0x4598e9 [ 1007.645172][T12096] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1007.645181][T12096] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1007.645195][T12096] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1007.645201][T12096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1007.645213][T12096] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1007.673268][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = dup3(r2, r3, 0xc0000) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x7fff) 20:06:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:03 executing program 3 (fault-call:2 fault-nth:46): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1007.673276][T12096] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1007.777315][T12209] input: syz1 as /devices/virtual/input/input515 20:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:03 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1007.822336][T12217] FAULT_INJECTION: forcing a failure. [ 1007.822336][T12217] name failslab, interval 1, probability 0, space 0, times 0 20:06:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(r0, 0x1f, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) 20:06:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x82, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@default, @default, 0x3, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1007.899218][T12217] CPU: 1 PID: 12217 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1007.906700][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1007.916756][T12217] Call Trace: [ 1007.920056][T12217] dump_stack+0x172/0x1f0 [ 1007.924400][T12217] should_fail.cold+0xa/0x15 [ 1007.928999][T12217] ? fault_create_debugfs_attr+0x180/0x180 [ 1007.934826][T12217] ? percpu_ref_put_many+0x94/0x190 [ 1007.940029][T12217] ? __kasan_check_read+0x11/0x20 [ 1007.945055][T12217] __should_failslab+0x121/0x190 [ 1007.949992][T12217] should_failslab+0x9/0x14 [ 1007.954492][T12217] kmem_cache_alloc+0x47/0x710 [ 1007.959251][T12217] anon_vma_clone+0xde/0x480 [ 1007.959267][T12217] anon_vma_fork+0x8f/0x4a0 [ 1007.959281][T12217] ? dup_userfaultfd+0x15e/0x6d0 [ 1007.959297][T12217] ? memcpy+0x46/0x50 [ 1007.973288][T12217] dup_mm+0xa47/0x1430 [ 1007.973307][T12217] ? vm_area_dup+0x170/0x170 [ 1007.981313][T12217] ? debug_mutex_init+0x2d/0x5a [ 1007.981328][T12217] copy_process+0x28b7/0x6b00 [ 1007.981341][T12217] ? _kstrtoul+0x170/0x170 [ 1007.981359][T12217] ? __cleanup_sighand+0x60/0x60 [ 1007.981371][T12217] ? __f_unlock_pos+0x19/0x20 [ 1007.981383][T12217] ? __kasan_check_read+0x11/0x20 [ 1007.981402][T12217] ? lock_downgrade+0x920/0x920 [ 1007.990804][T12217] ? vfs_write+0x34c/0x5d0 [ 1007.990828][T12217] _do_fork+0x146/0xfa0 [ 1007.999882][T12217] ? copy_init_mm+0x20/0x20 [ 1007.999893][T12217] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1007.999907][T12217] ? wait_for_completion+0x440/0x440 [ 1007.999925][T12217] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 20:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00?\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1007.999943][T12217] __x64_sys_clone+0x18d/0x250 [ 1008.009503][T12217] ? ksys_write+0x1cf/0x290 [ 1008.009517][T12217] ? __ia32_sys_vfork+0xc0/0xc0 [ 1008.009534][T12217] ? trace_hardirqs_off_caller+0x65/0x230 [ 1008.009544][T12217] ? trace_hardirqs_on+0x67/0x240 [ 1008.009559][T12217] do_syscall_64+0xfd/0x6a0 [ 1008.009579][T12217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.019423][T12217] RIP: 0033:0x4598e9 [ 1008.019438][T12217] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.019445][T12217] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1008.019457][T12217] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1008.019464][T12217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1008.019471][T12217] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1008.019477][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1008.019484][T12217] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1008.179356][T12240] input: syz1 as /devices/virtual/input/input517 20:06:03 executing program 3 (fault-call:2 fault-nth:47): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x18001, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x8bb7, 0xfffffffffffff441, 0x3ff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r1) [ 1008.244338][T12284] input: syz1 as /devices/virtual/input/input518 20:06:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c904a8413082d450be9618c13caaa7ec551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80406336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65"], 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 20:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1008.332438][T12315] FAULT_INJECTION: forcing a failure. [ 1008.332438][T12315] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.393157][T12315] CPU: 0 PID: 12315 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1008.400641][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.410693][T12315] Call Trace: [ 1008.410714][T12315] dump_stack+0x172/0x1f0 [ 1008.410737][T12315] should_fail.cold+0xa/0x15 [ 1008.422987][T12315] ? fault_create_debugfs_attr+0x180/0x180 [ 1008.428791][T12315] ? page_to_nid.part.0+0x20/0x20 [ 1008.428810][T12315] ? ___might_sleep+0x163/0x280 [ 1008.428829][T12315] __should_failslab+0x121/0x190 [ 1008.443676][T12315] should_failslab+0x9/0x14 [ 1008.448176][T12315] kmem_cache_alloc+0x2aa/0x710 [ 1008.453030][T12315] ? anon_vma_clone+0x320/0x480 [ 1008.457903][T12315] anon_vma_fork+0xfc/0x4a0 [ 1008.457917][T12315] ? dup_userfaultfd+0x15e/0x6d0 [ 1008.457933][T12315] ? memcpy+0x46/0x50 [ 1008.471414][T12315] dup_mm+0xa47/0x1430 [ 1008.475510][T12315] ? vm_area_dup+0x170/0x170 [ 1008.475533][T12315] ? debug_mutex_init+0x2d/0x5a [ 1008.484940][T12315] copy_process+0x28b7/0x6b00 [ 1008.484954][T12315] ? _kstrtoul+0x170/0x170 [ 1008.484973][T12315] ? __cleanup_sighand+0x60/0x60 [ 1008.494020][T12315] ? __f_unlock_pos+0x19/0x20 [ 1008.494034][T12315] ? __kasan_check_read+0x11/0x20 [ 1008.494055][T12315] ? lock_downgrade+0x920/0x920 [ 1008.503614][T12315] ? vfs_write+0x34c/0x5d0 [ 1008.503631][T12315] _do_fork+0x146/0xfa0 [ 1008.503649][T12315] ? copy_init_mm+0x20/0x20 [ 1008.513902][T12315] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1008.513917][T12315] ? wait_for_completion+0x440/0x440 20:06:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\a]\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:03 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x402e40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f2b5333e8f070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x48902f9ec385b720, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r1, 0x29, 0x14, &(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESDEC=r4, @ANYRES64]], 0x1) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1008.513940][T12315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.522627][T12315] __x64_sys_clone+0x18d/0x250 [ 1008.522640][T12315] ? ksys_write+0x1cf/0x290 [ 1008.522653][T12315] ? __ia32_sys_vfork+0xc0/0xc0 [ 1008.522671][T12315] ? trace_hardirqs_off_caller+0x65/0x230 [ 1008.532665][T12315] ? trace_hardirqs_on+0x67/0x240 [ 1008.532682][T12315] do_syscall_64+0xfd/0x6a0 [ 1008.532702][T12315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1008.544178][T12315] RIP: 0033:0x4598e9 [ 1008.544194][T12315] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1008.544201][T12315] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1008.544218][T12315] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1008.549060][T12362] input: syz1 as /devices/virtual/input/input519 [ 1008.555522][T12315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1008.555529][T12315] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:06:03 executing program 3 (fault-call:2 fault-nth:48): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1008.555537][T12315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1008.555545][T12315] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x1, r1) 20:06:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="f883f22011230021930000") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1008.713388][T12402] FAULT_INJECTION: forcing a failure. [ 1008.713388][T12402] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.742966][T12438] input: syz1 as /devices/virtual/input/input520 20:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1008.834941][T12402] CPU: 0 PID: 12402 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1008.842436][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1008.852490][T12402] Call Trace: [ 1008.855790][T12402] dump_stack+0x172/0x1f0 [ 1008.860127][T12402] should_fail.cold+0xa/0x15 [ 1008.864730][T12402] ? fault_create_debugfs_attr+0x180/0x180 [ 1008.870544][T12402] ? page_to_nid.part.0+0x20/0x20 [ 1008.875572][T12402] ? ___might_sleep+0x163/0x280 [ 1008.880428][T12402] __should_failslab+0x121/0x190 [ 1008.885365][T12402] should_failslab+0x9/0x14 [ 1008.889869][T12402] kmem_cache_alloc+0x2aa/0x710 [ 1008.894716][T12402] ? anon_vma_clone+0x320/0x480 [ 1008.899569][T12402] anon_vma_fork+0x1ea/0x4a0 [ 1008.904158][T12402] ? dup_userfaultfd+0x15e/0x6d0 [ 1008.909099][T12402] dup_mm+0xa47/0x1430 [ 1008.913170][T12402] ? vm_area_dup+0x170/0x170 [ 1008.917770][T12402] ? debug_mutex_init+0x2d/0x5a [ 1008.922627][T12402] copy_process+0x28b7/0x6b00 [ 1008.927310][T12402] ? _kstrtoul+0x170/0x170 [ 1008.931734][T12402] ? __cleanup_sighand+0x60/0x60 [ 1008.936671][T12402] ? __f_unlock_pos+0x19/0x20 [ 1008.941345][T12402] ? __kasan_check_read+0x11/0x20 [ 1008.946372][T12402] ? lock_downgrade+0x920/0x920 [ 1008.951218][T12402] ? vfs_write+0x34c/0x5d0 [ 1008.955659][T12402] _do_fork+0x146/0xfa0 [ 1008.959817][T12402] ? copy_init_mm+0x20/0x20 [ 1008.964320][T12402] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1008.969866][T12402] ? wait_for_completion+0x440/0x440 [ 1008.975150][T12402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1008.981405][T12402] __x64_sys_clone+0x18d/0x250 [ 1008.986172][T12402] ? ksys_write+0x1cf/0x290 [ 1008.990669][T12402] ? __ia32_sys_vfork+0xc0/0xc0 [ 1008.995524][T12402] ? trace_hardirqs_off_caller+0x65/0x230 [ 1009.001247][T12402] ? trace_hardirqs_on+0x67/0x240 [ 1009.006282][T12402] do_syscall_64+0xfd/0x6a0 [ 1009.010786][T12402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.016669][T12402] RIP: 0033:0x4598e9 20:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x02\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\a,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1009.020659][T12402] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.040254][T12402] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1009.040267][T12402] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1009.040275][T12402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.040282][T12402] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.040289][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x10040, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) ioctl(r0, 0x4000400, &(0x7f0000000000)="11dca50d6f0bcf6c7bf070") r2 = getpid() ioprio_get$pid(0x2, r2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) [ 1009.040296][T12402] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x1dt\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202e00}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x3bc, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x160, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2147c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0c5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5111}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1794}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d7205f5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6eb7cece}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x158, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xce58}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x25}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0xffffffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @empty, 0xcd}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3f, @rand_addr="8098313da6d28e2501af8dd8a831507f", 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, [], 0x13}, 0x2000000000000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x10000080}, 0x4000000) 20:06:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(r1, &(0x7f0000000000)='net/arp\x00') 20:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80%,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) 20:06:04 executing program 3 (fault-call:2 fault-nth:49): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:04 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1009.208077][T12603] input: syz1 as /devices/virtual/input/input521 20:06:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000002900100025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="00000000f3ff0a00030000000c001a0064736d61616b00000c00020008000500ff000000"], 0xfffffffffffffc67}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r7, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6}, 0x10) [ 1009.273020][T12617] input: syz1 as /devices/virtual/input/input522 20:06:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x0e\xba\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 20:06:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x02\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1009.375844][T12626] FAULT_INJECTION: forcing a failure. [ 1009.375844][T12626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1009.458065][T12626] CPU: 1 PID: 12626 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1009.465635][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.475680][T12626] Call Trace: [ 1009.475706][T12626] dump_stack+0x172/0x1f0 [ 1009.475729][T12626] should_fail.cold+0xa/0x15 [ 1009.487887][T12626] ? fault_create_debugfs_attr+0x180/0x180 [ 1009.487908][T12626] ? ___might_sleep+0x163/0x280 [ 1009.498538][T12626] should_fail_alloc_page+0x50/0x60 [ 1009.503735][T12626] __alloc_pages_nodemask+0x1a1/0x900 [ 1009.509106][T12626] ? stack_trace_consume_entry+0x190/0x190 [ 1009.514914][T12626] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1009.520627][T12626] ? kasan_slab_alloc+0xf/0x20 [ 1009.520639][T12626] ? kmem_cache_alloc+0x121/0x710 [ 1009.520652][T12626] ? anon_vma_clone+0xde/0x480 [ 1009.520669][T12626] ? save_stack+0x5c/0x90 [ 1009.525775][T12674] input: syz1 as /devices/virtual/input/input523 [ 1009.530415][T12626] ? save_stack+0x23/0x90 [ 1009.530428][T12626] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1009.530439][T12626] ? kasan_slab_alloc+0xf/0x20 [ 1009.530454][T12626] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1009.530469][T12626] alloc_pages_current+0x107/0x210 [ 1009.530487][T12626] pte_alloc_one+0x1b/0x1a0 [ 1009.539530][T12626] copy_huge_pmd+0x75/0x620 [ 1009.539548][T12626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.539560][T12626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.539576][T12626] copy_page_range+0x775/0x1ee0 [ 1009.539592][T12626] ? mark_held_locks+0xf0/0xf0 [ 1009.539608][T12626] ? __kasan_check_read+0x11/0x20 [ 1009.539628][T12626] ? pmd_alloc+0x180/0x180 [ 1009.550255][T12626] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1009.550273][T12626] ? validate_mm_rb+0xa3/0xc0 [ 1009.550284][T12626] ? __vma_link_rb+0x275/0x370 [ 1009.550302][T12626] dup_mm+0xa67/0x1430 [ 1009.572230][T12626] ? vm_area_dup+0x170/0x170 [ 1009.572245][T12626] ? debug_mutex_init+0x2d/0x5a [ 1009.572262][T12626] copy_process+0x28b7/0x6b00 [ 1009.572275][T12626] ? _kstrtoul+0x170/0x170 [ 1009.572293][T12626] ? __cleanup_sighand+0x60/0x60 20:06:05 executing program 3 (fault-call:2 fault-nth:50): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1009.593698][T12626] ? __f_unlock_pos+0x19/0x20 [ 1009.603257][T12626] ? __kasan_check_read+0x11/0x20 [ 1009.603276][T12626] ? lock_downgrade+0x920/0x920 [ 1009.603288][T12626] ? vfs_write+0x34c/0x5d0 [ 1009.603307][T12626] _do_fork+0x146/0xfa0 [ 1009.612703][T12626] ? copy_init_mm+0x20/0x20 [ 1009.623035][T12626] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1009.623048][T12626] ? wait_for_completion+0x440/0x440 [ 1009.623068][T12626] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1009.623084][T12626] __x64_sys_clone+0x18d/0x250 [ 1009.623096][T12626] ? ksys_write+0x1cf/0x290 [ 1009.623113][T12626] ? __ia32_sys_vfork+0xc0/0xc0 [ 1009.631895][T12626] ? trace_hardirqs_off_caller+0x65/0x230 [ 1009.641277][T12626] ? trace_hardirqs_on+0x67/0x240 [ 1009.641295][T12626] do_syscall_64+0xfd/0x6a0 [ 1009.641311][T12626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.641321][T12626] RIP: 0033:0x4598e9 [ 1009.641334][T12626] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.641345][T12626] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1009.650384][T12626] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1009.650392][T12626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.650399][T12626] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.650407][T12626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1009.650414][T12626] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1009.743945][T12749] FAULT_INJECTION: forcing a failure. [ 1009.743945][T12749] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.796879][T12749] CPU: 1 PID: 12749 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1009.808080][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1009.808085][T12749] Call Trace: [ 1009.808103][T12749] dump_stack+0x172/0x1f0 [ 1009.808126][T12749] should_fail.cold+0xa/0x15 [ 1009.828112][T12749] ? fault_create_debugfs_attr+0x180/0x180 [ 1009.828126][T12749] ? page_to_nid.part.0+0x20/0x20 [ 1009.828144][T12749] ? ___might_sleep+0x163/0x280 [ 1009.841443][T12749] __should_failslab+0x121/0x190 [ 1009.841460][T12749] should_failslab+0x9/0x14 [ 1009.841471][T12749] kmem_cache_alloc+0x2aa/0x710 [ 1009.841483][T12749] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1009.841499][T12749] ? kasan_slab_alloc+0xf/0x20 [ 1009.850382][T12749] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1009.850401][T12749] ptlock_alloc+0x20/0x70 [ 1009.850416][T12749] pte_alloc_one+0x6d/0x1a0 [ 1009.850432][T12749] copy_huge_pmd+0x75/0x620 [ 1009.861217][T12749] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.861230][T12749] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1009.861247][T12749] copy_page_range+0x775/0x1ee0 [ 1009.861261][T12749] ? mark_held_locks+0xf0/0xf0 [ 1009.861280][T12749] ? __kasan_check_read+0x11/0x20 [ 1009.871026][T12749] ? pmd_alloc+0x180/0x180 [ 1009.871041][T12749] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1009.871056][T12749] ? validate_mm_rb+0xa3/0xc0 [ 1009.871072][T12749] ? __vma_link_rb+0x275/0x370 [ 1009.880395][T12749] dup_mm+0xa67/0x1430 [ 1009.880416][T12749] ? vm_area_dup+0x170/0x170 [ 1009.880432][T12749] ? debug_mutex_init+0x2d/0x5a [ 1009.880450][T12749] copy_process+0x28b7/0x6b00 [ 1009.890964][T12749] ? _kstrtoul+0x170/0x170 [ 1009.890984][T12749] ? __cleanup_sighand+0x60/0x60 [ 1009.890997][T12749] ? __f_unlock_pos+0x19/0x20 [ 1009.891015][T12749] ? __kasan_check_read+0x11/0x20 [ 1009.901541][T12749] ? lock_downgrade+0x920/0x920 [ 1009.901555][T12749] ? vfs_write+0x34c/0x5d0 [ 1009.901569][T12749] _do_fork+0x146/0xfa0 20:06:05 executing program 3 (fault-call:2 fault-nth:51): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:05 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1009.901584][T12749] ? copy_init_mm+0x20/0x20 [ 1009.901597][T12749] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1009.901609][T12749] ? wait_for_completion+0x440/0x440 [ 1009.901631][T12749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1009.910783][T12749] __x64_sys_clone+0x18d/0x250 [ 1009.910796][T12749] ? ksys_write+0x1cf/0x290 [ 1009.910821][T12749] ? __ia32_sys_vfork+0xc0/0xc0 [ 1009.910841][T12749] ? trace_hardirqs_off_caller+0x65/0x230 [ 1009.923311][T12749] ? trace_hardirqs_on+0x67/0x240 [ 1009.923328][T12749] do_syscall_64+0xfd/0x6a0 [ 1009.923345][T12749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1009.923354][T12749] RIP: 0033:0x4598e9 [ 1009.923368][T12749] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1009.923374][T12749] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1009.932978][T12749] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1009.932986][T12749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1009.932993][T12749] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1009.933006][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1009.942394][T12749] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1010.064264][T12674] input: syz1 as /devices/virtual/input/input524 [ 1010.075286][T12752] FAULT_INJECTION: forcing a failure. [ 1010.075286][T12752] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.146490][T12752] CPU: 1 PID: 12752 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1010.164583][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.164587][T12752] Call Trace: [ 1010.164606][T12752] dump_stack+0x172/0x1f0 [ 1010.164624][T12752] should_fail.cold+0xa/0x15 [ 1010.164639][T12752] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.164657][T12752] ? ___might_sleep+0x163/0x280 [ 1010.177966][T12752] should_fail_alloc_page+0x50/0x60 [ 1010.177979][T12752] __alloc_pages_nodemask+0x1a1/0x900 [ 1010.177997][T12752] ? stack_trace_consume_entry+0x190/0x190 [ 1010.186868][T12752] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1010.186883][T12752] ? kasan_slab_alloc+0xf/0x20 [ 1010.186898][T12752] ? kmem_cache_alloc+0x121/0x710 [ 1010.197507][T12752] ? anon_vma_clone+0xde/0x480 [ 1010.197524][T12752] ? save_stack+0x5c/0x90 [ 1010.197540][T12752] ? save_stack+0x23/0x90 [ 1010.213857][T12752] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1010.213874][T12752] ? kasan_slab_alloc+0xf/0x20 [ 1010.224333][T12752] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1010.224350][T12752] alloc_pages_current+0x107/0x210 [ 1010.224368][T12752] pte_alloc_one+0x1b/0x1a0 [ 1010.234108][T12752] copy_huge_pmd+0x75/0x620 [ 1010.234124][T12752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.234142][T12752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1010.259530][T12752] copy_page_range+0x775/0x1ee0 [ 1010.259546][T12752] ? mark_held_locks+0xf0/0xf0 [ 1010.259563][T12752] ? __kasan_check_read+0x11/0x20 [ 1010.259584][T12752] ? pmd_alloc+0x180/0x180 [ 1010.286099][T12752] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1010.286119][T12752] ? validate_mm_rb+0xa3/0xc0 [ 1010.295685][T12752] ? __vma_link_rb+0x275/0x370 [ 1010.295707][T12752] dup_mm+0xa67/0x1430 [ 1010.305099][T12752] ? vm_area_dup+0x170/0x170 [ 1010.305118][T12752] ? debug_mutex_init+0x2d/0x5a [ 1010.315469][T12752] copy_process+0x28b7/0x6b00 [ 1010.315487][T12752] ? _kstrtoul+0x170/0x170 [ 1010.333674][T12752] ? __cleanup_sighand+0x60/0x60 [ 1010.333691][T12752] ? __f_unlock_pos+0x19/0x20 [ 1010.342740][T12752] ? __kasan_check_read+0x11/0x20 [ 1010.342762][T12752] ? lock_downgrade+0x920/0x920 [ 1010.352331][T12752] ? vfs_write+0x34c/0x5d0 [ 1010.352352][T12752] _do_fork+0x146/0xfa0 [ 1010.362174][T12752] ? copy_init_mm+0x20/0x20 [ 1010.362187][T12752] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1010.362200][T12752] ? wait_for_completion+0x440/0x440 [ 1010.362217][T12752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1010.362234][T12752] __x64_sys_clone+0x18d/0x250 [ 1010.370755][T12752] ? ksys_write+0x1cf/0x290 [ 1010.370769][T12752] ? __ia32_sys_vfork+0xc0/0xc0 [ 1010.370786][T12752] ? trace_hardirqs_off_caller+0x65/0x230 [ 1010.370802][T12752] ? trace_hardirqs_on+0x67/0x240 [ 1010.380818][T12752] do_syscall_64+0xfd/0x6a0 [ 1010.380835][T12752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.380845][T12752] RIP: 0033:0x4598e9 [ 1010.380863][T12752] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.392759][T12752] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:06:05 executing program 3 (fault-call:2 fault-nth:52): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1010.392776][T12752] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1010.392783][T12752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.392790][T12752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.392797][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1010.392804][T12752] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1010.462428][T12859] FAULT_INJECTION: forcing a failure. [ 1010.462428][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.478113][T12859] CPU: 0 PID: 12859 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1010.512749][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.512754][T12859] Call Trace: [ 1010.512774][T12859] dump_stack+0x172/0x1f0 [ 1010.512792][T12859] should_fail.cold+0xa/0x15 [ 1010.512806][T12859] ? __kasan_check_read+0x11/0x20 [ 1010.512820][T12859] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.512836][T12859] ? page_to_nid.part.0+0x20/0x20 [ 1010.530323][T12859] ? ___might_sleep+0x163/0x280 [ 1010.530344][T12859] __should_failslab+0x121/0x190 [ 1010.530360][T12859] should_failslab+0x9/0x14 [ 1010.530371][T12859] kmem_cache_alloc+0x2aa/0x710 [ 1010.530385][T12859] ? validate_mm_rb+0xa3/0xc0 [ 1010.530404][T12859] vm_area_dup+0x21/0x170 [ 1010.537975][T12859] dup_mm+0x549/0x1430 [ 1010.537997][T12859] ? vm_area_dup+0x170/0x170 [ 1010.538018][T12859] ? debug_mutex_init+0x2d/0x5a [ 1010.547582][T12859] copy_process+0x28b7/0x6b00 [ 1010.547597][T12859] ? _kstrtoul+0x170/0x170 20:06:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x03\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00'/70) [ 1010.547615][T12859] ? __cleanup_sighand+0x60/0x60 [ 1010.547633][T12859] ? __f_unlock_pos+0x19/0x20 [ 1010.558414][T12859] ? __kasan_check_read+0x11/0x20 [ 1010.558435][T12859] ? lock_downgrade+0x920/0x920 [ 1010.558447][T12859] ? vfs_write+0x34c/0x5d0 [ 1010.558464][T12859] _do_fork+0x146/0xfa0 [ 1010.568201][T12859] ? copy_init_mm+0x20/0x20 [ 1010.568215][T12859] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1010.568228][T12859] ? wait_for_completion+0x440/0x440 [ 1010.568249][T12859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1010.577555][T12859] __x64_sys_clone+0x18d/0x250 20:06:06 executing program 3 (fault-call:2 fault-nth:53): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1010.577570][T12859] ? ksys_write+0x1cf/0x290 [ 1010.577587][T12859] ? __ia32_sys_vfork+0xc0/0xc0 [ 1010.600168][T12859] ? trace_hardirqs_off_caller+0x65/0x230 [ 1010.600179][T12859] ? trace_hardirqs_on+0x67/0x240 [ 1010.600194][T12859] do_syscall_64+0xfd/0x6a0 [ 1010.600214][T12859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.614173][T12859] RIP: 0033:0x4598e9 [ 1010.614188][T12859] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.614195][T12859] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1010.614212][T12859] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1010.623864][T12859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.633080][T12859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.633087][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1010.633094][T12859] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1010.784162][T12868] FAULT_INJECTION: forcing a failure. [ 1010.784162][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.801085][T12868] CPU: 1 PID: 12868 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1010.808550][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.808555][T12868] Call Trace: [ 1010.808576][T12868] dump_stack+0x172/0x1f0 [ 1010.808599][T12868] should_fail.cold+0xa/0x15 [ 1010.822339][T12868] ? fault_create_debugfs_attr+0x180/0x180 [ 1010.822355][T12868] ? percpu_ref_put_many+0x94/0x190 [ 1010.822372][T12868] ? __kasan_check_read+0x11/0x20 [ 1010.831239][T12868] __should_failslab+0x121/0x190 [ 1010.831255][T12868] should_failslab+0x9/0x14 [ 1010.831267][T12868] kmem_cache_alloc+0x47/0x710 [ 1010.831289][T12868] anon_vma_clone+0xde/0x480 [ 1010.842238][T12868] anon_vma_fork+0x8f/0x4a0 [ 1010.842253][T12868] ? dup_userfaultfd+0x15e/0x6d0 [ 1010.842264][T12868] ? memcpy+0x46/0x50 [ 1010.842286][T12868] dup_mm+0xa47/0x1430 [ 1010.852206][T12868] ? vm_area_dup+0x170/0x170 [ 1010.852224][T12868] ? debug_mutex_init+0x2d/0x5a [ 1010.852239][T12868] copy_process+0x28b7/0x6b00 [ 1010.852253][T12868] ? _kstrtoul+0x170/0x170 [ 1010.852269][T12868] ? __cleanup_sighand+0x60/0x60 [ 1010.852288][T12868] ? __f_unlock_pos+0x19/0x20 [ 1010.861508][T12868] ? __kasan_check_read+0x11/0x20 [ 1010.861527][T12868] ? lock_downgrade+0x920/0x920 [ 1010.861540][T12868] ? vfs_write+0x34c/0x5d0 [ 1010.861555][T12868] _do_fork+0x146/0xfa0 [ 1010.861573][T12868] ? copy_init_mm+0x20/0x20 [ 1010.870629][T12868] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1010.870645][T12868] ? wait_for_completion+0x440/0x440 [ 1010.870664][T12868] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1010.870677][T12868] __x64_sys_clone+0x18d/0x250 [ 1010.870693][T12868] ? ksys_write+0x1cf/0x290 20:06:06 executing program 3 (fault-call:2 fault-nth:54): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1010.879594][T12868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1010.879616][T12868] ? trace_hardirqs_off_caller+0x65/0x230 [ 1010.879628][T12868] ? trace_hardirqs_on+0x67/0x240 [ 1010.879644][T12868] do_syscall_64+0xfd/0x6a0 [ 1010.879664][T12868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1010.888270][T12868] RIP: 0033:0x4598e9 [ 1010.888284][T12868] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1010.888296][T12868] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1010.897769][T12868] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1010.897776][T12868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1010.897784][T12868] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1010.897791][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1010.897799][T12868] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1011.039311][T12875] FAULT_INJECTION: forcing a failure. [ 1011.039311][T12875] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.065663][T12875] CPU: 1 PID: 12875 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1011.082467][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.082472][T12875] Call Trace: [ 1011.082490][T12875] dump_stack+0x172/0x1f0 [ 1011.082509][T12875] should_fail.cold+0xa/0x15 [ 1011.082523][T12875] ? fault_create_debugfs_attr+0x180/0x180 [ 1011.082543][T12875] ? lock_acquire+0x190/0x410 [ 1011.095838][T12875] ? anon_vma_clone+0x143/0x480 [ 1011.095856][T12875] __should_failslab+0x121/0x190 [ 1011.095875][T12875] should_failslab+0x9/0x14 [ 1011.104737][T12875] kmem_cache_alloc+0x47/0x710 [ 1011.104753][T12875] ? anon_vma_chain_link+0x154/0x1c0 [ 1011.104772][T12875] anon_vma_clone+0xde/0x480 [ 1011.115209][T12875] anon_vma_fork+0x8f/0x4a0 [ 1011.115224][T12875] ? dup_userfaultfd+0x15e/0x6d0 [ 1011.115241][T12875] ? memcpy+0x46/0x50 [ 1011.120164][T12870] input: syz1 as /devices/virtual/input/input525 [ 1011.124972][T12875] dup_mm+0xa47/0x1430 [ 1011.124992][T12875] ? vm_area_dup+0x170/0x170 [ 1011.125011][T12875] ? debug_mutex_init+0x2d/0x5a [ 1011.134224][T12875] copy_process+0x28b7/0x6b00 [ 1011.134239][T12875] ? _kstrtoul+0x170/0x170 [ 1011.134258][T12875] ? __cleanup_sighand+0x60/0x60 [ 1011.144079][T12875] ? __f_unlock_pos+0x19/0x20 [ 1011.144093][T12875] ? __kasan_check_read+0x11/0x20 [ 1011.144109][T12875] ? lock_downgrade+0x920/0x920 [ 1011.144129][T12875] ? vfs_write+0x34c/0x5d0 [ 1011.153521][T12875] _do_fork+0x146/0xfa0 20:06:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") dup3(r0, r0, 0x80000) [ 1011.153537][T12875] ? copy_init_mm+0x20/0x20 [ 1011.153551][T12875] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1011.153564][T12875] ? wait_for_completion+0x440/0x440 [ 1011.153581][T12875] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1011.153598][T12875] __x64_sys_clone+0x18d/0x250 [ 1011.163866][T12875] ? ksys_write+0x1cf/0x290 [ 1011.163880][T12875] ? __ia32_sys_vfork+0xc0/0xc0 [ 1011.163897][T12875] ? trace_hardirqs_off_caller+0x65/0x230 [ 1011.163907][T12875] ? trace_hardirqs_on+0x67/0x240 [ 1011.163928][T12875] do_syscall_64+0xfd/0x6a0 [ 1011.172537][T12875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.172547][T12875] RIP: 0033:0x4598e9 [ 1011.172562][T12875] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.172568][T12875] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1011.172581][T12875] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 20:06:06 executing program 3 (fault-call:2 fault-nth:55): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:06 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008918, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1011.172588][T12875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.172600][T12875] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1011.182095][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1011.182102][T12875] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:06 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x478, 0x260, 0x130, 0x260, 0x0, 0x260, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xe, 0x4, 0x9}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x8, "b19bbfb3c5e4f37cb9bc4acc296f71f389c189888fe669cd7d5d5d75fdfc"}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x25}, @rand_addr="9cee843ddee66cd43b23ea6ec344cd7b", [0x0, 0x100fffeff, 0xffffffff, 0xffffffff], [0x0, 0xff000000, 0xfffffe7e, 0xff], 'bond_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x3c, 0x800, 0x5}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x4, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0xc2, 0xaabd, 0x1, 0x401, 0xffffffff, 0x3, 0x1]}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xf}, [0xff000000, 0xfffffefe, 0xff000000, 0xff000000], [0xff, 0xb15ee8822890f2e9, 0xffffffff, 0xff], 'veth0_to_bond\x00', 'yam0\x00', {}, {0x80}, 0x186a9f4ea618176c, 0x1000}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d5, 0x2, 0x9, 0x5add0572c99fd51c}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000700)='/dev/dsp#\x00', 0x1c47, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000880)=""/196) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r4, r7}}}], 0x20}, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r7) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$VIDIOC_S_JPEGCOMP(r8, 0x408c563e, &(0x7f0000000040)={0xd13, 0x6, 0x28, "568a753ae2a8183522aca7ca814b10e55218d638ca8d6e2017597f01c7afd93f8997d6edfeeaeb0c2416ef2b7566251ca3686eb94aa6cd63828c6aa7", 0x16, "894449a985958d08e0d27f06d57cc23fd6495abae9665ef6ad49176687f4b9744b54a0d63d075545a45d6153f9c037038bdcbe9b9f28dc49023eefe2", 0x20}) 20:06:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x02\x00'/70) 20:06:06 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=[@dontfrag={{0x14, 0x29, 0x2}}], 0x18}}], 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) accept$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @netrom, @null, @bcast, @bcast, @bcast, @null, @rose]}, &(0x7f0000000080)=0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = getpid() ioprio_get$pid(0x2, r3) [ 1011.380606][T12883] FAULT_INJECTION: forcing a failure. [ 1011.380606][T12883] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.402872][T12870] input: syz1 as /devices/virtual/input/input526 20:06:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1011.456795][T12883] CPU: 0 PID: 12883 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1011.464276][T12883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.464282][T12883] Call Trace: [ 1011.464300][T12883] dump_stack+0x172/0x1f0 [ 1011.464323][T12883] should_fail.cold+0xa/0x15 [ 1011.481940][T12883] ? fault_create_debugfs_attr+0x180/0x180 [ 1011.481956][T12883] ? __anon_vma_interval_tree_augment_rotate+0x1ac/0x220 [ 1011.481976][T12883] ? __rb_insert_augmented+0x20c/0xd90 [ 1011.499330][T12883] __should_failslab+0x121/0x190 [ 1011.499351][T12883] should_failslab+0x9/0x14 [ 1011.509697][T12883] kmem_cache_alloc+0x47/0x710 [ 1011.509712][T12883] ? anon_vma_chain_link+0x154/0x1c0 [ 1011.509729][T12883] anon_vma_clone+0xde/0x480 [ 1011.518971][T12883] anon_vma_fork+0x8f/0x4a0 [ 1011.518990][T12883] ? dup_userfaultfd+0x15e/0x6d0 [ 1011.533309][T12883] ? memcpy+0x46/0x50 [ 1011.533327][T12883] dup_mm+0xa47/0x1430 [ 1011.533346][T12883] ? vm_area_dup+0x170/0x170 [ 1011.542228][T12883] ? debug_mutex_init+0x2d/0x5a [ 1011.542247][T12883] copy_process+0x28b7/0x6b00 [ 1011.542266][T12883] ? _kstrtoul+0x170/0x170 [ 1011.550887][T12883] ? __cleanup_sighand+0x60/0x60 [ 1011.550902][T12883] ? __f_unlock_pos+0x19/0x20 [ 1011.550915][T12883] ? __kasan_check_read+0x11/0x20 [ 1011.550933][T12883] ? lock_downgrade+0x920/0x920 [ 1011.550943][T12883] ? vfs_write+0x34c/0x5d0 [ 1011.550960][T12883] _do_fork+0x146/0xfa0 [ 1011.560444][T12883] ? copy_init_mm+0x20/0x20 [ 1011.560458][T12883] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1011.560470][T12883] ? wait_for_completion+0x440/0x440 [ 1011.560487][T12883] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1011.560506][T12883] __x64_sys_clone+0x18d/0x250 [ 1011.569841][T12883] ? ksys_write+0x1cf/0x290 [ 1011.569856][T12883] ? __ia32_sys_vfork+0xc0/0xc0 [ 1011.569871][T12883] ? trace_hardirqs_off_caller+0x65/0x230 [ 1011.569882][T12883] ? trace_hardirqs_on+0x67/0x240 [ 1011.569902][T12883] do_syscall_64+0xfd/0x6a0 [ 1011.579556][T12883] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1011.579567][T12883] RIP: 0033:0x4598e9 [ 1011.579581][T12883] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1011.579587][T12883] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1011.579599][T12883] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1011.579612][T12883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.588840][T12883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1011.588848][T12883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1011.588855][T12883] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1011.658974][T12912] input: syz1 as /devices/virtual/input/input527 20:06:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00?\x00'/70) 20:06:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x44f, 0xb0801) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0xffff, 0x4, 0x2, 0xff, 0x1, [{0x6, 0x40, 0x2, 0x0, 0x0, 0x464f33fca7dab9ef}]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x81, 0xaa6a20a98714e723, 0x9, 0x800, 0x4, 0xffffffffffffff81, 0xa}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000680)=""/164}, {&(0x7f00000000c0)=""/25}, {&(0x7f0000000200)=""/27}, {&(0x7f0000000300)=""/127}, {&(0x7f0000000380)=""/106}, {&(0x7f0000000400)=""/203}, {&(0x7f0000000500)=""/249}], 0x100000dc, 0x100036) sendto$x25(r1, &(0x7f0000000000)="79a690d94b03b7be1fa73bdd27a3454013ae4a76cf45", 0x16, 0x40000, &(0x7f0000000080)={0x9, @null=' \x00'}, 0xc) r2 = getpid() ioprio_get$pid(0x2, r2) 20:06:07 executing program 3 (fault-call:2 fault-nth:56): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:07 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00@\x00'/70) [ 1012.001824][T13026] input: syz1 as /devices/virtual/input/input529 [ 1012.076076][T13039] FAULT_INJECTION: forcing a failure. [ 1012.076076][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.116814][T13039] CPU: 1 PID: 13039 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1012.124289][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.124294][T13039] Call Trace: [ 1012.124316][T13039] dump_stack+0x172/0x1f0 [ 1012.124336][T13039] should_fail.cold+0xa/0x15 [ 1012.124354][T13039] ? fault_create_debugfs_attr+0x180/0x180 [ 1012.124370][T13039] ? __anon_vma_interval_tree_augment_rotate+0x1ac/0x220 [ 1012.124388][T13039] ? __rb_insert_augmented+0x20c/0xd90 [ 1012.137736][T13039] __should_failslab+0x121/0x190 [ 1012.146600][T13039] should_failslab+0x9/0x14 [ 1012.146613][T13039] kmem_cache_alloc+0x47/0x710 [ 1012.146631][T13039] ? anon_vma_chain_link+0x154/0x1c0 [ 1012.159414][T13039] anon_vma_clone+0xde/0x480 [ 1012.159430][T13039] anon_vma_fork+0x8f/0x4a0 [ 1012.159445][T13039] ? dup_userfaultfd+0x15e/0x6d0 [ 1012.159455][T13039] ? memcpy+0x46/0x50 [ 1012.159473][T13039] dup_mm+0xa47/0x1430 [ 1012.169832][T13039] ? vm_area_dup+0x170/0x170 20:06:07 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x40}, &(0x7f0000000080)=0x8) [ 1012.169849][T13039] ? debug_mutex_init+0x2d/0x5a [ 1012.169864][T13039] copy_process+0x28b7/0x6b00 [ 1012.169878][T13039] ? _kstrtoul+0x170/0x170 [ 1012.169895][T13039] ? __cleanup_sighand+0x60/0x60 [ 1012.169913][T13039] ? __f_unlock_pos+0x19/0x20 [ 1012.179440][T13039] ? __kasan_check_read+0x11/0x20 [ 1012.179458][T13039] ? lock_downgrade+0x920/0x920 [ 1012.179471][T13039] ? vfs_write+0x34c/0x5d0 [ 1012.179485][T13039] _do_fork+0x146/0xfa0 [ 1012.179502][T13039] ? copy_init_mm+0x20/0x20 [ 1012.189330][T13039] ? __mutex_unlock_slowpath+0xf8/0x6b0 20:06:07 executing program 3 (fault-call:2 fault-nth:57): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1012.189345][T13039] ? wait_for_completion+0x440/0x440 [ 1012.189364][T13039] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1012.189379][T13039] __x64_sys_clone+0x18d/0x250 [ 1012.189392][T13039] ? ksys_write+0x1cf/0x290 [ 1012.189403][T13039] ? __ia32_sys_vfork+0xc0/0xc0 [ 1012.189416][T13039] ? trace_hardirqs_off_caller+0x65/0x230 [ 1012.189432][T13039] ? trace_hardirqs_on+0x67/0x240 [ 1012.198824][T13039] do_syscall_64+0xfd/0x6a0 [ 1012.198842][T13039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.198853][T13039] RIP: 0033:0x4598e9 [ 1012.198867][T13039] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.198878][T13039] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1012.206874][T13039] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1012.206882][T13039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1012.206889][T13039] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1012.206896][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1012.206909][T13039] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1012.393890][T13026] input: syz1 as /devices/virtual/input/input530 [ 1012.403140][T13135] FAULT_INJECTION: forcing a failure. [ 1012.403140][T13135] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.416780][T13135] CPU: 0 PID: 13135 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1012.424240][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.434286][T13135] Call Trace: [ 1012.434309][T13135] dump_stack+0x172/0x1f0 [ 1012.434330][T13135] should_fail.cold+0xa/0x15 [ 1012.434348][T13135] ? fault_create_debugfs_attr+0x180/0x180 [ 1012.434366][T13135] ? page_to_nid.part.0+0x20/0x20 [ 1012.452357][T13135] ? ___might_sleep+0x163/0x280 [ 1012.452376][T13135] __should_failslab+0x121/0x190 20:06:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x10\x10\x00'/70) 20:06:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x3, 0x0, 0x1e, 0xb26, 0xb, 0xfff, 0x7, 0x3ff, 0x5c, 0x7e1, 0x7, 0x401}) ioprio_get$pid(0x2, r1) [ 1012.452395][T13135] should_failslab+0x9/0x14 [ 1012.471645][T13135] kmem_cache_alloc+0x2aa/0x710 [ 1012.476498][T13135] ? anon_vma_clone+0x320/0x480 [ 1012.481353][T13135] anon_vma_fork+0x1ea/0x4a0 [ 1012.485942][T13135] ? dup_userfaultfd+0x15e/0x6d0 [ 1012.490883][T13135] dup_mm+0xa47/0x1430 [ 1012.494964][T13135] ? vm_area_dup+0x170/0x170 [ 1012.499551][T13135] ? debug_mutex_init+0x2d/0x5a [ 1012.499569][T13135] copy_process+0x28b7/0x6b00 [ 1012.509063][T13135] ? _kstrtoul+0x170/0x170 [ 1012.513569][T13135] ? __cleanup_sighand+0x60/0x60 [ 1012.513586][T13135] ? __f_unlock_pos+0x19/0x20 [ 1012.523169][T13135] ? __kasan_check_read+0x11/0x20 [ 1012.528196][T13135] ? lock_downgrade+0x920/0x920 [ 1012.533058][T13135] ? vfs_write+0x34c/0x5d0 [ 1012.533076][T13135] _do_fork+0x146/0xfa0 [ 1012.541628][T13135] ? copy_init_mm+0x20/0x20 [ 1012.546133][T13135] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1012.551680][T13135] ? wait_for_completion+0x440/0x440 [ 1012.551702][T13135] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1012.563282][T13135] __x64_sys_clone+0x18d/0x250 [ 1012.568057][T13135] ? ksys_write+0x1cf/0x290 [ 1012.572566][T13135] ? __ia32_sys_vfork+0xc0/0xc0 [ 1012.577419][T13135] ? trace_hardirqs_off_caller+0x65/0x230 [ 1012.583138][T13135] ? trace_hardirqs_on+0x67/0x240 [ 1012.588308][T13135] do_syscall_64+0xfd/0x6a0 [ 1012.592815][T13135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.598703][T13135] RIP: 0033:0x4598e9 20:06:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1001000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x100000001, 0x2, 0x1ff, 0x35, 0x7f, r3}) ioprio_get$pid(0x2, r1) [ 1012.602589][T13135] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.602597][T13135] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1012.602610][T13135] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1012.602623][T13135] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1012.646516][T13135] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1012.654484][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1012.654497][T13135] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x28, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eea80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f8a6c1c0626240716e65243ff932b8bb049152980f09f35354f24daec04b91538b5cfa5674b732f0d57955aaa99075bfc957495b7c24d302325817ff403bee82511a963d7ca6086638882fdb7da9f482acdb96afb9b07098999e1234f6a474ae8d5d2207013dc50a042bac961b3be060d462285918a5960f1f1dc0206743e2c42052fdaab0606f0357c0e0e066660e03d320650aef0f4144a855f167270d98a364f491058c21c7abcf6a35cbaea12c829c22a94ac829b679fa0a9398ccc9dd05ee014c4f20fc7c"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x7, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x82}], 0x1, 0x0) write$UHID_CREATE2(r3, &(0x7f00000003c0)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0xab, 0x7, 0x49c3, 0x79ee, 0x7, 0x5, "7152c0daa5575fab20f78122da33ed625de1a9adbee8ac0be0e8b6c459a52112b1bbbab7c45ca66db46b93964a3637c690d819aa46dd5b77e5b9ef2ff7d067c0b49e8831ee7007ad406e3d8506b198496551edae1684f235a75c39813a20f2fe5ac69d92eb4e2edcdf9030f786f9faa5437c15743abbd1e95bbbb6ee66717f425d81529f76d40a781db49a0439cf2c36d47a5e1ddd7304ac79e438b77233e0bc578ec61ffea0c2e3828058"}, 0x1c3) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r4) 20:06:08 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fstatfs(r2, &(0x7f0000000000)=""/216) 20:06:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1012.944804][T13178] input: syz1 as /devices/virtual/input/input531 20:06:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) shmget(0x1, 0x4000, 0x78000408, &(0x7f0000ff7000/0x4000)=nil) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529d8e01d5a29e60078979f3b9b5488d74c4b38cc03addc9607001979c9551f604444fef7d1fd8d189f1ec8da616540936f4ed040cb5d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafcb2e4503edaca614776c10f687576e873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f3535400"/249], 0x8) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x100) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1013.062273][T13294] input: syz1 as /devices/virtual/input/input532 20:06:08 executing program 3 (fault-call:2 fault-nth:58): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x36) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x3}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)={0x2c, r4, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x582e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa77e}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x8011) r5 = getpid() ioprio_get$pid(0x2, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$setstatus(r6, 0x4, 0x4000) 20:06:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:08 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1013.313395][T13410] input: syz1 as /devices/virtual/input/input533 20:06:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00') [ 1013.371417][T13424] FAULT_INJECTION: forcing a failure. [ 1013.371417][T13424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1013.446026][T13476] input: syz1 as /devices/virtual/input/input534 [ 1013.465323][T13424] CPU: 0 PID: 13424 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1013.472813][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.482861][T13424] Call Trace: [ 1013.486156][T13424] dump_stack+0x172/0x1f0 [ 1013.490504][T13424] should_fail.cold+0xa/0x15 [ 1013.495101][T13424] ? fault_create_debugfs_attr+0x180/0x180 [ 1013.500909][T13424] ? ___might_sleep+0x163/0x280 [ 1013.505767][T13424] should_fail_alloc_page+0x50/0x60 [ 1013.510974][T13424] __alloc_pages_nodemask+0x1a1/0x900 [ 1013.516343][T13424] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1013.522057][T13424] ? anon_vma_clone+0xde/0x480 [ 1013.526817][T13424] ? save_stack+0x5c/0x90 [ 1013.531408][T13424] ? save_stack+0x23/0x90 [ 1013.535736][T13424] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1013.541539][T13424] ? kasan_slab_alloc+0xf/0x20 [ 1013.546299][T13424] ? kmem_cache_alloc+0x121/0x710 [ 1013.551314][T13424] ? anon_vma_fork+0x1ea/0x4a0 [ 1013.556074][T13424] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1013.562313][T13424] alloc_pages_current+0x107/0x210 [ 1013.567420][T13424] ? _do_fork+0x146/0xfa0 [ 1013.571747][T13424] get_zeroed_page+0x14/0x50 [ 1013.576335][T13424] __pud_alloc+0x3b/0x250 [ 1013.580661][T13424] pud_alloc+0xde/0x150 [ 1013.584818][T13424] copy_page_range+0x37a/0x1ee0 [ 1013.589669][T13424] ? mark_held_locks+0xf0/0xf0 [ 1013.594427][T13424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1013.594445][T13424] ? __kasan_check_read+0x11/0x20 [ 1013.594469][T13424] ? lock_downgrade+0x920/0x920 [ 1013.605697][T13424] ? vma_compute_subtree_gap+0x158/0x230 [ 1013.605711][T13424] ? pmd_alloc+0x180/0x180 [ 1013.605730][T13424] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1013.616168][T13424] ? validate_mm_rb+0xa3/0xc0 [ 1013.616182][T13424] ? __vma_link_rb+0x275/0x370 [ 1013.616201][T13424] dup_mm+0xa67/0x1430 [ 1013.626128][T13424] ? vm_area_dup+0x170/0x170 [ 1013.626143][T13424] ? debug_mutex_init+0x2d/0x5a [ 1013.626160][T13424] copy_process+0x28b7/0x6b00 [ 1013.635558][T13424] ? _kstrtoul+0x170/0x170 [ 1013.635579][T13424] ? __cleanup_sighand+0x60/0x60 [ 1013.635595][T13424] ? __f_unlock_pos+0x19/0x20 [ 1013.644199][T13424] ? __kasan_check_read+0x11/0x20 [ 1013.644218][T13424] ? lock_downgrade+0x920/0x920 [ 1013.644235][T13424] ? vfs_write+0x34c/0x5d0 [ 1013.653719][T13424] _do_fork+0x146/0xfa0 [ 1013.653735][T13424] ? copy_init_mm+0x20/0x20 [ 1013.653754][T13424] ? __mutex_unlock_slowpath+0xf8/0x6b0 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00') [ 1013.696116][T13424] ? wait_for_completion+0x440/0x440 [ 1013.701414][T13424] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1013.708013][T13424] __x64_sys_clone+0x18d/0x250 [ 1013.712776][T13424] ? ksys_write+0x1cf/0x290 [ 1013.717269][T13424] ? __ia32_sys_vfork+0xc0/0xc0 [ 1013.722119][T13424] ? trace_hardirqs_off_caller+0x65/0x230 [ 1013.727825][T13424] ? trace_hardirqs_on+0x67/0x240 [ 1013.732851][T13424] do_syscall_64+0xfd/0x6a0 [ 1013.737359][T13424] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1013.743335][T13424] RIP: 0033:0x4598e9 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x10\x10\x00\x00\x00\x00\x00\x00') 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00') [ 1013.747229][T13424] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1013.766832][T13424] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1013.775249][T13424] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1013.783221][T13424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:06:09 executing program 4: ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x2, 0x3f}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1013.791193][T13424] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1013.799170][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1013.807141][T13424] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x60400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x5, 0x39d, &(0x7f0000000240)="3bc6323686dae88d3132d81818a3ed4d0426c64143da0b4cb50627010c1fa2a56f5fc7d4202583b859117fbd63e110f37e6751f3", &(0x7f0000000280)="e8cb10c9811f503a079337eda7e7f2c6ee61e5d88b741be57c86293a01bdbe7ed9758beab9d393b697ed25b4b38920f3e31b201d85af19bb46095f295ded40c5321238fda19b512850ffe586b1101681a346e312c6048c5e3c30f9addd1ecc73790e04262580dfb67f77758a91ff6ec066ede6b4809cdda2530d67edbc1846c49442ea50d87b0e58be81b4e4a1947e299c5a0705a7c57bc3e77216951a3f47287f48b139dba2a79409ec348798f9e11c077e", 0x34, 0xb2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008d12, &(0x7f0000000000)="36dc9e0d6d0bcf6c7bf970b3282145e1933bd148c31be71840f4d8b237881a71b7b46c51e044fc541afa2f251443231a7a026a1b3f309c1a9ccc2aa8d959a7c6dc8ba961e888dda30aa6147d97530e740f19efbc046d438ab25cace7740b9c8fd5f365def9e6f2a154157934aded86ff23c4b8fc1d55f0488794984e1e43ce4c5dfecdf5eb0f2966cc10a1c4a0f54929b74383ec3ef4a598302ab59bca8304dcf9630101b9190b78bf656d2354ab7a35f3575c900c816eae57fbc8edbd815fcdb45900766b16fbf86b389c0d0a4615c45b8ba6af533d41b1b0892565c6b36d56c2a0") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000600)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRESHEX], @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x6) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000000380)) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:09 executing program 3 (fault-call:2 fault-nth:59): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00') 20:06:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c80, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r9 = dup3(r7, r8, 0xc0000) ioctl$KVM_PPC_ALLOCATE_HTAB(r9, 0xc004aea7, &(0x7f0000000080)=0x1d) r10 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r10) [ 1014.012584][T13564] FAULT_INJECTION: forcing a failure. [ 1014.012584][T13564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.068517][T13557] input: syz1 as /devices/virtual/input/input535 [ 1014.089186][T13564] CPU: 0 PID: 13564 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1014.096660][T13564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.096667][T13564] Call Trace: [ 1014.096686][T13564] dump_stack+0x172/0x1f0 [ 1014.096707][T13564] should_fail.cold+0xa/0x15 [ 1014.096725][T13564] ? fault_create_debugfs_attr+0x180/0x180 [ 1014.110479][T13564] ? ___might_sleep+0x163/0x280 [ 1014.110500][T13564] should_fail_alloc_page+0x50/0x60 [ 1014.110513][T13564] __alloc_pages_nodemask+0x1a1/0x900 [ 1014.110527][T13564] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1014.110547][T13564] ? lock_downgrade+0x920/0x920 [ 1014.119431][T13564] ? rwlock_bug.part.0+0x90/0x90 [ 1014.119448][T13564] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1014.119465][T13564] alloc_pages_current+0x107/0x210 [ 1014.119476][T13564] ? do_raw_spin_unlock+0x57/0x270 [ 1014.119494][T13564] __pmd_alloc+0x41/0x460 [ 1014.140637][T13564] ? pmd_val+0x100/0x100 [ 1014.140653][T13564] pmd_alloc+0x10c/0x180 [ 1014.140668][T13564] copy_page_range+0x610/0x1ee0 [ 1014.140689][T13564] ? mark_held_locks+0xf0/0xf0 [ 1014.172570][T13564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.172587][T13564] ? __kasan_check_read+0x11/0x20 [ 1014.172606][T13564] ? pmd_alloc+0x180/0x180 [ 1014.185388][T13564] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1014.194964][T13564] ? validate_mm_rb+0xa3/0xc0 [ 1014.206178][T13564] ? __vma_link_rb+0x275/0x370 [ 1014.216094][T13564] dup_mm+0xa67/0x1430 [ 1014.216120][T13564] ? vm_area_dup+0x170/0x170 [ 1014.229589][T13564] ? debug_mutex_init+0x2d/0x5a [ 1014.229607][T13564] copy_process+0x28b7/0x6b00 [ 1014.229621][T13564] ? _kstrtoul+0x170/0x170 [ 1014.229640][T13564] ? __cleanup_sighand+0x60/0x60 [ 1014.239039][T13564] ? __f_unlock_pos+0x19/0x20 [ 1014.239054][T13564] ? __kasan_check_read+0x11/0x20 [ 1014.239072][T13564] ? lock_downgrade+0x920/0x920 [ 1014.239084][T13564] ? vfs_write+0x34c/0x5d0 [ 1014.239101][T13564] _do_fork+0x146/0xfa0 [ 1014.248154][T13564] ? copy_init_mm+0x20/0x20 [ 1014.248167][T13564] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1014.248180][T13564] ? wait_for_completion+0x440/0x440 [ 1014.248202][T13564] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1014.257774][T13564] __x64_sys_clone+0x18d/0x250 [ 1014.257788][T13564] ? ksys_write+0x1cf/0x290 [ 1014.257806][T13564] ? __ia32_sys_vfork+0xc0/0xc0 [ 1014.267650][T13564] ? trace_hardirqs_off_caller+0x65/0x230 20:06:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffff47, 0x4000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@empty, 0x4e22, 0xfffffffffffffffb, 0x4e24, 0x6, 0xa, 0x40, 0x20, 0x2b, 0x0, 0xffffffffffffffff}, {0x1, 0x8000, 0xed67, 0x9, 0x5, 0x3, 0x9, 0x80000000}, {0x81, 0x100000000, 0x101, 0x3ff}, 0x73e2, 0x6e6bbe, 0x1, 0x0, 0x3, 0x1}, {{@in=@remote, 0x4d4, 0x32}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x0, 0x7, 0x0, 0xee97, 0x1}}, 0xe8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:09 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00') [ 1014.267663][T13564] ? trace_hardirqs_on+0x67/0x240 [ 1014.267678][T13564] do_syscall_64+0xfd/0x6a0 [ 1014.267699][T13564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.276216][T13564] RIP: 0033:0x4598e9 [ 1014.276231][T13564] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.276238][T13564] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:06:09 executing program 3 (fault-call:2 fault-nth:60): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1014.276256][T13564] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1014.373834][T13564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.381789][T13564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1014.389830][T13564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1014.397789][T13564] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1014.427654][T13557] input: syz1 as /devices/virtual/input/input536 20:06:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00') 20:06:09 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$key(0xf, 0x3, 0x2) fchdir(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7f800000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1014.536817][T13693] FAULT_INJECTION: forcing a failure. [ 1014.536817][T13693] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.580166][T13693] CPU: 1 PID: 13693 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1014.587644][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.597694][T13693] Call Trace: [ 1014.600988][T13693] dump_stack+0x172/0x1f0 [ 1014.605324][T13693] should_fail.cold+0xa/0x15 [ 1014.609935][T13693] ? fault_create_debugfs_attr+0x180/0x180 [ 1014.615750][T13693] ? page_to_nid.part.0+0x20/0x20 [ 1014.620783][T13693] ? ___might_sleep+0x163/0x280 [ 1014.625637][T13693] __should_failslab+0x121/0x190 [ 1014.625658][T13693] should_failslab+0x9/0x14 [ 1014.635144][T13693] kmem_cache_alloc+0x2aa/0x710 [ 1014.640000][T13693] ? alloc_pages_current+0x10f/0x210 [ 1014.645290][T13693] ? do_raw_spin_unlock+0x57/0x270 [ 1014.645305][T13693] __pmd_alloc+0xc9/0x460 [ 1014.645321][T13693] ? pmd_val+0x100/0x100 [ 1014.658961][T13693] pmd_alloc+0x10c/0x180 [ 1014.663199][T13693] copy_page_range+0x610/0x1ee0 [ 1014.663214][T13693] ? mark_held_locks+0xf0/0xf0 [ 1014.663234][T13693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.672976][T13693] ? __kasan_check_read+0x11/0x20 [ 1014.672994][T13693] ? pmd_alloc+0x180/0x180 [ 1014.673009][T13693] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1014.673024][T13693] ? validate_mm_rb+0xa3/0xc0 [ 1014.673036][T13693] ? __vma_link_rb+0x275/0x370 [ 1014.673053][T13693] dup_mm+0xa67/0x1430 [ 1014.673073][T13693] ? vm_area_dup+0x170/0x170 [ 1014.698875][T13693] ? debug_mutex_init+0x2d/0x5a [ 1014.698892][T13693] copy_process+0x28b7/0x6b00 [ 1014.698905][T13693] ? _kstrtoul+0x170/0x170 [ 1014.698922][T13693] ? __cleanup_sighand+0x60/0x60 [ 1014.698935][T13693] ? __f_unlock_pos+0x19/0x20 [ 1014.698946][T13693] ? __kasan_check_read+0x11/0x20 [ 1014.698964][T13693] ? lock_downgrade+0x920/0x920 [ 1014.707756][T13693] ? vfs_write+0x34c/0x5d0 [ 1014.707772][T13693] _do_fork+0x146/0xfa0 [ 1014.707788][T13693] ? copy_init_mm+0x20/0x20 [ 1014.717179][T13693] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1014.717195][T13693] ? wait_for_completion+0x440/0x440 [ 1014.717218][T13693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1014.726263][T13693] __x64_sys_clone+0x18d/0x250 20:06:10 executing program 3 (fault-call:2 fault-nth:61): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1014.726277][T13693] ? ksys_write+0x1cf/0x290 [ 1014.726293][T13693] ? __ia32_sys_vfork+0xc0/0xc0 [ 1014.735855][T13693] ? trace_hardirqs_off_caller+0x65/0x230 [ 1014.735872][T13693] ? trace_hardirqs_on+0x67/0x240 [ 1014.735891][T13693] do_syscall_64+0xfd/0x6a0 [ 1014.750211][T13693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.750222][T13693] RIP: 0033:0x4598e9 [ 1014.750234][T13693] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.750240][T13693] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1014.750253][T13693] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1014.750259][T13693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.750266][T13693] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1014.750272][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1014.750278][T13693] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1014.827828][T13803] FAULT_INJECTION: forcing a failure. [ 1014.827828][T13803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.859874][T13803] CPU: 0 PID: 13803 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1014.875385][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.875390][T13803] Call Trace: [ 1014.875410][T13803] dump_stack+0x172/0x1f0 [ 1014.875428][T13803] should_fail.cold+0xa/0x15 [ 1014.875450][T13803] ? fault_create_debugfs_attr+0x180/0x180 [ 1014.896573][T13803] ? ___might_sleep+0x163/0x280 [ 1014.896593][T13803] should_fail_alloc_page+0x50/0x60 [ 1014.896605][T13803] __alloc_pages_nodemask+0x1a1/0x900 [ 1014.896618][T13803] ? __pmd_alloc+0x377/0x460 [ 1014.896635][T13803] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1014.914109][T13803] ? __kasan_check_write+0x14/0x20 [ 1014.914126][T13803] ? rwlock_bug.part.0+0x90/0x90 [ 1014.914139][T13803] ? __pmd_alloc+0x168/0x460 [ 1014.914153][T13803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1014.914172][T13803] alloc_pages_current+0x107/0x210 [ 1014.917820][T13805] input: syz1 as /devices/virtual/input/input537 [ 1014.921754][T13803] pte_alloc_one+0x1b/0x1a0 [ 1014.921770][T13803] __pte_alloc+0x20/0x310 [ 1014.921785][T13803] copy_page_range+0x1520/0x1ee0 [ 1014.921800][T13803] ? mark_held_locks+0xf0/0xf0 [ 1014.921818][T13803] ? __kasan_check_read+0x11/0x20 [ 1014.921837][T13803] ? pmd_alloc+0x180/0x180 [ 1014.932213][T13803] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1014.932233][T13803] ? validate_mm_rb+0xa3/0xc0 [ 1014.932245][T13803] ? __vma_link_rb+0x275/0x370 [ 1014.932262][T13803] dup_mm+0xa67/0x1430 [ 1014.932280][T13803] ? vm_area_dup+0x170/0x170 [ 1014.932300][T13803] ? debug_mutex_init+0x2d/0x5a [ 1014.942321][T13803] copy_process+0x28b7/0x6b00 [ 1014.942336][T13803] ? _kstrtoul+0x170/0x170 [ 1014.942354][T13803] ? __cleanup_sighand+0x60/0x60 [ 1014.942368][T13803] ? __f_unlock_pos+0x19/0x20 [ 1014.942381][T13803] ? __kasan_check_read+0x11/0x20 [ 1014.942398][T13803] ? lock_downgrade+0x920/0x920 [ 1014.942415][T13803] ? vfs_write+0x34c/0x5d0 20:06:10 executing program 3 (fault-call:2 fault-nth:62): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1014.952332][T13803] _do_fork+0x146/0xfa0 [ 1014.952348][T13803] ? copy_init_mm+0x20/0x20 [ 1014.952361][T13803] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1014.952375][T13803] ? wait_for_completion+0x440/0x440 [ 1014.952393][T13803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1014.952410][T13803] __x64_sys_clone+0x18d/0x250 [ 1014.963199][T13803] ? ksys_write+0x1cf/0x290 [ 1014.963215][T13803] ? __ia32_sys_vfork+0xc0/0xc0 [ 1014.963232][T13803] ? trace_hardirqs_off_caller+0x65/0x230 [ 1014.963248][T13803] ? trace_hardirqs_on+0x67/0x240 [ 1014.972743][T13803] do_syscall_64+0xfd/0x6a0 [ 1014.972759][T13803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1014.972773][T13803] RIP: 0033:0x4598e9 [ 1014.984076][T13803] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1014.984084][T13803] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1014.984098][T13803] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1014.984105][T13803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1014.984117][T13803] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1014.994899][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1014.994907][T13803] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1015.162211][T13811] FAULT_INJECTION: forcing a failure. [ 1015.162211][T13811] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1015.176226][T13811] CPU: 1 PID: 13811 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1015.233699][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.243727][T13811] Call Trace: [ 1015.247003][T13811] dump_stack+0x172/0x1f0 [ 1015.251321][T13811] should_fail.cold+0xa/0x15 [ 1015.255887][T13811] ? fault_create_debugfs_attr+0x180/0x180 [ 1015.261667][T13811] ? ___might_sleep+0x163/0x280 [ 1015.266493][T13811] should_fail_alloc_page+0x50/0x60 [ 1015.271672][T13811] __alloc_pages_nodemask+0x1a1/0x900 [ 1015.277017][T13811] ? __pmd_alloc+0x377/0x460 [ 1015.281581][T13811] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1015.287275][T13811] ? __kasan_check_write+0x14/0x20 [ 1015.292361][T13811] ? rwlock_bug.part.0+0x90/0x90 [ 1015.297283][T13811] ? __pmd_alloc+0x168/0x460 [ 1015.301849][T13811] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1015.308150][T13811] alloc_pages_current+0x107/0x210 [ 1015.313237][T13811] pte_alloc_one+0x1b/0x1a0 [ 1015.317727][T13811] __pte_alloc+0x20/0x310 [ 1015.322030][T13811] copy_page_range+0x1520/0x1ee0 [ 1015.326943][T13811] ? mark_held_locks+0xf0/0xf0 [ 1015.331683][T13811] ? __kasan_check_read+0x11/0x20 [ 1015.336683][T13811] ? pmd_alloc+0x180/0x180 [ 1015.341074][T13811] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1015.346592][T13811] ? validate_mm_rb+0xa3/0xc0 [ 1015.351242][T13811] ? __vma_link_rb+0x275/0x370 [ 1015.355978][T13811] dup_mm+0xa67/0x1430 [ 1015.360027][T13811] ? vm_area_dup+0x170/0x170 [ 1015.364600][T13811] ? debug_mutex_init+0x2d/0x5a [ 1015.369426][T13811] copy_process+0x28b7/0x6b00 [ 1015.374086][T13811] ? _kstrtoul+0x170/0x170 [ 1015.378483][T13811] ? __cleanup_sighand+0x60/0x60 [ 1015.383497][T13811] ? __f_unlock_pos+0x19/0x20 [ 1015.388172][T13811] ? __kasan_check_read+0x11/0x20 [ 1015.393178][T13811] ? lock_downgrade+0x920/0x920 [ 1015.398016][T13811] ? vfs_write+0x34c/0x5d0 [ 1015.402420][T13811] _do_fork+0x146/0xfa0 [ 1015.406557][T13811] ? copy_init_mm+0x20/0x20 [ 1015.411037][T13811] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1015.416572][T13811] ? wait_for_completion+0x440/0x440 [ 1015.421849][T13811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.428071][T13811] __x64_sys_clone+0x18d/0x250 [ 1015.432824][T13811] ? ksys_write+0x1cf/0x290 [ 1015.437303][T13811] ? __ia32_sys_vfork+0xc0/0xc0 [ 1015.442133][T13811] ? trace_hardirqs_off_caller+0x65/0x230 [ 1015.447824][T13811] ? trace_hardirqs_on+0x67/0x240 [ 1015.452828][T13811] do_syscall_64+0xfd/0x6a0 [ 1015.457312][T13811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.463175][T13811] RIP: 0033:0x4598e9 20:06:10 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) sendmsg$unix(r2, &(0x7f0000003380)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000000140)="9381e944ee19a85c0aaf14641024fdd5028031efc94dbc5c962896cf2c06c866f7dab5e2bde864e386f875ec64bb8cb0ddbb3adb384be7689108d79f23b20ef3f03a1fabeb9fdca5ffec31e6de3823452dcce9e11efbcdc3bd62c4c76662ce0e9cf77a76f8fb7aa8090c098ddf55c5defd75c7fbebfcce40cb8b128c5a8d34871d3d4e2333248b3b6a94863c6efeb1c26eb6fbadaebf3f7866c2cab3405ef2c5d159a66c884e68c20fbb47059d352874429192573f26edba91895d5e4aabe490118a887f3d52282311f20f94679985dd009782c29f6532452076e45e5c9df4013057a70894424ddae2ee4509c2262a528defdcd6dbc76a0192ecf1fbb533ec29caddac1856285fd920cd13021ae24fb908f68ece89747f0be407d5fd97c8cedab93da7d684d07ebb56389765bcd37ecea123d5dd0f1687fe53e27c5a163011f02d07008f321afa6ce7a092c4523bb9c9ad4b1517cbe225aa042dd5c07ef8e892c9fd475ec34eed2ff1cb2a7b41e3ddfbcef2b13bcec668480629431c70eae1d2d6317c079e700e7e7c34527080d8585db717268fd7e6f4bd671386366a0a13400d482bb575dab9ab082d2047ed686f412da3aff31ad2d3600bf6cf3b076dae45714171093f9ee829b77c0f069827dd0627ee737665c475cd3f46a76c6c998e86c80835467d838942e19666fbf2c3606898c5a3bce99fc1d80873d4e20a36b2c377e2acaf65fa28b6f6ff8d995c9e2c8f5f75c209687192510f6047b9b3047e9ee54dd9de99c38bb6e2749bdac3e791a761f0812226ccb71aa7e4068268bfe307242460294e4bcbd81d040f54d212b6860b979f5b80bb81c64d55429eb58d2a4d4b96900331733f2f5a1991e5e57bceea12faec11ac7faa8358889b57810a4ad4d683d56e2332aaef417c16a7d8fd9bbf8d100cb55386d99f8754d476238fcb4898d6c2112eb38cf4aa98f9656f8e50410cf72949b1439e770eccf586aabb760c39a719a8ee947bdc6c1484ae91cd4bacbb393c5d060ddfb3b5ca086a93cdaffa437512a69bf0ffe062c583166a1e5cfd3dc3b6e306bdfbef04ac4aa759e58932c13f312b0a5161d0945078711732aaf4550a3aecd652b5b940545ed745412e3e19e8f4ff5b9094a3441ff4af5339e27e3567107843cc09ab2cc7d2f777b7e9c1fe09f8166474a79a08ededc9a8921271f700fb3cf1b84d5dc40fffc588bf3b8064b8b0f684e094a19461585d8004463243da651a78b07f23362f1629adb3558727b9d070e12a3b00bbefee572b00d9ebf7ac61e585ab30fdd1bdd62cd8e9eec9c78ea03ed04df2c03f1a1827b1dd587994aded8ef4535e91217f59775e5721193f5456ec979e728f433847366987b744ffeae3e76f57dd8106b030f49973a021dd3840dbce148b5be7083a8943eb2a66116905e98d8fae67f3e9fbee217e5e694568792cbebf68041d24f4370fc826b6d571324bfedeb16cc7638b80dec5781c35c714798abe7c6c36505af7ff2247562c8c5f59c3d15ed3eaec8b6149e1c0ab876bae8efccd0eea4293c2c5bbd8208186a2c6e1b5264cb00dddcff8ff5a558a53a4b061361a6f435d51a85c63b54e9af527c118681632a302dc1b0c61fea32b801cb8ffde03676198d10ada103e5ab777a9dcf73d9845e3e5c27256170f08fd0f58d5af3150834d02e112a93f8f70f96167ea20fa5214401682b8ceb4dc2aa30f25b01e013483b9abb2653ef32c4133142b65026c4222cb18de90c941b35c8dc8d459061a19461efe1d5808f235332d32e9ed9361a7b313afbc7f5e180f34c23dd47b349d1a8358ffed4e6a7d72c06b616fb22a6f5c3776d012aa9ef386d5605eef1921e079ba1e804b121d4e2a72335572241a86697132363ebaeec4ae1c8bcc3f33fa49c3b2c0996e02f67fa5dffe6f3d4fb44bf8bd13978c3a1baa440ae1c0b7ced13217f7e000864fe72baa4fab948e9086b3ebd4af97bc29ed9d92f36783ea271da9fcba76c3f68c6f45447dd9939195fccbe7af93286ac98192f90059c170bf406be4334ed0d28c1be92980fffe0b94c6687eae485d01a79b687a0fd4b2115e6e018ef3a9a16fdf38d2fa0e6d7d753f28cf8058b9e9c2dc13f248b469ede49c462da843ddbb0635bcca1a9e533929badfb24a1718dcd44a30f1e0fefabcd228bde15467f32dc8e3313b7188c9702b627087fbaca5d75964adc29e8bffbfb75c4ac9e2ec7aaf18491426aacad44b41d68979bdfbc1ceb140ac91ee4b4f6b964df22e11c5593a71c8fedaef152df5d128c08af72aa6a9955d2475de0f2567e8690e74b4fcda388bc34ae4d1fae052f303ccafe484be448c072dada3c78472a8071b4530580afff2b32910e4e820f4e243ebef07d0a5624e57d55006ef0445411f92c9dad2f226ea30845ab27a87fb87517467b795402ba0cb8b763fb4d4a3ae6ccbe0d7c10c9a065d0a50b71505fc7429c6853332f685bd7b413776258f8a36741d2c36e2f08af39cec524c002c12c9dcd9df738c28a02d5c4dcbd217aeab0ed8eb2f369819faee7e89bf62da5f62a6f3230ff5947e76e596980d651498ee214963a50bb557583d9757d903d19f2b24bac98cebad045940e28bc8823793a9a448f0a3bfdcf9de26ba32e1c51c7e39582aaf99e2247516bacfe00d0fb252027105c5da0e502a93f800da96354970941913d96bac2bccede32ab7d0ba3258cf6c14e3456a02050a56aa56571fd61cf696c28d84b7628f48bae178d82c70b45f27dc8daea1c769136545d77a30045e4194f66b8a87ee697e6106dac965933b3ec958848c5e9895c77a87f636c5ea4862333520b7b48759c8c4f4fb9d441e98f02391d2c240aaf5ec112cc185b44fb82020324005dcca0a5b54752ee652a6c19cd10a47be12c15cfb2c4846764bd216ba3fd54069de7ff51ba189e703cf378c70c015f4b1039e36ed561e69921cd3920d2e4a19e4fdc49e19345089a08e6cbf84c76ae871d0c9680b8ffcaca567d570bc6383fa3bbad8b8ce2856ac12dfbfd85161160b0301d6523df9eb0b5196d9227d64e18dc187b32883f7a5c27822350828f164ddbb5727dae537f750619b8e7d9aa6f58ea1412bd1b64a023b44a36e41b34489f19f4a109d0111b9bc67ed59658688e76685d84771fe7089bab589556b47aba26b20866226f442abebacc345e62e42950768101cdc21cfa83599fd4a5cf1694e7a500fbf864b7ced04e08664127b330e81da93e50c4444e67dc875b895fa40b2fc1ad7cef0f58bd8cfe061d9a149ee4671ff5352edfdc6b8be852b2075c4260ab6182beb1afb79acd99e18d533019a869b28e4f924f3699755dfb8ab5dc8824c7650c6ee4f91b520a2d6a1ba7f8861a1495bfef86a9668dcc77fbd15817f954eb331d3d4d2a64cb1160eed3f217f44842600977f4c38d492f870662ec843c7c8879876de0b651b4f7fc54ac2602de3baf1c9695c801bc7c2bfd2982e3721e296994d7d3a09f7707ce3006122a79addf423d3c4c02657d1f1c6cb19405bd68b4dc275d503db69ff4b20f0fff9ea855b850d174b534f091ef97ca5de1c15524326db726b152732cb2500546f1a41f3b3f7d331b29f07412cf4c630503bc43a58c1bc22a2fdf9728a1c60adcdd4fa29f1ac3c8309404c51fc66a235749c186aa273d2d097e91a6885bcef83707483a9f946c16a9f84b3deef74491dbdb1c556936d49dbd2dae635202b1d0a2f71cc7efbc251521ad14aa306e306f57c63575093a8605b1d5af497deae531351d3d0c154d6b892b1c9f0733034b5e5457ab0e29539362a9fcd6da2563d251544f93cf78de1ac845c15f73fb5a4f00e3209472797cb2cc193d2681017736727a709eb9aa5ddd254263508324e1c8fc3c03a7309b1e8f824a916fd2042dc435da53cbec0b8190f4928fd86d20fc1c442250822dbea3941653f263887006e5a18345bb6bb48d1c71c9d3ccc71350769a4c3b1cd857da5961e4250a018fbe85bb38ab5c14c21bf46956a13fc6afb44d1ea02381ca6cc5cccc3e52f358ffde813667a5acb5b00aadbe3ed730be911ba56eccecc65ecf77497d12a26cf2fccf355d082d02cf8641448dcc1df1f2b1c9df392c2c46c0c30f7dd29210ac7d57cd6c467cf1dad469705a8b4ae0b58ba509d347e33c698f6cc0beee37dcbc469200ad3ceba787b4a6831621b24c3c1d63aac1cddc1a2c1bf4304317373aca6ad5f587b92c8b192a8c9e1272abafe68d0ecdff3253c298980e9590ea528f8dc55e4642b7d02e2b9b88ed7e98fa4f64ed1b33b4da98b6d7f86883fb186283363a1228e860e0486350595db02aac2bf41ff49c041f3466b7d9952e11f4557a7343dee1908cbc76b4cab7aa0785ade69a7710ac1b475f4e68c4d9ae4341c98457dfbb51b35d1e3ecbe772bda741716353854897a8df18290ac0e81dc1c47f914a6d60e120fc6060fc019e4cba649703168fb239224a50b460a85b92137eadaba51a9477d4bc066bdee5db96d7ae66a6e5cc43c1e0b3804e7884fb96ad53f9dc874dd773f21a4f2b770913d8e768d6731a9b4de6a27907f7fce0eb8b20d34f50af9e10257b64c4f8d20bd8295574b45bd4fad91664ef7f520022551293d4585ae95477e3ff244f80deade56a1ebbf6e196c0c8a994a70f7b2c44ff1c501895d1199a50fd85191a2c8640d6735c40e9b20731946139cb9184badcdd1c29d967d2acf5973b1e8e8fd310623762435457a60d9825a7edcc8053a74fd9372c42271dc8aea4d4d1f59b1b3a64466a92e5c1a1f188dbc795e5ad906c8a8b16c3fb33e4ebc39c3e392c14d394bf5e048f9b983c685dcde78b6d377d4943dbe7ae9e999114a63e47f46ae5bcd932c4400b7a1fed6244dee19674ef98363baba853060169ffd5aac4f848692cf4289f9954dc2b3a8b28597ce2bef7158a36706d45fa0b4366076a7333aaa61ac783322008ece141436157ff5ea7910bb9a51b460be78550c93cc8355ce1d15a266992bf9ddec51dd69e5e4b3be260b9003b7e94585698b33828c165d6805e872fd2d8053e0254c1ee8d3512bb612346488a81298a937bb41cdd371c1a5656baaf477aff9ec5794e5fabc3866d6251286b2f07c84ca5e3e57b5bee785fbdfabbff203d57d026918c0ae3d259bf7abc731392f84183056907dc13b1c438863e00f0b5d84b41702737f4e06fa04d7d92dcad29ed6ff8d5061b70374f5e6437d3ec47f0fdd37d5c7524182552598f53b94e81a2d11781c50e77cd2da6923eb4b3bb8fa8e942f9d47964ef487d53a4107163fddc46516dc46d65a7fc098a69432fe31728833ad1ed0d21c328408cbd946f16c31325559ea698966be7d92cab65136fe1953be2f4728e7b2d0cfeb8f8ed2059ef11f0300397bb4c5bae0250557b1dd7b2240455fd3ec9a35e761f73eeee785b780b5df8d88d6304500eb2b087705a054210a3d69e3eef50aef5e39bfb89a866dd045a0ec3f72052a2c79fb2aaacf32fc64099168443977aa633f5832f5f292700ee4c8d7065f7bb165bd15762c9a732c3fa0654827cb770396074eb8fda0af8edddd20214a942c43d8c1b7e2edd40b34ee48c20b4508b03a3a5ef2d2af48b8b3c11381a25947a3dc2bd0a344f2a7ee3b2c81d73fd4377000098e54c77ec4510361acfbd4e3db955388b76b67fc8e416234bd0d5fcf5f0c5c365d394e7a0b07936f31021c96b8e11d7f17044f7a3513849875330dfbe940aeb3ac97f918b0d499b9d4d9ef905dc8e50d7d1f6f1520a14727ebb551c3ed23674b52af50f4c80981e3", 0x1000}, {&(0x7f0000001140)="ff8723fbab8f9531e94f94fdeba3b66e5c9dea675b7fe0168188c13aa6d66afce239fb88d772b408ddce3ded07fb3e7ed890506e10112cb950b66035b44d4e16d2d06cfa377a9cc037de658f9d8f37a8fd537e6485b6e9cb8960fefbd451390e80e20d44d608c8f31e684ba3068cd60c78df79270010288e07ff5bbd246bcd8c69835f66f922e4edb15b08abb69791840c71075219516b9aefb9d9276ab099079665b4313b", 0xa5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="9e7d3d37a00cc42f5f0441c564ae54684dbada03019598e65fa6cc934158314a5a12fff3b1870fd61a866e48b327e7e4781e029b695187bad96a2bdc73756a7c5628ef12503ff5ecf4273e091054bc480ccae0e3fe768a19f7dab0ac671a858e2392acb8234806965b28c07e936141fc211dc1b14498dbae439578ea4d7e123a42718ac7d205039ee48678", 0x8b}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000080)="62a49bdc935efec0ff2bd3c06dcb1fd83e1359167a3165ff911cf880ef59405cdc11cbe3dba18793e52df273e61dee8eb538013c6b12ea5b6d98a9f7ebf93a5241325120ce8afe", 0x47}], 0x6, &(0x7f0000003340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x18, 0x518b6}, 0x40080) [ 1015.467058][T13811] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.486647][T13811] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.495040][T13811] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1015.502985][T13811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1015.510940][T13811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.518884][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1015.526912][T13811] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:10 executing program 3 (fault-call:2 fault-nth:63): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00') [ 1015.568448][T13805] input: syz1 as /devices/virtual/input/input538 20:06:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000200)=""/4096) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x3afbcedfd0f158bb, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x35, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) 20:06:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty={[0x0, 0x12000000]}}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = dup3(r4, 0xffffffffffffffff, 0x80000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r5}}, 0x18) r6 = getpid() ioprio_get$pid(0x2, r6) [ 1015.711550][T13823] FAULT_INJECTION: forcing a failure. [ 1015.711550][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.796500][T13863] input: syz1 as /devices/virtual/input/input539 [ 1015.803512][T13823] CPU: 0 PID: 13823 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1015.810974][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1015.810979][T13823] Call Trace: [ 1015.811000][T13823] dump_stack+0x172/0x1f0 [ 1015.811020][T13823] should_fail.cold+0xa/0x15 [ 1015.811038][T13823] ? fault_create_debugfs_attr+0x180/0x180 [ 1015.811053][T13823] ? page_to_nid.part.0+0x20/0x20 [ 1015.811067][T13823] ? ___might_sleep+0x163/0x280 [ 1015.811084][T13823] __should_failslab+0x121/0x190 [ 1015.811101][T13823] should_failslab+0x9/0x14 [ 1015.811113][T13823] kmem_cache_alloc+0x2aa/0x710 [ 1015.811132][T13823] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1015.824446][T13823] ? __vm_enough_memory+0x17e/0x3a0 [ 1015.824466][T13823] vm_area_dup+0x21/0x170 [ 1015.833362][T13823] dup_mm+0x549/0x1430 [ 1015.833384][T13823] ? vm_area_dup+0x170/0x170 [ 1015.844171][T13823] ? debug_mutex_init+0x2d/0x5a [ 1015.844187][T13823] copy_process+0x28b7/0x6b00 [ 1015.844205][T13823] ? _kstrtoul+0x170/0x170 [ 1015.853953][T13823] ? __cleanup_sighand+0x60/0x60 [ 1015.853965][T13823] ? __f_unlock_pos+0x19/0x20 [ 1015.853983][T13823] ? __kasan_check_read+0x11/0x20 [ 1015.863377][T13823] ? lock_downgrade+0x920/0x920 [ 1015.863396][T13823] ? vfs_write+0x34c/0x5d0 [ 1015.874269][T13823] _do_fork+0x146/0xfa0 [ 1015.874287][T13823] ? copy_init_mm+0x20/0x20 [ 1015.910670][T13823] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1015.910688][T13823] ? wait_for_completion+0x440/0x440 [ 1015.933540][T13823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1015.950540][T13823] __x64_sys_clone+0x18d/0x250 [ 1015.950557][T13823] ? ksys_write+0x1cf/0x290 [ 1015.959772][T13823] ? __ia32_sys_vfork+0xc0/0xc0 [ 1015.959791][T13823] ? trace_hardirqs_off_caller+0x65/0x230 [ 1015.970745][T13823] ? trace_hardirqs_on+0x67/0x240 [ 1015.975779][T13823] do_syscall_64+0xfd/0x6a0 [ 1015.980291][T13823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1015.986201][T13823] RIP: 0033:0x4598e9 [ 1015.990087][T13823] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1015.990094][T13823] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1015.990111][T13823] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1016.018223][T13823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.034120][T13823] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x02\x00'/70) 20:06:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x74, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1f, 0x84881) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1016.034128][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1016.034140][T13823] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:11 executing program 3 (fault-call:2 fault-nth:64): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1016.125833][T13863] input: syz1 as /devices/virtual/input/input540 20:06:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = gettid() ptrace$poke(0x4, r1, &(0x7f0000000000), 0x5e78) r2 = getpid() ioprio_get$pid(0x2, r2) 20:06:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x100, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x100, 0x8}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1016.216639][T14005] FAULT_INJECTION: forcing a failure. [ 1016.216639][T14005] name failslab, interval 1, probability 0, space 0, times 0 20:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00?\x00'/70) [ 1016.309408][T14005] CPU: 0 PID: 14005 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1016.316897][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.326949][T14005] Call Trace: [ 1016.326970][T14005] dump_stack+0x172/0x1f0 [ 1016.326996][T14005] should_fail.cold+0xa/0x15 [ 1016.339164][T14005] ? fault_create_debugfs_attr+0x180/0x180 [ 1016.344972][T14005] ? percpu_ref_put_many+0x94/0x190 [ 1016.344985][T14005] ? __kasan_check_read+0x11/0x20 [ 1016.345005][T14005] __should_failslab+0x121/0x190 [ 1016.360117][T14005] should_failslab+0x9/0x14 [ 1016.360130][T14005] kmem_cache_alloc+0x47/0x710 [ 1016.360148][T14005] anon_vma_clone+0xde/0x480 [ 1016.360166][T14005] anon_vma_fork+0x8f/0x4a0 [ 1016.373969][T14005] ? dup_userfaultfd+0x15e/0x6d0 [ 1016.383391][T14005] ? memcpy+0x46/0x50 [ 1016.387382][T14005] dup_mm+0xa47/0x1430 [ 1016.388582][T14066] input: syz1 as /devices/virtual/input/input541 [ 1016.391479][T14005] ? vm_area_dup+0x170/0x170 [ 1016.391496][T14005] ? debug_mutex_init+0x2d/0x5a [ 1016.391513][T14005] copy_process+0x28b7/0x6b00 [ 1016.402385][T14005] ? _kstrtoul+0x170/0x170 [ 1016.402406][T14005] ? __cleanup_sighand+0x60/0x60 [ 1016.421188][T14005] ? __f_unlock_pos+0x19/0x20 [ 1016.421204][T14005] ? __kasan_check_read+0x11/0x20 [ 1016.421222][T14005] ? lock_downgrade+0x920/0x920 [ 1016.421239][T14005] ? vfs_write+0x34c/0x5d0 [ 1016.435728][T14005] _do_fork+0x146/0xfa0 [ 1016.435744][T14005] ? copy_init_mm+0x20/0x20 [ 1016.435756][T14005] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1016.435771][T14005] ? wait_for_completion+0x440/0x440 [ 1016.459580][T14005] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1016.465816][T14005] __x64_sys_clone+0x18d/0x250 [ 1016.465829][T14005] ? ksys_write+0x1cf/0x290 [ 1016.465846][T14005] ? __ia32_sys_vfork+0xc0/0xc0 [ 1016.475073][T14005] ? trace_hardirqs_off_caller+0x65/0x230 [ 1016.475084][T14005] ? trace_hardirqs_on+0x67/0x240 [ 1016.475104][T14005] do_syscall_64+0xfd/0x6a0 [ 1016.485625][T14005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1016.485635][T14005] RIP: 0033:0x4598e9 [ 1016.485652][T14005] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1016.495132][T14005] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1016.495146][T14005] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1016.495153][T14005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1016.495169][T14005] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:06:11 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00@\x00'/70) 20:06:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x10\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1016.533266][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1016.533274][T14005] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000140)="11dcbd0d6f70992a0d5c00000000000000000000007a9854271fc5cd2c174f16295f5d1f0ca5c61bc1d3a7fca7d26065abd5b228071d3eb18e887d5e4550889830d0db62f4c5a67fa4d571407c2e517e76f7bf8c3b99b4d9269730ff537b7fe1fc2252f373a3f3189c19698aabb0937d773ab2fdf962e7ce5a11a592fd3d378cbbec67d49e75bc6c9c8ed531ed4ddef911f1909957f8c81f1f4b088bab97cd1102cea384a03f59684bea574ba461ac53258b0eaddb285f47e4") getpid() [ 1016.603311][T14066] input: syz1 as /devices/virtual/input/input542 20:06:11 executing program 3 (fault-call:2 fault-nth:65): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000001, &(0x7f0000000440)="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") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r7, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', r7}) 20:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x8001, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) [ 1016.779342][T14138] FAULT_INJECTION: forcing a failure. [ 1016.779342][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.858058][T14204] input: syz1 as /devices/virtual/input/input543 [ 1016.889019][T14138] CPU: 1 PID: 14138 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1016.896498][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.906549][T14138] Call Trace: [ 1016.906571][T14138] dump_stack+0x172/0x1f0 [ 1016.906597][T14138] should_fail.cold+0xa/0x15 [ 1016.918767][T14138] ? __rb_insert_augmented+0x20c/0xd90 [ 1016.924234][T14138] ? fault_create_debugfs_attr+0x180/0x180 [ 1016.930046][T14138] ? page_to_nid.part.0+0x20/0x20 [ 1016.935076][T14138] ? ___might_sleep+0x163/0x280 [ 1016.939929][T14138] __should_failslab+0x121/0x190 [ 1016.939945][T14138] should_failslab+0x9/0x14 [ 1016.939961][T14138] kmem_cache_alloc+0x2aa/0x710 [ 1016.949362][T14138] ? anon_vma_clone+0x320/0x480 [ 1016.949378][T14138] anon_vma_fork+0xfc/0x4a0 [ 1016.949394][T14138] ? dup_userfaultfd+0x15e/0x6d0 [ 1016.949405][T14138] ? memcpy+0x46/0x50 [ 1016.949423][T14138] dup_mm+0xa47/0x1430 [ 1016.976498][T14138] ? vm_area_dup+0x170/0x170 [ 1016.981092][T14138] ? debug_mutex_init+0x2d/0x5a [ 1016.985947][T14138] copy_process+0x28b7/0x6b00 [ 1016.990621][T14138] ? _kstrtoul+0x170/0x170 [ 1016.990643][T14138] ? __cleanup_sighand+0x60/0x60 [ 1016.990657][T14138] ? __f_unlock_pos+0x19/0x20 [ 1016.990670][T14138] ? __kasan_check_read+0x11/0x20 [ 1016.990685][T14138] ? lock_downgrade+0x920/0x920 [ 1016.990704][T14138] ? vfs_write+0x34c/0x5d0 [ 1017.000019][T14138] _do_fork+0x146/0xfa0 [ 1017.000033][T14138] ? copy_init_mm+0x20/0x20 [ 1017.000046][T14138] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1017.000059][T14138] ? wait_for_completion+0x440/0x440 [ 1017.000077][T14138] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1017.000090][T14138] __x64_sys_clone+0x18d/0x250 [ 1017.000107][T14138] ? ksys_write+0x1cf/0x290 [ 1017.023120][T14138] ? __ia32_sys_vfork+0xc0/0xc0 20:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00') [ 1017.023145][T14138] ? trace_hardirqs_off_caller+0x65/0x230 [ 1017.044638][T14138] ? trace_hardirqs_on+0x67/0x240 [ 1017.044658][T14138] do_syscall_64+0xfd/0x6a0 [ 1017.053886][T14138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.053902][T14138] RIP: 0033:0x4598e9 [ 1017.064429][T14138] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:06:12 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fcntl$setpipe(r2, 0x407, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x32, 0x0, @thr={&(0x7f0000000000)="fe734203797eaef3efd88384687b375d3e0d02072e2893c955514952edad2d7ec41758391fec3adee32315e626973780502b150e29e137c0c174cbcf86099fd44e07df4560c73eeb109df13fabe433482c13b262467f3b726666b211f2e35f4104af52b0aa63400fa71a09d6ea4c8129718dde9c20d4eeb3941c11df86b38521ce689c668e06b6544cc6149073", &(0x7f0000000200)="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"}}, &(0x7f0000001200)=0x0) timer_getoverrun(r3) [ 1017.064437][T14138] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1017.064454][T14138] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1017.079798][T14138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.079805][T14138] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1017.079811][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1017.079817][T14138] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:12 executing program 3 (fault-call:2 fault-nth:66): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x900200, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x0, 0x661}) ioprio_get$pid(0x2, r1) [ 1017.204336][T14220] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1017.238223][T14204] input: syz1 as /devices/virtual/input/input544 20:06:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7ff, 0x80000) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:12 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1017.364130][T14331] FAULT_INJECTION: forcing a failure. [ 1017.364130][T14331] name failslab, interval 1, probability 0, space 0, times 0 20:06:12 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)=@hopopts={0x2c, 0x18, [], [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @calipso={0x7, 0x10, {0x200, 0x2, 0x2894, 0x5, [0x1]}}, @jumbo={0xc2, 0x4, 0x76}, @hao={0xc9, 0x10, @mcast1}, @generic={0x0, 0x80, "a06f1a9413dee9a786a1ba295bc30438f814cad576b5aea2166b7de6da4d4ebf1fc22fcb07e2679372bf8e080fd88c16f747b8892c7ae15c6bce9f639884f7363c6438dd1d98e918e32515f486ef1b58a06fcf55eb5da7b223ca40b0b637af1e8c64527e0e6b320d076de7c5b8681d5612be92f939e928b9f319b44bd48eae70"}]}, 0xd0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e, 0x100800) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff}) write$FUSE_OPEN(r4, &(0x7f0000000340)={0x20, 0x2f, 0x8, {0x0, 0x1}}, 0x20) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'mime_type)vboxnet0*proc/'}, {0x20, '\'selinux&{eth0,'}], 0xa, "4a3ca97c8c14b2a5ebedc9bf178c0ca925a7f7b68d54f0eefd6c7173adbb55c0bd6891133e4ad9d6318fb2012f3ccf6314b56197ca9ad142a6e8c8140de4bbc43fc1aa2edf7dfec19de30a0b7634f4147a119f5b43f98b40c977550e90efc83d63f38e8a9d7a95b724a83abea290200942ab61a07fc6db82d1e8bee0d08c5b8528a6b539a199ab5a3ec6408221028c3b9fe230dbb7add68664f9df10087556118c5b0f52d3354fe1eed427847cf17c9a52c379aa4167d3"}, 0xeb) [ 1017.473660][T14331] CPU: 1 PID: 14331 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1017.481168][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.491220][T14331] Call Trace: [ 1017.494518][T14331] dump_stack+0x172/0x1f0 [ 1017.498858][T14331] should_fail.cold+0xa/0x15 [ 1017.503456][T14331] ? fault_create_debugfs_attr+0x180/0x180 [ 1017.509260][T14331] ? page_to_nid.part.0+0x20/0x20 [ 1017.514286][T14331] ? ___might_sleep+0x163/0x280 [ 1017.519141][T14331] __should_failslab+0x121/0x190 [ 1017.524075][T14331] should_failslab+0x9/0x14 [ 1017.524087][T14331] kmem_cache_alloc+0x2aa/0x710 [ 1017.524106][T14331] ? anon_vma_clone+0x320/0x480 [ 1017.528626][T14346] input: syz1 as /devices/virtual/input/input545 [ 1017.533427][T14331] anon_vma_fork+0x1ea/0x4a0 [ 1017.533443][T14331] ? dup_userfaultfd+0x15e/0x6d0 [ 1017.533461][T14331] dup_mm+0xa47/0x1430 [ 1017.533479][T14331] ? vm_area_dup+0x170/0x170 [ 1017.533494][T14331] ? debug_mutex_init+0x2d/0x5a [ 1017.533509][T14331] copy_process+0x28b7/0x6b00 [ 1017.533526][T14331] ? _kstrtoul+0x170/0x170 [ 1017.567608][T14331] ? __cleanup_sighand+0x60/0x60 [ 1017.567620][T14331] ? __f_unlock_pos+0x19/0x20 [ 1017.567637][T14331] ? __kasan_check_read+0x11/0x20 [ 1017.591301][T14331] ? lock_downgrade+0x920/0x920 [ 1017.591314][T14331] ? vfs_write+0x34c/0x5d0 [ 1017.591333][T14331] _do_fork+0x146/0xfa0 [ 1017.604691][T14331] ? copy_init_mm+0x20/0x20 [ 1017.604705][T14331] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1017.604721][T14331] ? wait_for_completion+0x440/0x440 [ 1017.614734][T14331] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1017.626241][T14331] __x64_sys_clone+0x18d/0x250 [ 1017.631010][T14331] ? ksys_write+0x1cf/0x290 [ 1017.635516][T14331] ? __ia32_sys_vfork+0xc0/0xc0 [ 1017.640398][T14331] ? trace_hardirqs_off_caller+0x65/0x230 [ 1017.646197][T14331] ? trace_hardirqs_on+0x67/0x240 [ 1017.651213][T14331] do_syscall_64+0xfd/0x6a0 [ 1017.651230][T14331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1017.651239][T14331] RIP: 0033:0x4598e9 20:06:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000140)="0bcf6c7bf07079ff729228d53f79e7caa12c973b919f1b0b3c03edc2f99558de4ec8f676cefe049bea0ecfa7bd490b188de4ed02f16a2183cc34e542c06a962594582cea2ee821260c118f6e422dd9b299d5c3057d2615b7f024d0748fb9e98fb3b2ca20cbf78f5321858e6807818fc23b166861e55f2c7b469423e1f18c20000000f27fd8061b20e0cb747b858e85d4e55dbd511bc275fcc69321b98bf771cdda80de5f2904ffb741f646b7075d8488103754873e2ec8f144d8b41e7ed6feeace11f05670d1e42ef675c510315b525153fb3f09242a01254c9f98c68937922796c7c20e88fe3a644d57c420f4b57f63a0") r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='*\x00', 0xffffffffffffffff}, 0x30) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) ioprio_get$pid(0x2, r1) 20:06:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000300)={'yam0\x00', 0x5, 0xfffffffffffffffc}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = getpid() ioprio_get$pid(0x2, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x8ff766f8c1a07b7, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44804}, 0x401a0e0) [ 1017.651252][T14331] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1017.651258][T14331] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1017.651275][T14331] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1017.685091][T14331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.685098][T14331] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1017.685106][T14331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1017.685113][T14331] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:13 executing program 3 (fault-call:2 fault-nth:67): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x10\x10\x00\x00\x00\x00\x00') 20:06:13 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:13 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+', 0x3}, 0xfffffffffffffe00, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") preadv(0xffffffffffffffff, &(0x7f0000000000), 0x22, 0x36) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x44}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000580)=0xe8) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r16, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@remote, @initdev, 0x0}, &(0x7f0000000600)=0xc) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r22, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r22, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) r23 = socket$nl_route(0x10, 0x3, 0x0) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r27}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r27, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r27, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r33}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r33, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000900)={@remote, 0x0}, &(0x7f0000000940)=0x14) r35 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r35, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$inet_pktinfo(r35, 0x0, 0x8, &(0x7f0000000980)={0x0, @empty, @empty}, &(0x7f00000009c0)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000f00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x4a8, r6, 0x414, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x37d}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r16}, {0x218, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r28}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r33}, {0xb0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x70}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r34}}}]}}, {{0x8, 0x1, r36}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5f}}, {0x8}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x400}, 0x0) r37 = getpid() r38 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r38, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") fstat(r38, &(0x7f0000000140)) ioprio_get$pid(0x2, r37) [ 1017.913145][T14471] FAULT_INJECTION: forcing a failure. [ 1017.913145][T14471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.952766][T14346] input: syz1 as /devices/virtual/input/input546 20:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00') 20:06:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$TCSBRKP(r0, 0x5425, 0x3ff) r1 = socket$inet6(0xa, 0x0, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) capget(&(0x7f0000000200)={0x0, r3}, &(0x7f0000000240)={0x9a, 0x6c, 0x1ba20914, 0x3, 0x0, 0x6}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x8, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380)=0x9, 0xa700a310df3340f8) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xff, 0x2) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000080), &(0x7f0000000280)=0x4) [ 1017.984101][T14471] CPU: 1 PID: 14471 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1017.991572][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.991578][T14471] Call Trace: [ 1017.991598][T14471] dump_stack+0x172/0x1f0 [ 1017.991619][T14471] should_fail.cold+0xa/0x15 [ 1017.991636][T14471] ? fault_create_debugfs_attr+0x180/0x180 [ 1017.991655][T14471] ? ___might_sleep+0x163/0x280 [ 1017.991674][T14471] should_fail_alloc_page+0x50/0x60 [ 1017.991686][T14471] __alloc_pages_nodemask+0x1a1/0x900 [ 1017.991701][T14471] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1017.991718][T14471] ? anon_vma_clone+0xde/0x480 [ 1018.046635][T14471] ? save_stack+0x5c/0x90 [ 1018.046651][T14471] ? save_stack+0x23/0x90 [ 1018.055267][T14471] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1018.055283][T14471] ? kasan_slab_alloc+0xf/0x20 [ 1018.065909][T14471] ? kmem_cache_alloc+0x121/0x710 [ 1018.070927][T14471] ? anon_vma_fork+0x1ea/0x4a0 [ 1018.070944][T14471] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1018.070961][T14471] alloc_pages_current+0x107/0x210 [ 1018.070973][T14471] ? _do_fork+0x146/0xfa0 [ 1018.070984][T14471] get_zeroed_page+0x14/0x50 [ 1018.071001][T14471] __pud_alloc+0x3b/0x250 [ 1018.087064][T14471] pud_alloc+0xde/0x150 [ 1018.104393][T14471] copy_page_range+0x37a/0x1ee0 [ 1018.109232][T14471] ? mark_held_locks+0xf0/0xf0 [ 1018.109248][T14471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.109265][T14471] ? __kasan_check_read+0x11/0x20 [ 1018.109280][T14471] ? lock_downgrade+0x920/0x920 [ 1018.109298][T14471] ? vma_compute_subtree_gap+0x158/0x230 [ 1018.125260][T14471] ? pmd_alloc+0x180/0x180 [ 1018.125273][T14471] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1018.125290][T14471] ? validate_mm_rb+0xa3/0xc0 [ 1018.135752][T14471] ? __vma_link_rb+0x275/0x370 [ 1018.135773][T14471] dup_mm+0xa67/0x1430 [ 1018.150361][T14471] ? vm_area_dup+0x170/0x170 [ 1018.150378][T14471] ? debug_mutex_init+0x2d/0x5a [ 1018.150394][T14471] copy_process+0x28b7/0x6b00 [ 1018.150405][T14471] ? _kstrtoul+0x170/0x170 [ 1018.150427][T14471] ? __cleanup_sighand+0x60/0x60 [ 1018.173269][T14471] ? __f_unlock_pos+0x19/0x20 [ 1018.173284][T14471] ? __kasan_check_read+0x11/0x20 [ 1018.173304][T14471] ? lock_downgrade+0x920/0x920 [ 1018.197092][T14471] ? vfs_write+0x34c/0x5d0 [ 1018.197111][T14471] _do_fork+0x146/0xfa0 [ 1018.205646][T14471] ? copy_init_mm+0x20/0x20 [ 1018.210146][T14471] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1018.215694][T14471] ? wait_for_completion+0x440/0x440 [ 1018.220992][T14471] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1018.227230][T14471] __x64_sys_clone+0x18d/0x250 [ 1018.227242][T14471] ? ksys_write+0x1cf/0x290 [ 1018.227259][T14471] ? __ia32_sys_vfork+0xc0/0xc0 [ 1018.241328][T14471] ? trace_hardirqs_off_caller+0x65/0x230 [ 1018.241341][T14471] ? trace_hardirqs_on+0x67/0x240 [ 1018.241359][T14471] do_syscall_64+0xfd/0x6a0 [ 1018.241377][T14471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.241387][T14471] RIP: 0033:0x4598e9 [ 1018.241401][T14471] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.241413][T14471] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1018.252107][T14471] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1018.252114][T14471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1018.252126][T14471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1018.262466][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1018.262474][T14471] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:13 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:13 executing program 3 (fault-call:2 fault-nth:68): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00') 20:06:13 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101080, 0x0) clone(0x1000, &(0x7f0000000200)="dbad314e312639c7b3580325b6c2edbd980e24a795993190055e9f25d7a4310d677877c5e20245a0ac8927c445ff504aa968443a0a2203c4242b908bd0e6f1cbd63f04671ffc6fe6fb8453b61e79af2f0f2e89a5c1b48f53f2f3fee3637a6b3744a2f94c18863d5f2a398af62551ea703a8b9e072ac1147676fcdb3f15de6176ba74202caba47072a3378404c5fbd7063fe36ed5b9134fd2250e554befda7a7cf892ddc63c232b85bf06aab42d2c3675b2e8243f14b6626b2f55b517d17bf4d96c031b3fd5c38fc3b7", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)="e9a321c1c85401d8899b09ec9cf267339c0e8fb70ae50ea3f2b201362d77bf3bdf72eef50d8d6b4693804240daf1f450fb10d7a106e552f0aec2e78032a2adb2f45c017e273c72") write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) recvfrom(r1, &(0x7f0000000380)=""/86, 0x56, 0x40000000, &(0x7f0000000400)=@llc={0x1a, 0x201, 0x6, 0x1, 0x3, 0x1f2c}, 0x80) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1018.450046][T14604] FAULT_INJECTION: forcing a failure. [ 1018.450046][T14604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1018.508038][T14604] CPU: 0 PID: 14604 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1018.515516][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.515522][T14604] Call Trace: [ 1018.515549][T14604] dump_stack+0x172/0x1f0 [ 1018.528881][T14604] should_fail.cold+0xa/0x15 [ 1018.528897][T14604] ? fault_create_debugfs_attr+0x180/0x180 [ 1018.528916][T14604] ? ___might_sleep+0x163/0x280 [ 1018.543614][T14604] should_fail_alloc_page+0x50/0x60 [ 1018.543633][T14604] __alloc_pages_nodemask+0x1a1/0x900 [ 1018.553635][T14604] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1018.553657][T14604] ? lock_downgrade+0x920/0x920 [ 1018.564722][T14604] ? rwlock_bug.part.0+0x90/0x90 [ 1018.564745][T14604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1018.574489][T14604] alloc_pages_current+0x107/0x210 [ 1018.574501][T14604] ? do_raw_spin_unlock+0x57/0x270 [ 1018.574519][T14604] __pmd_alloc+0x41/0x460 [ 1018.590915][T14604] ? pmd_val+0x100/0x100 [ 1018.599434][T14604] pmd_alloc+0x10c/0x180 [ 1018.599448][T14604] copy_page_range+0x610/0x1ee0 [ 1018.599469][T14604] ? mark_held_locks+0xf0/0xf0 [ 1018.613254][T14604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1018.613272][T14604] ? __kasan_check_read+0x11/0x20 [ 1018.620389][T14606] input: syz1 as /devices/virtual/input/input547 [ 1018.624500][T14604] ? pmd_alloc+0x180/0x180 [ 1018.624520][T14604] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1018.635219][T14604] ? validate_mm_rb+0xa3/0xc0 [ 1018.635238][T14604] ? __vma_link_rb+0x275/0x370 [ 1018.645503][T14604] dup_mm+0xa67/0x1430 [ 1018.645526][T14604] ? vm_area_dup+0x170/0x170 [ 1018.654325][T14604] ? debug_mutex_init+0x2d/0x5a [ 1018.654346][T14604] copy_process+0x28b7/0x6b00 [ 1018.663739][T14604] ? _kstrtoul+0x170/0x170 [ 1018.663758][T14604] ? __cleanup_sighand+0x60/0x60 [ 1018.663778][T14604] ? __f_unlock_pos+0x19/0x20 [ 1018.672816][T14604] ? __kasan_check_read+0x11/0x20 [ 1018.672836][T14604] ? lock_downgrade+0x920/0x920 [ 1018.672853][T14604] ? vfs_write+0x34c/0x5d0 [ 1018.682424][T14604] _do_fork+0x146/0xfa0 [ 1018.682440][T14604] ? copy_init_mm+0x20/0x20 [ 1018.682452][T14604] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1018.682467][T14604] ? wait_for_completion+0x440/0x440 [ 1018.692308][T14604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1018.692324][T14604] __x64_sys_clone+0x18d/0x250 [ 1018.692342][T14604] ? ksys_write+0x1cf/0x290 [ 1018.700944][T14604] ? __ia32_sys_vfork+0xc0/0xc0 [ 1018.700960][T14604] ? trace_hardirqs_off_caller+0x65/0x230 [ 1018.700971][T14604] ? trace_hardirqs_on+0x67/0x240 [ 1018.700990][T14604] do_syscall_64+0xfd/0x6a0 [ 1018.710987][T14604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1018.710997][T14604] RIP: 0033:0x4598e9 [ 1018.711015][T14604] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1018.722485][T14604] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1018.722497][T14604] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1018.722505][T14604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:06:14 executing program 3 (fault-call:2 fault-nth:69): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:14 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1018.722511][T14604] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1018.722519][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1018.722525][T14604] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00') 20:06:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00/\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1018.987338][T14727] FAULT_INJECTION: forcing a failure. [ 1018.987338][T14727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1019.004529][T14727] CPU: 1 PID: 14727 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1019.012001][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.012008][T14727] Call Trace: [ 1019.012027][T14727] dump_stack+0x172/0x1f0 [ 1019.012049][T14727] should_fail.cold+0xa/0x15 [ 1019.012065][T14727] ? fault_create_debugfs_attr+0x180/0x180 [ 1019.012082][T14727] ? ___might_sleep+0x163/0x280 [ 1019.012101][T14727] should_fail_alloc_page+0x50/0x60 [ 1019.012114][T14727] __alloc_pages_nodemask+0x1a1/0x900 [ 1019.012134][T14727] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1019.025458][T14727] ? lock_downgrade+0x920/0x920 [ 1019.025470][T14727] ? rwlock_bug.part.0+0x90/0x90 [ 1019.025491][T14727] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1019.034377][T14727] alloc_pages_current+0x107/0x210 [ 1019.034392][T14727] ? do_raw_spin_unlock+0x57/0x270 [ 1019.034411][T14727] __pmd_alloc+0x41/0x460 [ 1019.045024][T14727] ? pmd_val+0x100/0x100 [ 1019.045040][T14727] pmd_alloc+0x10c/0x180 [ 1019.045058][T14727] copy_page_range+0x610/0x1ee0 [ 1019.050602][T14731] input: syz1 as /devices/virtual/input/input549 [ 1019.055577][T14727] ? mark_held_locks+0xf0/0xf0 [ 1019.055592][T14727] ? __kasan_check_write+0x14/0x20 [ 1019.055609][T14727] ? __kasan_check_read+0x11/0x20 [ 1019.066131][T14727] ? pmd_alloc+0x180/0x180 [ 1019.066146][T14727] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1019.066164][T14727] ? validate_mm_rb+0xa3/0xc0 [ 1019.077300][T14727] ? __vma_link_rb+0x275/0x370 [ 1019.077318][T14727] dup_mm+0xa67/0x1430 [ 1019.077338][T14727] ? vm_area_dup+0x170/0x170 [ 1019.087503][T14727] ? debug_mutex_init+0x2d/0x5a [ 1019.087520][T14727] copy_process+0x28b7/0x6b00 [ 1019.087533][T14727] ? _kstrtoul+0x170/0x170 [ 1019.087553][T14727] ? __cleanup_sighand+0x60/0x60 [ 1019.105131][T14727] ? __f_unlock_pos+0x19/0x20 [ 1019.105144][T14727] ? __kasan_check_read+0x11/0x20 [ 1019.105169][T14727] ? lock_downgrade+0x920/0x920 [ 1019.116213][T14727] ? vfs_write+0x34c/0x5d0 [ 1019.116230][T14727] _do_fork+0x146/0xfa0 [ 1019.116247][T14727] ? copy_init_mm+0x20/0x20 [ 1019.126330][T14727] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1019.126346][T14727] ? wait_for_completion+0x440/0x440 [ 1019.126368][T14727] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1019.136286][T14727] __x64_sys_clone+0x18d/0x250 [ 1019.136302][T14727] ? ksys_write+0x1cf/0x290 [ 1019.136320][T14727] ? __ia32_sys_vfork+0xc0/0xc0 [ 1019.196178][T14727] ? trace_hardirqs_off_caller+0x65/0x230 [ 1019.206178][T14727] ? trace_hardirqs_on+0x67/0x240 [ 1019.206200][T14727] do_syscall_64+0xfd/0x6a0 [ 1019.247157][T14727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.253096][T14727] RIP: 0033:0x4598e9 [ 1019.256987][T14727] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.276592][T14727] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 20:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00') 20:06:14 executing program 4: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x5, 0x2000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) set_tid_address(&(0x7f0000000000)) 20:06:14 executing program 3 (fault-call:2 fault-nth:70): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1019.284977][T14727] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1019.292923][T14727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.300885][T14727] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1019.308843][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1019.316814][T14727] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:14 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1019.377046][T14731] input: syz1 as /devices/virtual/input/input550 [ 1019.383305][T14840] FAULT_INJECTION: forcing a failure. [ 1019.383305][T14840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1019.453844][T14840] CPU: 1 PID: 14840 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1019.461323][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.471379][T14840] Call Trace: [ 1019.477367][T14840] dump_stack+0x172/0x1f0 [ 1019.481713][T14840] should_fail.cold+0xa/0x15 [ 1019.486318][T14840] ? fault_create_debugfs_attr+0x180/0x180 [ 1019.492128][T14840] ? ___might_sleep+0x163/0x280 [ 1019.496997][T14840] should_fail_alloc_page+0x50/0x60 20:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00') 20:06:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x581002, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0x0, {0xfff, 0x8, 0x1000, 0x3ff, 0x7, 0x7}}) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1019.502206][T14840] __alloc_pages_nodemask+0x1a1/0x900 [ 1019.507577][T14840] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1019.513287][T14840] ? anon_vma_clone+0xde/0x480 [ 1019.513302][T14840] ? save_stack+0x5c/0x90 [ 1019.513312][T14840] ? save_stack+0x23/0x90 [ 1019.513324][T14840] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1019.513340][T14840] ? kasan_slab_alloc+0xf/0x20 [ 1019.537684][T14840] ? kmem_cache_alloc+0x121/0x710 [ 1019.542701][T14840] ? anon_vma_fork+0x1ea/0x4a0 [ 1019.547465][T14840] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1019.553707][T14840] alloc_pages_current+0x107/0x210 [ 1019.558823][T14840] ? _do_fork+0x146/0xfa0 [ 1019.563152][T14840] get_zeroed_page+0x14/0x50 [ 1019.567727][T14840] __pud_alloc+0x3b/0x250 [ 1019.572057][T14840] pud_alloc+0xde/0x150 [ 1019.576205][T14840] copy_page_range+0x37a/0x1ee0 [ 1019.581052][T14840] ? mark_held_locks+0xf0/0xf0 [ 1019.585816][T14840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1019.592142][T14840] ? __kasan_check_read+0x11/0x20 [ 1019.597192][T14840] ? lock_downgrade+0x920/0x920 20:06:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x02\x00'/70) [ 1019.602048][T14840] ? vma_compute_subtree_gap+0x158/0x230 [ 1019.607684][T14840] ? pmd_alloc+0x180/0x180 [ 1019.612102][T14840] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1019.617651][T14840] ? validate_mm_rb+0xa3/0xc0 [ 1019.622330][T14840] ? __vma_link_rb+0x275/0x370 [ 1019.627099][T14840] dup_mm+0xa67/0x1430 [ 1019.631184][T14840] ? vm_area_dup+0x170/0x170 [ 1019.635770][T14840] ? debug_mutex_init+0x2d/0x5a [ 1019.640615][T14840] copy_process+0x28b7/0x6b00 [ 1019.640630][T14840] ? _kstrtoul+0x170/0x170 [ 1019.640649][T14840] ? __cleanup_sighand+0x60/0x60 [ 1019.654622][T14840] ? __f_unlock_pos+0x19/0x20 [ 1019.654636][T14840] ? __kasan_check_read+0x11/0x20 [ 1019.654659][T14840] ? lock_downgrade+0x920/0x920 [ 1019.664316][T14840] ? vfs_write+0x34c/0x5d0 [ 1019.673629][T14840] _do_fork+0x146/0xfa0 [ 1019.673647][T14840] ? copy_init_mm+0x20/0x20 [ 1019.682274][T14840] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1019.687816][T14840] ? wait_for_completion+0x440/0x440 [ 1019.687836][T14840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1019.687855][T14840] __x64_sys_clone+0x18d/0x250 [ 1019.704081][T14840] ? ksys_write+0x1cf/0x290 [ 1019.708591][T14840] ? __ia32_sys_vfork+0xc0/0xc0 [ 1019.708610][T14840] ? trace_hardirqs_off_caller+0x65/0x230 [ 1019.708625][T14840] ? trace_hardirqs_on+0x67/0x240 [ 1019.719301][T14840] do_syscall_64+0xfd/0x6a0 [ 1019.719320][T14840] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.719331][T14840] RIP: 0033:0x4598e9 [ 1019.719346][T14840] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1019.719352][T14840] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1019.719364][T14840] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1019.719371][T14840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.719377][T14840] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1019.719383][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:15 executing program 3 (fault-call:2 fault-nth:71): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1019.719390][T14840] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444def7d1fd8d9f1ec8da616540936f4ed440cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b633601000000000017f2311657ead9adc0096cd100009f77362b4ccaaee2fafe87b8b707026e49fb6b75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354704b4d1c8963ec4f8148d804478005e0e68af927e2306bb7d4a90671a5574ee488f7a91373cc1cbea74f262f871de46fa73c1c8f051b2118ae57a10b44b2d415b2606aed7da4070c09e5b7f42c157707b5e5bebd7f90da10f6529d2a06e84669674d31b37ca483191bf0f21ddb0e05011f7692c4e650b1c39a343e97858d1028ab4abe40b10a5962a245b3dd289de5d82238c35fd0bd73990b294833abe1bef2a7fe378b3a318fe69f98e1efb11e7641bb5cf0"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") write$binfmt_aout(r2, &(0x7f0000000140)={{0x107, 0x3, 0xd3, 0x53, 0x1ba, 0x1, 0x3d8, 0x10000}, "87ef4b35cbf776be74cad9ae46fdc878f7693aa305559afd3608635b8fcf71d47b84187fe9055dca9c06e3a725cab2e057eb59bfd65108a86dad3284bd424044d3db40b76a31d081d91ad084b265fb68e50c390c6a293799e2cd670037d02d5854d2477c27cc0d214bcbe7b5248cee23abb01fdc725f6796a55418aacfc40398cb3c4f539b464d5d023f3885ae326c06f89b46820dcaa95d18f4e5685f66d50d1e408d557ff918ea9a2d5e20d0f3e3269ccdac6a2089ab02dce507fc636a4d296a918babdac2af5e15772835dca4e632064455b19acc2e9883d57387d20e7bba56b8065d0420f9eaa57d16c8833b0a9404eb4312ab0791", [[]]}, 0x217) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) r3 = getpid() ioprio_get$pid(0x2, r3) [ 1019.913295][T14947] input: syz1 as /devices/virtual/input/input551 [ 1019.933710][T14975] FAULT_INJECTION: forcing a failure. [ 1019.933710][T14975] name failslab, interval 1, probability 0, space 0, times 0 20:06:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1020.028905][T14975] CPU: 1 PID: 14975 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1020.036389][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.046441][T14975] Call Trace: [ 1020.049744][T14975] dump_stack+0x172/0x1f0 [ 1020.054096][T14975] should_fail.cold+0xa/0x15 [ 1020.058698][T14975] ? fault_create_debugfs_attr+0x180/0x180 [ 1020.064516][T14975] ? page_to_nid.part.0+0x20/0x20 [ 1020.069551][T14975] ? ___might_sleep+0x163/0x280 [ 1020.074427][T14975] __should_failslab+0x121/0x190 20:06:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00') [ 1020.079371][T14975] should_failslab+0x9/0x14 [ 1020.083874][T14975] kmem_cache_alloc+0x2aa/0x710 [ 1020.088998][T14975] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1020.089015][T14975] ptlock_alloc+0x20/0x70 [ 1020.089029][T14975] pte_alloc_one+0x6d/0x1a0 [ 1020.089042][T14975] __pte_alloc+0x20/0x310 [ 1020.089056][T14975] copy_page_range+0x1520/0x1ee0 [ 1020.089070][T14975] ? mark_held_locks+0xf0/0xf0 [ 1020.089089][T14975] ? __kasan_check_read+0x11/0x20 [ 1020.108424][T14975] ? pmd_alloc+0x180/0x180 [ 1020.123094][T14975] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1020.123112][T14975] ? validate_mm_rb+0xa3/0xc0 [ 1020.133056][T14975] ? __vma_link_rb+0x275/0x370 [ 1020.133074][T14975] dup_mm+0xa67/0x1430 [ 1020.142480][T14975] ? vm_area_dup+0x170/0x170 [ 1020.142500][T14975] ? debug_mutex_init+0x2d/0x5a [ 1020.142518][T14975] copy_process+0x28b7/0x6b00 [ 1020.151134][T14975] ? _kstrtoul+0x170/0x170 [ 1020.151155][T14975] ? __cleanup_sighand+0x60/0x60 [ 1020.151168][T14975] ? __f_unlock_pos+0x19/0x20 [ 1020.151181][T14975] ? __kasan_check_read+0x11/0x20 [ 1020.151200][T14975] ? lock_downgrade+0x920/0x920 [ 1020.151212][T14975] ? vfs_write+0x34c/0x5d0 [ 1020.151224][T14975] _do_fork+0x146/0xfa0 [ 1020.151235][T14975] ? copy_init_mm+0x20/0x20 [ 1020.151247][T14975] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1020.151263][T14975] ? wait_for_completion+0x440/0x440 [ 1020.165174][T14975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1020.165191][T14975] __x64_sys_clone+0x18d/0x250 [ 1020.165209][T14975] ? ksys_write+0x1cf/0x290 [ 1020.174771][T14975] ? __ia32_sys_vfork+0xc0/0xc0 [ 1020.174790][T14975] ? trace_hardirqs_off_caller+0x65/0x230 [ 1020.174800][T14975] ? trace_hardirqs_on+0x67/0x240 [ 1020.174820][T14975] do_syscall_64+0xfd/0x6a0 [ 1020.184661][T14975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.184672][T14975] RIP: 0033:0x4598e9 [ 1020.184685][T14975] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1020.184696][T14975] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1020.193213][T14975] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1020.193221][T14975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.193229][T14975] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.193237][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1020.193244][T14975] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1020.326053][T14947] input: syz1 as /devices/virtual/input/input552 20:06:15 executing program 3 (fault-call:2 fault-nth:72): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xec, &(0x7f0000000000)="11dc09c33e015f6bce3c2853de271f007b703b") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\a]\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x10\x10\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:15 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendmmsg$sock(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="9a1fb6a7fe9cc9c6385578d6ed8411c3ab005f8eeed4fe2172d2d7b17c8a074c39b7be1c1650f28e27821e42b93099", 0x2f}, {&(0x7f0000000040)="1ddcbe74798352d78caaa251c1d003c2eb1aa37edc3838755cc2bc044bc2e738cdd400ae7e185d5727bc24c5bebe969d2f51a1aa97a3ce4d060517289fee619f96da32eb6811119434e1644decf7396318c9499121e57a9206ffa407ae0d422dcfa2d11dd2afb90b91b4ce61", 0x6c}, {&(0x7f0000000140)="0101e45b49d5faede6c0d25887d07e0c49f1accbdfd7bf9c1bf5d7f4b446fd571f38de1e9757885b36d240dca3ad4989d9abfd1b5660dfb5bad7ab76b304f6043538e6fa85334028fb69d26f180560fe111ed07de524d4dae471f12392659654f66e0abecf409280870e9a2d4d3dd7fca0872743312ff5774560b8d56376d83f9e4f31cfe570548c9bf5e7ebd70358815d08404b4dd290db12c3279121d0137874a969b072b5101f495e7bf6d71cb946c237", 0xb2}], 0x3, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3878}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x90}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f00000003c0)="da7d4f8627d7f7e574f25e22f85fb15d14e6cab78739fc81dd000a60e3ecbce1b3d5e0b176057bfc3ca533178473591012b10f4b88eab2fa04cf8429b9081feb9725ee7663b43bb0ef15a99991235bcf7b7d21322c87c031f6164a7f133f89f0637e6b093888c01bfb61d374356cf3a5c289c3bdb5336fd24677", 0x7a}, {&(0x7f0000000440)="25e5ff11d32bae1a14430ee521f0be505745d8fdadb9e3af38e5a916db43b7c3ccc4487e922a7d897c071c4bf36af69d2971e2b0923fb3fbaabaf748dc12ccc32a6bcc0a103d527bd891a7c8f30ff9315d801b086578ae1765cd4860104a9fed9b0ab19e14d71eed07955403cf4248f23803576024ad6781b3904390315cbec0e66354f1ed43431b8a094b1549cd273a357245821ac99d59b7b20aa89b847ff30bd826077e963d6d975946e059f6e27d9c327e1869c9327650062b", 0xbb}, {&(0x7f0000000500)="932125d03f80e8e96b89d674e3cdb1a429d87d248024cd5a3646c50aeb55e1747f98821964dbbf8ad8dcd7d81699063867383207442d9718394cbf69a3930e9a84e60db1cfb45f93951258108132aa72f100098dba4cdd9f3b1b7dfe539f561425b9803de7c744722f924bfb1a9048028b0850187a6af6a9cec31371684bb879c9a7151c58d45076c368c25f7cd05f15deffc13a5a9c6f5558a8a3fde13fff73e9", 0xa1}, {&(0x7f00000005c0)="80090c3df2f8a586d198638d190c15e1bebe8446cacad28047e156bf2230fb3e987cbdbf786cbf24c2dfa9ef8f2657b88d97be35dbacc7e92aecf575cba9441f07404c0e5b90bda7d131b5238935ae3be13e562b0b523a8d8f5bda0e57e934752fe84ebc864b73807e", 0x69}, {&(0x7f0000000640)="afb6d7c68db3de921fe839f6d6c61ee88119c1f7fefe7453810e3eaa7fddb4046cdf4ae02d4aa6761112d858b616a4671c53f413bb1a0e488f3ec8bba549c6251ef8401dc380c3aa1c7fc453", 0x4c}], 0x6, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfffffffffffffffc}}], 0x30}}, {{&(0x7f0000000780)=@in6={0xa, 0x4e21, 0x1, @remote, 0x1}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000800)="91417cf8d6ffe257832f6dc91f2dae359bbadee1980d2bf6d895a5f377d7d003e5c14b2dc71d706cebb1e20330bec3407798672dc2efed2bdd4f9dacdb1b51e6d05d6050e901d046d1eecc3a4b4c5d4ba1deee2bbb70bb2226b76c9ff276b3ba9123c29ed510b1b33e6fb11efceea6282960276cb9fb25c05d0608e17b5511244060daf515751812e78e905f9d23018fed8cd55495b63d39dbb710b00e830c95192bb87bf621aea9f2840b20944522b68b067a19c712ac39c049531b6133f778b770e7ace1e3e4a86c1f38", 0xcb}, {&(0x7f0000000900)="e4b886722c25e341bee044f424a7ea5a4743c9809eac692f33f2f4a821c6f6e0aca91ea019f139729bc8fa4284cfddc9892962792b78eec153768f6816f869420048d2d66f1311104ca1c027c27b64a414bbe66a6e3d752d2084075ac7506668d8da919f0e28cd0339ee6a3e5139175577447e5f60ac9ff1813926f8dfe5af6723a2fe4bc856", 0x86}, {&(0x7f00000009c0)="e4b83a3a85b415f47267fab33fa17fd97e82a387ccb4d07575f4ebbf31f32eb855b01fafb191e5216692aa6a33aaabf3cb472e9e6b6f94612605fe1e5f3ce040ea932f6fe71ebf53fdcd860892130d22fd5d9d97b9a09ea9634ea6c376b1d1ce75921d7101955fee67d59247c72722a269e0927a083eea69a6b499af3ed7ed351e36fb7a131f6370192eb65a7ae1698c3260c3a6e9f39a101e0a56337c3e89176de9ca6f3fae77fa6ea11d9e8e44bb80da737a2038d449a8d40990c4d1efffd42ccf457eba", 0xc5}, {&(0x7f0000000ac0)="f45b8ef07e5ba14e155c657089a1829d54d9aaeb32e891ade4d71dab7f249362f8cfb57f497dcff3901c58a79a29be9e8b9437c349233ea8d4b61929baadc532b5e47a439f56dc0e481326045ab2634a8f2d46dc4c4dcd76b2132797fea485d45b373f19864f649ba4069323df6f542698fffad72d2398d7d11be5db7a87c07a3284654e07610d2712d96069bb337c0bf5dcbcb1c4", 0x95}, {&(0x7f0000000b80)="49b4ca3d892f53583a861045998762850de5443b6df03b8718c8fcff00c24de3006fe873f55d500ea9068e8fc4b3ef00", 0x30}, {&(0x7f0000000bc0)="5a173620f35da5030af0301ea368e97073b56c00302a4ac2d1299eed3209f2f5ea0384d12e85751b3665a0f1f44123c695816bccc16044f03ca6b5d3a8404b07568b41453e1c6788b3d3bf19819309810d5be3e8c566d4775655611c83a28df8e3a25fd13c8198e9a7b9bc1898eed3a0288464b3e70005bfafb20b76b5373ccd1292fcae0d058c538d55afa27dcf70d5a268fec61f31fa9c8451796d527e0cdb77fe677d6065fb4567e689885206e258cc3a35e699a4f760a6771ea4d2fec9faca8be1ab6278", 0xc6}, {&(0x7f0000000cc0)="48bf26f1df4c13e51ed028ef73ef8ffb5343dd4db2ed3b96f259a5c94c26464239c73fb7362d94f5cc5311a21ac23230aaacb5192a2f0d54e38abf7714a825eecca5f4da944c1cad79d78a1ec0e3ad961efe531c0005802a135316637ed10e3882fb6d62c52663f6806273390318bce25e88435ad4d39ecfd46bd57276faf32f1393eaf1de3bc51b75eeb15e6cd2c202943d4b4ce156b06b01f5f307cfbc08f495de79896d6cfc3792195a3fdd9e3778ec743cf30b68f3d8fccd0c87", 0xbc}, {&(0x7f0000000d80)="909eb2dfa2847dbb87721792a369947cd2e8f6fdb7da34e15e43ea9b1bf9dce5cf6ce227522a9bb85a9c91ca75301b7a8fe5b67c196e5e89f3f5f8d3722ddcbba9c9b6c7798817f2b57850146046f3c1ec1224ce6e0405506e97811bb71cb9cbdb4921ba8f60da853a3b782e01008b40cc919d62e3bec9507464217aaaa1149a5f5342848734100a87dba304f2fb7af62d4fd9cc06b4f4b6d8e1f5e37ffa7d95719aed2e9dd0cb430a5a67ab51ea8e16a7bfe5807b470962d1e7bbea8b010018bda5ac6b43cabd4793", 0xc9}, {&(0x7f0000000e80)="7e79058ab8e30394089da595dd5296e20e046fddb233b3e0b43652ca65d701251e52928d32928211837b625700bc6447dfb4f9d59d19dd687d17d2fd7544c88f6dcbe1cc6f45725a20ee8cd346c9b755af0af1475091027791c15c413c422cb002f071323a318866c9e0227e5aba6ece4b0e1ac2334bfe4f6aec", 0x7a}, {&(0x7f0000000f00)="57a8e0d477ec8b6db5406bfeb5", 0xd}], 0xa, &(0x7f0000001000)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x90}}, {{&(0x7f00000010c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000001180)=[@mark={{0x14, 0x1, 0x24, 0xfffffffffffffffe}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7f0}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}], 0xd8}}, {{&(0x7f0000001280)=@l2={0x1f, 0x9, {0x8, 0x8, 0xa471, 0x7ff, 0x0, 0x4}, 0x2, 0x80000001}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001300)="ef60ca102d00e5d6aadf59d7632f9d4bf871dc33255c383d51b5a1d2e1193b0567bf10e0033063395bb3a749357a16c181cdf4db8edd4f59e771c74332353480bef865c819aa12d336dc5a117414adace94692aea888f15bd3e0e784db6430d064417d2a1f95e3ef7b71dd9b9c44cac7ae696c690e996d7dd1c039eba3087a9a299788aaff7d099dd35496ee156c2e09af76d6d8ddd2335ec750098b847cbde8fb5dab84", 0xa4}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="e453e67ee64c7031344964bbe4cfb1a3367156c4c100103b65c20a6f079abb10479cad91013183b8fd62edd1e35b80f95064509ea2ff19e8938505eee2f9a67d60ecce", 0x43}, {&(0x7f0000001480)="0a1ecc423029dd921c0a913504975caf2087239fe8df249facfdc1d746633f503205088af5ae7b2de00cb040934dba9e4c112f82e0919f02fa9848cef65c98b40bf278f4e3973901dff191f9e018891a315f80278f6e9185acb2d79f44575386124c2af84b2a2d8e368edd1775bbf462a6bee3ab8b1006082dd1552c4d6bd1fbb231b0c39d7ab5d17b4eb8a753f2f4d5b9f5b9fe6c85", 0x96}, {&(0x7f0000001540)="13fd7b17530a6a0b5cd2b9336647e9c052ae505ce3b83c2371aa22d62c3d206e4f5d6134645135d486cb61c4334327f3c2c8967a4498d3e6f149d0ff0758c3a9595ca3d0f71272b94d58bb797ea8a4d60d94e9558525fd7876df537cdd3aaa721685f9af0bbd4401d4fa117d1a7033298113c973d49f4edf425db9b7fad52f5af6df3a3fe8eecb399971d91722c1afac0e3224d8775bb7810455778a92662409e03bd538f15308d27dd499dda52711da0bc266ba91ebbf53fe48d6cbc1bf8dbb320045d695ba7ccc375a31ae5e4f4b3c29908f8da9fc43e6dd", 0xd9}], 0x5, &(0x7f00000016c0)=[@mark={{0x14, 0x1, 0x24, 0x72}}], 0x18}}, {{&(0x7f0000001700)=@sco={0x1f, {0xfff, 0x9, 0x40, 0x1, 0x761, 0x3}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001780)="48dbbbdf12a0a0572fb14cd4c9637025eb6345397dc61b6322640a8fa282b52052aac887100056d339c56435b57652b1ebf6a723bf99d05e64db440c463c535a576a6c842a84e344ffab4a913b0a42f85838821c7bf86cfca956838ed4744e4ebc25af3c02fa7ba209766cf3b8a2ad58c257efb80a760dd5f94759201080148cc2749bca86d2916736ff00e9fe079e5b7b491fbd7cbff3aadfb6d9a9de6f7e6642496eede61e5a448b74dbf06cf06502d987c09fce8e3af791889928f6dd1f407800a854dc984d6705dd3244db04f0d742", 0xd1}, {&(0x7f0000001880)="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", 0xfe}, {&(0x7f0000001980)="d27788a6edcbfe7d7475c9ee65d281aa0a7b22d94e4e847a339d66f2e36d9867c11ff408ebe10983d1d29ce278c1b8a053b26d572b7e9e917a740a82b60bbbbdc5035cf40dc128501c2f5384bf06b97db45507cd458348b8c471e661a1166841ff72e479ebe64641b8546f696fb1088f83858dc8a915d01baaf8db0a4f19bdfec3a540991c0a45bb740d3f2d82bca73cfe95b00fa82780170dbdc75f70f8fd31f830ca21631cb1426866711bee71", 0xae}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)="3ba37d171bf15905c4195ab07c2ba480944b266a5b5c204ff74ef6e357242ee082bf4d7de544b89257166cbc0087fc3483f4b14b70a30bf7925b8512db9fadca608aebc3a099accf70ac016ad6249c4cc48638691cc4fe4d943d5cab3f3aae87a7d7ca051cd0f0120e234f419eb55ad9b3f72df3f999e0af60d154b6c106ab69e4dc4efae8d3ac23a2188f47db4b43f5f154757bb1bbed0a2a0be7530a2d083a2651", 0xa2}, {&(0x7f0000001b40)="f4726457bd03017ab62bfb993eb290a72cc3eed6fff84c60ce6c727b9c3a4444bd27091036f9f895201e20a6e692fc4f61ed263851acbf14e01e4645a0f01ade", 0x40}], 0x6, &(0x7f0000001c00)=[@timestamping={{0x14, 0x1, 0x25, 0xe01}}, @txtime={{0x18, 0x1, 0x3d, 0x856}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x6fb}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x75b}}], 0xf0}}, {{&(0x7f0000001d00)=@l2={0x1f, 0xffffffffffffff8d, {0x10000, 0x1, 0x100000000, 0x80000001, 0x5, 0x200}, 0x100000001, 0xfffffffffffffffb}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d80)="50c7", 0x2}], 0x1, &(0x7f0000001e00)=[@timestamping={{0x14, 0x1, 0x25, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffffffffffd}}], 0x60}}], 0x7, 0x4) r1 = getpid() ioprio_get$pid(0x2, r1) [ 1020.488509][T15104] FAULT_INJECTION: forcing a failure. [ 1020.488509][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.531340][T15113] input: syz1 as /devices/virtual/input/input553 [ 1020.567941][T15104] CPU: 1 PID: 15104 Comm: syz-executor.3 Not tainted 5.3.0 #0 20:06:15 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="116ff1caa677dca50d6f0bcf6c7bf070a0d88858eae0d80155abe118fa86688cbca5eb7a0450f275083a7e5a42f3c4f32bf7098214b4f575725430c671dbc0678d9724f256f03048f96d579844cdbdcdb63ab258fcdd2b352761bac9a0298043e18a378e46562309f92023f94e6f2fb1fa70a8e025b2132c145ae19515a0f07b39e16dc83e244aabe97f97320e0ddb0abc64e4bf7acc13c1a234bbb224c04a9c700b7633d1d40dcc9e7350cfc1ca1be6395a8d663c5a7882c9a5215b72a9f1634a32590fb896ee9676b3efa72582edc1583750d16022ac88147432b1e5f4e5e584d16f98f3ce98a439b95261a89f43c82cc9fa0548a7bb67c689da09bdb25d5c67b57fcc173fd5eb0edd1b78ccc151f989d945b313d72e1f50d3bd50d26a7b95fa6b95b12dcd") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) epoll_wait(r2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x100) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0xfffffffffffffffe, @ipv4={[], [], @loopback}, 0x10000}, {0xa, 0x4e20, 0x5, @mcast1, 0xff}, 0x490, [0xef, 0x1, 0x4, 0x10000, 0xffffffffffffff00, 0x945, 0x34eb92a5, 0x8]}, 0x5c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r4 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xfd2, 0x300) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f00000003c0)="6ffb7ea690775a5b6ecae0c7ad527014515add67dc4220f70065d0270fabaadbe82a656fd00f7c898e43a4cade8275ca67d5d66513133b88f6996ec8c0fbcf18635d86ac3e643c89da1201ccefa17e231ae5385fa57ff22ae168781314e39429516e38735c76605b7da4af4ce7953be2b54592dd0450b4df87a55923f6998615c2f43c71f8b2def13b8c73bdb51ef70ab7d5f3958d250451ec4629a1316fea", &(0x7f00000006c0)=""/245}, 0x18) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x5, 0x8003, 0x5, 0x81, 0x0, 0x4, 0x0, 0x0}, &(0x7f00000000c0)=0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r6, &(0x7f0000000000), 0x0, 0x3e) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={r5, 0x6}, &(0x7f0000000140)=0x8) [ 1020.575431][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.585491][T15104] Call Trace: [ 1020.588783][T15104] dump_stack+0x172/0x1f0 [ 1020.593119][T15104] should_fail.cold+0xa/0x15 [ 1020.597723][T15104] ? fault_create_debugfs_attr+0x180/0x180 [ 1020.603530][T15104] ? page_to_nid.part.0+0x20/0x20 [ 1020.608567][T15104] ? ___might_sleep+0x163/0x280 [ 1020.613421][T15104] __should_failslab+0x121/0x190 [ 1020.618370][T15104] should_failslab+0x9/0x14 [ 1020.622882][T15104] kmem_cache_alloc+0x2aa/0x710 20:06:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4, 0xffffffffffffe7e3}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) dup2(r0, r2) [ 1020.627736][T15104] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1020.633463][T15104] ? __vm_enough_memory+0x17e/0x3a0 [ 1020.638668][T15104] vm_area_dup+0x21/0x170 [ 1020.643002][T15104] dup_mm+0x549/0x1430 [ 1020.647081][T15104] ? vm_area_dup+0x170/0x170 [ 1020.651678][T15104] ? debug_mutex_init+0x2d/0x5a [ 1020.656530][T15104] copy_process+0x28b7/0x6b00 [ 1020.661213][T15104] ? _kstrtoul+0x170/0x170 [ 1020.665638][T15104] ? __cleanup_sighand+0x60/0x60 [ 1020.670573][T15104] ? __f_unlock_pos+0x19/0x20 [ 1020.675262][T15104] ? __kasan_check_read+0x11/0x20 20:06:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc5e, @dev={0xfe, 0x80, [], 0x23}, 0x81}, @in={0x2, 0x4e21, @empty}], 0x2c) fchdir(r0) r1 = socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x521080, 0x108) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000480)="43107afd1bc67cf8d10d4fb5ee1d377c90719c229060baaa48a7ecdfb14116a5c2875fa73b1c09508603901badf28c246a612ea0") ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x800000, 0x100000000, 0x2002, 0x1000000000000], 0xb}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x14) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x10, 0x9}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r7, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={r5, 0x3d, "cd461da5fa8fb0e65817942bb3ce39ee3f4036a0a4945257f53027fc062a1202664076d96f3240d59a2c54bdc1c6cc322834a51731386e8d8535fe59b6"}, &(0x7f00000000c0)=0x45) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x649ee053, 0x8, 0x50, 0x0, 0x80}, &(0x7f0000000200)=0x14) setsockopt$inet6_opts(r1, 0x29, 0x6, 0x0, 0x0) 20:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00') [ 1020.680288][T15104] ? lock_downgrade+0x920/0x920 [ 1020.685138][T15104] ? vfs_write+0x34c/0x5d0 [ 1020.689562][T15104] _do_fork+0x146/0xfa0 [ 1020.693716][T15104] ? copy_init_mm+0x20/0x20 [ 1020.698218][T15104] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1020.703763][T15104] ? wait_for_completion+0x440/0x440 [ 1020.709056][T15104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1020.715300][T15104] __x64_sys_clone+0x18d/0x250 [ 1020.720064][T15104] ? ksys_write+0x1cf/0x290 [ 1020.724582][T15104] ? __ia32_sys_vfork+0xc0/0xc0 [ 1020.729436][T15104] ? trace_hardirqs_off_caller+0x65/0x230 [ 1020.735160][T15104] ? trace_hardirqs_on+0x67/0x240 [ 1020.740186][T15104] do_syscall_64+0xfd/0x6a0 [ 1020.744692][T15104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.750576][T15104] RIP: 0033:0x4598e9 [ 1020.754466][T15104] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:06:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r6, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000024c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000025c0)=0xe8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r13, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r18, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) r19 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r19, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getsockopt$inet_pktinfo(r19, 0x0, 0x8, &(0x7f0000002700)={0x0, @multicast1, @empty}, &(0x7f0000004480)=0x5) sendmmsg$inet(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="4a9f44770c715ae4a431f30e72c271d42b076ef00d4932ce2cfc5440fcc1bb0c75bb5c33d2078cd8cef45986677cb8a5f590c0120b6618338286d54eaadbb54aee4c09b7365c1a3b8fd86e3b7c0e428ef9059669856ea0dba5ba8ccfabca16c529aa174f6aa32040df6e0ff3eb6a2edd44a6f4850e5edcfc", 0x78}, {&(0x7f0000000140)="3305fbfc5ab1c00f1a6e1c8ab47abcc437d3fa4dfb0826525ce9965451481610d809610954f49be7985f5a1d09fc00708eb76191b038b466d688254ec20f5ab98b0cf107e05acd86c76e28912fc44d1d00b703862c7b2f57437973b5d7489e3dadf9f4791a7bccd02bebe1931cf1fb861a07c2d77642717711b37f0ebd8077b02629c017bebb33a27f08dfc30443b85a11b298eef86a9e14c029c75e640eaf1946199fcaabfb7da49b3101bc9725eaff56bab2edb7a5b46deddbffca7bafceeca6e636e82b2091ca0457c88d2243b8", 0xcf}, {&(0x7f0000000240)="cbf9d5f1d4de0606984a4173e0852e505d2c88d39af6b148cfdc96766802f983eafb4ed9a3b8acf5e0d1fe3024d618c81774d85715f9062fd870b1c9768d255b884032934c4b73599f5c4966b8762d3ac8d8484cb637b4be96ba5236dbc3453dbee28beb2cf7cdf240c9941bbff3aaf273411bf37b5b5e406aee431e716090f5c46724725c20b1f81edf349a4ba4ecaa327861596dbc92777bc37df03c507a876e6655b49647e69162877e20c3b260ae8377982bcc8af8547efb0ef0f9a802803eb9595abf02316369346420da9939fb934f971744fbc378b37bbe451169d212ab73c0b1", 0xe4}, {&(0x7f0000000340)="3d3be494cefe520dd357426701c46e531be91e71d71e35a7123c0d407fa5b1d51b38692ded0d8fcd78e7434475364cea77607cef7266eff7f0c2325790428b03fb7a9d0992cba9ffba3ff6700935d78bb482b9a0f28aaa3e9480bd69681828046c470cf3389ec5370010d32e7f9d0381d073dbeb21d5f4f23b7c56d24ee21fbd235e715f0cc3aa6f0f53840b35027b62711381a9022ab2df15215186c1e7016abc1d66a6aaeda5668bf21f19e482768fce83d259f1", 0xb5}], 0x4, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x17, 0xb5e4, [{0x0, 0x11, "a3410a68a984b4f4881f1327e18771"}]}, @timestamp={0x44, 0x18, 0x8, 0x0, 0x0, [{[], 0x80}, {[@multicast1], 0x1ff}, {[@dev={0xac, 0x14, 0x14, 0x22}], 0x4}]}, @ra={0x94, 0x6, 0xe11}, @ra={0x94, 0x6, 0x401}, @rr={0x7, 0x7, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x5, [@remote]}, @rr={0x7, 0x13, 0x2, [@local, @rand_addr=0x80000001, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x58, 0x0, [{0x1, 0x8, "1a1ab44fcca6"}, {0x7, 0x10, "fff4e7c80fbc2d5a0aa15dafeeaf"}, {0xe, 0x8, "301d371200ef"}, {0x1, 0xb, "3ce31d04e657465118"}, {0x1, 0x9, "44dd025b262aa8"}, {0x0, 0xb, "c9397a795cac927047"}, {0x4, 0x5, "7bffad"}, {0x7, 0xe, "d467dd9b1f4f799942b4c8dd"}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x17, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x7, 0xa21, [@multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x170}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000580)="a0f5bcf310f76094ca3e9ca9f0d587a48643cd81be2b84ac0838b83627575d3c85e491463e5bfb50481b6b960a27b6bc9ef40782bf956cf7478ee22a0887b2720e776c517baa", 0x46}, {&(0x7f0000000600)="63f2fce3033c7818d8fcb5f262c1c4bf5a784f2106cfe26f1210c2fba45169b1c7430915ed0f065ac73a96918f5c567c83e6ad432ac791c756a59cc952b0024bdb3469b346b1f65250652f891d0d2b13ad00e4b2914c212fc56c99759014e6d6610362931a93c8ce107eb1366ac402292acabe06407d1407d9d8", 0x7a}, {&(0x7f0000000680)="15b57ca88b07a3ce0bebac760810f6918cf4768fcde0d8a1411c477f4dbd35aa3510e8ac7dbde1f49b62d0bf9a957fc5667b53839db4f1f18e5b6c254b7afb0aa09a5a82eb51bfdb35dba06fa18a78e96f36b59c694247d95dcb02ed6dc84a324ca966bd17f6e30d9f7b7feb4b71f420e5f3c6fbf13021a8b363c436b074b094ca49b44c45f5edfc1ad4d6bf2063eda121b63905e2f06552e26d0a8c55a893ed94de458c54e29fcdbf3c8c710df787fe02f573cbe1f759e294124baa2f3fc0fdd3f0be0983db940c3984be216147fa794160", 0xd2}, {&(0x7f0000000780)="451b8120f5714ada5fd825d8fb5c56dbcf14cfc95e211e91914ddbc00bb6", 0x1e}, {&(0x7f00000007c0)="9ca5821f860fcfbf2b6c2a248b650de8c3ed97c3661f98f44211bb7fd764b2cf8ee74047308979633721397ed8f39bb43f546b7a97c0dcfa4fa5f2c89078e5a7f12649c5e853757daeb748677a447e4930f19e8ba23d532df481de0877f5a13acb591deaa37db7e584ca4ce061556aa2dadf6be890a00ef11dd3aa9e328aa75a546b8c209455a04a69e6ff3262f029853bbdb1112379412c93ffb5b464ad3591d6b042baca92b3305a4e35ecf5d5aed2c5edf668b1d80e14d318999d16fdc27b39fc0a44201eb74b53834f4a11de61eb", 0xd0}, {&(0x7f00000008c0)="3307522deed42cf51b7ea1338b62477e47fc2b72dcf28dffbbc3668b014858fa38cd6e00ccc19aea9755d4a6fdd6e4b2387132e18d369e4471d2f90fa1beababdde7c0a5604e87c2a7a7721250128b7e5f1a0bbc6147f314065a0bce651540de939895b90281454d4d2cd9d74e468c759b40035a518a648cc92a94db78c284ee18d66604abe872ba729145038489ad05a6657ad2dcff0a375bb003fc4509", 0x9e}, {&(0x7f0000000980)="61ac8dad7611bec3702e3642431bfbb268de5d449c52e3924ab047894eefcd5de02fea1f0fd06252b600a41a76c9181d376ff43c363399103750fff56c0c8be22a6c1c2c19ca85ea885e18f5ac23b8f8551fa059471fc1ff5b2ef4a689d87889306c8fab6c38761546020f8294d2726369b7c7dd829f76aa67c49621887c1c54071c8e607d144439c0a656f1532bc604c5231693ba56782f23aab645ca95203eaa7f2a698b3894b83db4f1688352bef78716ff665e227881b02a4da75d4b0f3c817b53b7da8853879578", 0xca}, {&(0x7f0000000a80)="353550de72f491285940aaa307a9ec1e0feb97b9d295a72d4a6f42cfb564781d45a47427a5253018139746d79f2ec67121706cc6fd6f14edbb8a0ebf62d38b2d4a1e7454da0fc5cfb08f97b60be37697af96927344d8acea8f1b740b2f5738af98b5b5b155ad98d75837dd97344ad40c1555bb5b8a9ce8be153b1105d88bcb4e8af72f5fe151a0f666abe640f300f3d4170c49996410bd2cf1bdf38a0288481216f90dded0b6f9926b6bd9056f884b4046e496ddabe45adc3854da589d566cd2ca37e7e6ba4ce9afb300390f6e781cde499377dcd337e9ab53f38f2de625f042d5da415d62ca7d", 0xe7}], 0x8, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @dev={0xac, 0x14, 0x14, 0x28}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x70}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000d40)="a0e66f41731a61fffdd6837bd30a41b61e12a82b376f225c0c6d629a0fc49a76e28cd831df453cba2e542d2b67916f4625c0babb1644fd5e634ee9ff629e2f2802", 0x41}, {&(0x7f0000000dc0)="a8220cc252ece0a7307eb87b83c3f4d9667d8a7317af8bb3c98781e2639d623a01efc8317b22eca0f96edacf67e6", 0x2e}, {&(0x7f0000000e00)="658bfbcd51e311320a43d9ba055571b4a67d3c1b53ce15775077c86919f512455568a163350195e74c9199535e30c7afdc8033c62bdcfd3c36806e5d9779f6fbf9caf3fe773b7e0bd9feb4878e4f115add1830b5649e3375f1dd5a6752b81788f5f65bc25270093b32894cd5dc8a7f8166b0f90a5dcd3cdfe746d17b2f3fd58f716f3b97a4a70735348b34af5f1eabc7fa6437345e23d156ab51399bbbb9d984caa27b501858a1b932d05df6b023b4e1e1ecf78697302f5b9b6b7faadf440bec4a3c0a45124be983104dd971d858dd3103bc5ac04089b93dca5882", 0xdb}], 0x3, &(0x7f0000000f40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffffffffffc}}], 0x30}}, {{&(0x7f0000000f80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000fc0)="1be3f952701c7dbc9857ca71a9c7cc458f808978c7473f02d597f2ae1d8e197b6ca918e62cd571ef", 0x28}, {&(0x7f0000001000)="dcf6d0caa813f246ee7b6bea2bef70660fb6c5e2606871ec1bba916aa274f2f55d9f9a31be45a5c426c235744cae15aad8042d989eea6e4d1aa0b984c7bff5b0bb8f8ef1cdcfaeb93dc1a4bab1ad3c77494027434579cb4e74571485af7f824000ed8dd35020989dd261e5b99b032dbcc0e6423f32f478c4", 0x78}, {&(0x7f0000001080)="2dc8c1e3df71f65315fdfbfea6f2d8640378eac4a584df0376e63cb24139d00c8e3e93d9cbcee048eccae35624661041d98dd045a44ff3eef4e3d54cc48d9df0fd6bbc2dc245f23f0bf869bc304f4c4351f96d869473f78448b73f3c4a4f10469f0182611e2d803a882ab4f415d897acd7ab11c5833202180ef1054a3c9fbdc4a5a251bf96544d4db61b87a0d7c0083898c3dce308a95baf4c4d6c", 0x9b}, {&(0x7f0000001140)="6c06df01db7a242f9738a745fecbabed0b83c2e6c56192efcb7a6999a42f87a08c4d30419d9127dce3480653a43fdf02c01df69f1b8d0b270c06565be7c5c1fe932a461ee6aed15f95d1c197a4aa92fe51d7484bda5b807c376efc30e89a8f99cb2cd8b8123facc899e5f6c6c1438a1f6994cbe32d5f175463d3ad7c50b4162ee8cfc0c6ca5acde1b7694f4bc2c732c29f8006999b6116aab5261a67fa232cb4d87f7c7032784dda837e23a4", 0xac}], 0x4, &(0x7f0000001240)=[@ip_retopts={{0x68, 0x0, 0x7, {[@end, @noop, @rr={0x7, 0x23, 0x2, [@rand_addr=0x101, @broadcast, @loopback, @rand_addr=0x900, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x20, 0x1, 0x0, 0x101, [{[@multicast1], 0x3}, {[], 0x20}, {[], 0x1}, {[@multicast1], 0xffffffffffffff00}, {[], 0x4}]}, @generic={0x89, 0x11, "c442de60c329f71d1b0a88405b3e8f"}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xef3, [@multicast2, @loopback, @rand_addr=0x7, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x70, [{0x0, 0x12, "7d55358f4dbe88247732290890c64d8f"}]}, @ra={0x94, 0x6, 0x7}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x120}}, {{&(0x7f0000001380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002480)=[{&(0x7f00000013c0)="7d2b09f2d7d3a2816d0242a30d09faaec917113c8ad7252f851cdc61043789773bff97f68e99911a809eef38331cc2b1171d07807327b5cae916a851f56b064174a55b156e191d66a966b84a07511cad1ff2a99bc139bf3bd1ff648171c3b4b69d8a2e601043fc62876262aba2f43734c7cc8eebc55ea0e5db93a5206c13299e38c03ab31efd64fe3c2271f1c7cf84ab1c1cb7d3b9358f629d3fa326b6fecb0914", 0xa1}, {&(0x7f0000001480)="b5c7e1335121c1c2d654c589c54356cd65148d6ea1c670e48d9121184b13d47d2e4470f5e9dd083dc5b244241b7219db2043497e30b0b37d55c0ccbd30f4b37ed1d052a33f1fd1c084998002d1715e4d4d9fff821618f59afcf8fc86281f14111e48d08e7719e40527ad39b08942ed08850219c0681bd3a139deca925273a9108d621f710ae09c58997233ba5fd58e30c2ba724a2dc04ab7d2191289725ba727ea07f399f8482efdb4c819839129bb8afe3edae3310334990170a06870e6246c3b413f58d732150e3798dd1bb0c1b6e33890c06d94ffb03c2f2017db76bbc31a73c786d2afbb92be11b08cd1535c56f0cd0dbc0710024abf978fb1c4147e0de404b673b5fb50d01deea2b8fe120db941f3897efef2aed0c70427464554236bc370df33f3527c3f440332612522afe58e9033140cd266ae5379b98e24919f1b09cb825f280329e677bf34218fe62812cf885910aee1cff20c771c59791cff1aad3419f0055ba6583905f9bc6f83e64520e84f55c98e0b84e6fdfd5da3feb7f52a7203584f4fb5da5cc6b011f49ae339f6a04adcdcafdb99bb6e029f75900c97e0fe0234f918ead8faac059df3be81b9d100d8637f72d564d5e0096a96ae9b1b935ea1bf48e574a741a3fc1f6a7f8222af436171c474b3941946c00f181b48b7447ccaab410b8438e459f2d22ff87d3b364229926fe8580c872a18f20176af71c50aea74656ec84d5210b33dd0b6bd1ace1dc3f244b460d242e1a3585688416dc984f0ec0561545973bc3b5b0d11e30e312110c40f86f89cab582cd199e65d62048bf532502f43577523fe65aa414973d43e5ae5fc68a74f9d768b3d364825f9c7976a8d62cfa391c8613da51ebd72cc7fc2c18891cbcb8be5cb271107835863736559453fa797484a98412278161793166ebc8289ff03322f1d926e42e84e610bc7f3ed1cfb809b1d55ef0471e7ee5ae580fe844b110d84d4f3a88bc613d292d71ad166da9956db8b8219b9f3d89ba3a19677612763b915e0206e8e72de2893af1162d27ca5100c2d8c797a6feeaa7879ffef14d801563b0bfd6b7b448aa0a4253d35c28ab81655c150449b842b32397003e4cda568a2624fc2b11caeb7db2955105d1cca77c96e09dabebf09183e25a65a445e800412918994d417d1c9d4fe82f9a7e373cb18b6ae5be5fe25f53c4d301247fc42537a02ef05d5c279294e2d778bb10fe14d39c43e402f8a50440167ed5115697f10a06a96efa782fa4129363c5ff5b5da0e0b108e182c4d34b668e6f3a7796617a655ebc1042766b31831215e99cde485b2e57bf2643e22546bfa1eea64d7a1ceebee8d1239af682170019c8efe7003dff26a4789cdaf180fac58f37b27709bf5e51d3cd889e0bdb7abcec616a5eec7b1dd3e15dc9032632955171f33faee3f82583fcc7a302bef0b7c868a777c33e82dc2da50e8109a5f39c64472a5fda1b434601ceb35cabadb4a1f47c69711c32cb21910e4064be21b9c30d98a6db78122917e0be3b4caead7da51cf83a27005866a053df7ea7b6604104e040b40ab8b17cbcbd8a0e1c74ee774d46701571a86ad6b0ba1cd13a242a67937431d4b3b7df6c4411f7ba5e299861392b2cbebdd3d1acbd46a1327d24ab593dd505a584d23053bd2abb668bbeac63392196d71e9d9ca965afecb0ebf69d1a8fc8c065fb97eca4c2c0283f17ea1756b7a64c2b554f23a70717db7ee4fdfce26933c815e508702cfab7d4f13b0dfb69b670fcb58d56caf428c2d68d51aab59d3cf3ee534d22777c6b4106e326eff744b78b723e626e70a3b03f35d226a349dd7fad66b0a76007efa3b46ae44919c60720c581b8c76637c4d8b3ba86e4f83aeb3e5c2e95c0f73ea906c2ff00475d954f9c4c3899bd089fec8a18a396f2e4559c684ca49829185dd87c04048f456f7ab8eb0f32949756d15cfe22199f02562d212a70dd8053ce82c150d6ef090c4bff15d5461992da958486d8eaf295564a1a29e52b75825303cbe1fdd65f3a8fce91c7e68dbd353003097d0548959124eb90fbc6fdf497fb9e51c1e115dedd0e481e3fbf629049111c95f1785f141c32108f1b96ce15213cabd714a10dc14a696d2d9104fca79e054056210dabb0b683ffd136c044d0372d23b84569877ee6dfc805f7204f09c7e02b7ad2aac2f03d2719153df4696a187bec8b6f62a910697d1d2550dd896656a7b79e0706582cf7cf3a9ab0dca00d443fc1159616bc814324e0c3b5982acd88e4bd624c8ce810b8136d803aa11e4f783890f0b56076e05699b1d50d54c0f42c5b57ab29f611129598fb53171d2229927ea2aa276eccd5763ab00adf15a6da5e9c8689a4526f2753b72e05b2136dfce50afcbe9c6797164f4403c7cf46dd559c92bb6a6c35cd44f6f0f00fa6b82731b7ede17fc63a8f46a2061352de42471376306665028bfde7090138bfb1a3e1475400f078da0370197245da71b846b37cd2f51e58845b42404e6f14c66b760a923c704594135bb9124c6520631a58572bfec4c9cd2df546386aed6ce295bfe0b4f56fccc04da2d30218173e7fcce44084bf579f8382873e1805677a0f8e94a59f5b6f17d498bedb596805baa45131c9659a9afac54e58fd49d2edea7df0a9767e0abb6c39cd9d83cb47a80ab247b6134ca1e6b944b0f4965916f9e38f44aacb71ab8c63475ede61055baf5f0283dcaeeae108b66782eb1943ca6e75ab492b443cab45cb3f9077516f7ea15c6da20e5bf7b9edaad948b50b3e19239990200bfb757eb4e083e6604a5c9a566ba8faa5eacbd91ecf4e7de8541e590833348d5f2fc76744b327c5e96af6e354f04e8507cd8411e9858741c506156fcc5ff456e3bc45dfe6b0f0465aba8cc00cf0dcacf9233fd23f79b2a96be15a4727f62c2a085cff279d268bae33c42346a2fbac91f85039c611f5ce489cc6ff3438a65a068b0961c16b2eb4249058787162851b048b4c43a4abc548e2447f91dd57d6f17496120092be53402ec5c7e4199af3d19e4fa34e6e36264ed4909db0f260bd48a6a1102bc88e6218a75a050fd6341f446cde111219532a6a4da70b68c4964a1fdf23d9e31ab21e4c8e3f6c5c78bb222b3373e8dd1168a817bc88981982ec31970ec04dd4305aee5049cf9551c7db08a6f4f10017c0d6501a8a0772dfe585b982b61cdf8d3a7bb8f6ad3acdca591913024a24397e63edce678a2500cebe016aa261f2f4a28f1ea811eed8eb455973941f4b343958e88b512d3613afa17db01c9794d43aeb2dc3bf3ffd28a293605a8ad46e712bd32f8e0239079c1add247f52bd50834fa43ac68adfc1c8a649351eba5e90ca07ec66dfb3b31f76d096e79628f0810f1d78b3ea3fd894ab66bbf70dcaf159cbb210d55c8b7135650e32c1867d89918ef4a8be2af663f1b792b5c820d07a3cf735df836811f4afe5620a674033add9027d7c713137b32928f0636e8f3a9b41a899748e15776c957b793f3a532912c4b9f1f3988d9275b53053dfb18d9e794d221cefbae99f9f54e018ac4bbb5a5d51c072aba4341daee8fb0cde8f44883d5f6507b085f0e34bd1c68e8828deb46c3d9e50e4b43f1d6ededb948f701a7f1ca0cdfabe9039e7e0c6ea06f468f303b42b36a9a80dc91f378d70703a07e959074d8fa00409fd022d2841470baba39f08239e488317e2a5c8127292fe2214cde7b51e07519dc04dcc94d7de1615850301325d1fd7c317dffa1dca03a0a3e872d5e9b44effa82d9cd93475f5bdd3fd39f4f9b6cad9adfbd839b4f99844e5cd230f81e1b8cabaa3f93f00b8a6d6ee6e8ae7053658f73ab21c4684f86de36cfc5b383915461218367a2a0798baddbb4580af3163a92c22d15596326d6f92ca3e34c76268085029becc670642e146406ec6451a6d5de57e2cf246f959efeee06affb72b72d29c0ede9e6b55e453d164d964675139482272943d617b3e12f7335af9e7d0266b724d6c46c9e766e5176ba1a17decee922b097e9a31a06c4bdecf61aa08b52b5e7a8e5dd3a93f005065cfb16c1f141d0cda7fb2e3bf57e60ba014cea5d93c6d0cac70e65a3ffd233140ff9cc72feab9b0966045e23ca5801d3789a9a45e457ba5f8631435061dbd7b7150b08007aa14af7cb3676d9a01e71966185ec1a8661589ea67a024dfc5cfc6bcc4387a7392c195f3913583baf7b701ebe598cd2ba10d22bfd6fe653bcd659f458995ecdc47469df9fc481f0ec56e44b1eb8636da7ae3747e78ae529b0b3090211937b7c6565710b68b2022be2ea8f8b97710e9033c403cd14d9011922c5b54573f1418c8c998ef53cd4691b7944647b2609f64b60ffaadc637ea00d2ecf46d5d5a6c6dcea1c229f40fdfe20c0a3b46a694fa1aeeaff9de4d04a91def11c918979a29befbc927d702ae9c0ccc944bdedfaa57eecb742bdd82db52feb575e67e347ed92ae3779d41c0db8e45290b81a2a16b6ea967edd56840c05826b926bc74863a9d6dcf84ff23b3b1725bc2868df7736ab9b7cd874a18a969c58485db58f2b509a766f536aea8a1dd0d78475268bdf8d192203f819a2333c3ef022892d5dd1760f8aa0f78c0e4e5d7b6e872f5c106332dfc6bd6909646462799215384cb1c28af157b308135cd127a50d80784938575ee3c4749a81f11cb6a746f3376d57fd727f1f7ee399547779369d6969a9a4ec1538a4c41ee0fbaf78a476099505f2402f7e13ea619a916d0a79d7033304c87278b8f33c036aa2243b2cc46e84eeb7187056b4f355bfdef5c6a06e0073901b7f8f289e0ea6eabb3e5d14d0752a0e81d33a91ebf4004cc4e402708c479e398edb18f78c10b09d31f8f3d22583c9ff0a90e430cec9656800071cf5a89d715629b43f7d4a612fae369a211951b9ac2d6e3b734c6d8dbea9424985c4d74ec7be7091773bf80a352334b1988273d756a83b9bd9598c20ae932308379a61bb7a8a01d66c11546ef7b2eb9580a1ccd0630613266f3ae0415eb3002f9ad8533333a9e21248770bdd1561b2024c2af30adc75b5059be68afda0b4e12a300ee3f66fa78b1557fe51da8fb6c452e65f89593fc29dfc857406683988c09b74fa956360795010f892ecba9998e279f8f0a288b63d06d906f43459a274760ad63e58a659137a4f8a7ee6e7b7598df2cec8ba90c628d58e70d1b52aa835dff812c62f49ba8f89a7dd31dc4bf4aa292863a27dba17e50f6382dfd3762cd33d71f5f1f2e6267e6974e086dfb9c9034dd051add39ab902dfa257db6d06f3ac1e6183e1e51bfd6a1b69e0f23825d07b816fffb5b02fac2ea1b77e0ae92f830a40426a7dd5049071d35152c4f00bfe0518300eb905f32642d2648042ee4dbeeaed27aca65ef438427e49d20bb7b9b6ff3d97cbf221b0e9c3d533adbee65e47ffebcfd324ae68316855421ebee9831742e71d6820306c23cc790224e29f49669d0422cd55e7b9b55026d0dc4c316f719dec2215070fcdb0113cdb014f45f4cef56a0a1e05701bd1ef9465bdca68cfda93902cb21d319013b011ecceaafdca800cd006296b3223396a15ebc61595d40ba4e4589c89cfc54eacd0b925f01b3de6851833a23ba5b1bee058881b751bd6e1cff7789eb96077d5de96daca94793478a7f81471bfad472ad5826fcaf5e913f0afeb7b75535610297f3d56facbe63871946083e08bfd4f683a09b9ae0a1a9accb402331590009e049a02b881218d5673fe0c3426b757774a4ff612e1caa31dfcf4840e40fe5f0a22a67ef1963f997562f849c35ba341e86f59544d6ea5c81c827cb1845147", 0x1000}], 0x2, &(0x7f0000002600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x3, [@broadcast, @multicast1]}, @generic={0x94, 0xb, "bc8d8f2272cd86fb68"}, @ra={0x94, 0x6, 0x3f}, @end, @lsrr={0x83, 0xb, 0x2, [@rand_addr=0x5, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @loopback}}}], 0xa8}}, {{&(0x7f00000026c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002700), 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @multicast1, @broadcast}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@end, @lsrr={0x83, 0x7, 0x1, [@rand_addr=0x20]}, @cipso={0x86, 0x36, 0x3, [{0x2, 0xd, "49dce3a45efb5aea4f4ecd"}, {0x0, 0xa, "234394969f3014cc"}, {0x6, 0xb, "f0a480d6c03c53be98"}, {0x6, 0xfffffffffffffe61, "b8dcce"}, {0x2, 0x2}, {0x5, 0x7, "dd6a9d35b6"}]}, @cipso={0x86, 0x3d, 0x6, [{0x0, 0x2}, {0x6, 0xd, "fac1104e0af1098f89068d"}, {0x2, 0x6, "dc7cf825"}, {0x7, 0x12, "75d2499d5c360102581c9370fb8a2c4e"}, {0x6, 0x3, "82"}, {0x2, 0x6, "db7a24a5"}, {0x7, 0x7, "8dc7040f46"}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r20, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x120}}, {{&(0x7f0000002900)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000002940)="3c5dc5d44d23cb9658aa798b06d6eb066c48112d73a33daa536dd6e12caa78b84395edc2f02b49c11561f3138bb9bb251712c953c018dbfdb3976b563162018c56002146761a3273f0fd7f5ed12b36f6674f4fefa716a6aaf36e04b6acd74815aed6724fdfb2d2a0b322715c02d07ede16975b2e0243a2f959941e276783b8676ac2af40d3f2929fc81fa793a9f09b44e9598e47342cf098f25c6a422f7be8bf544e7ccfa9ef1523a97913bc45adac3397cd7ef9c944ae25aa3b92fe035d8d9a6e87ba75", 0xc4}, {&(0x7f0000002a40)="001756232eb058bea8c6cb21c764f43486526917b62083c5f4f5b0027702e71748ec016c68428758fe98399b174bf45dac225833e13c9cf46b2276ffbd2079952dda14f724d10b143ed717885c341d12", 0x50}, {&(0x7f0000002ac0)="705af1e12cbf17d2dbe42bad9b", 0xd}, {&(0x7f0000002b00)="9f73181f05f53141cb81b3f7dd7950bbeaa348ae44dc6091aef33ade2543aa62b96e45db8278f40a00eccab3a372839c66de7c1a3c434bc1241a30c024f73819d8756c9c44a8d13bc9c2c08c48dc79e25e4b3a4665ac8f31d30f71351fa8a888242f5c74a79f7ee1eab62f2103798a45a32fa1583c71e05479c7f5934b37f4e5238123b753f3e6fc1ebf6fbe1fbca91f62dadef828ecac518f603b47bed38f29e701af653e46664e6071b92c03d9b1679c3a8c99404ddcc0cdd63003557a20ef13dd67e6b5193bdbda3692fe5921dc0db5fae653debeecf6e33864af42fcb9d4cbedf4057f27fce97c0a910b7dc4f3f47cae36b4fa5a", 0xf6}, {&(0x7f0000002c00)="9dd03e49442a4570e449d0278f861aab4bd7448a76fa3346c0be4edc", 0x1c}, {&(0x7f0000002c40)="3ca67564b46b21ba90b0fb469ed8844be04870e9dfe1d0a01fc4859c9fbed6badf4d0f964afc1dfc276db46821a88c5def98bd6d6a78650efa0420e555883ebefdb9ee094e5e3d6df6ea04f56b7cbe598494274c33d34013df56915d00fea0a02860d06295f37609a4755ad84ea3c1304320de9b3e3fa5f89bcf586bcd01c9584bfd71425ed2df1a7b65ab5dd73e84077f91a3de4117", 0x96}], 0x6}}, {{&(0x7f0000002d80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f00000041c0)=[{&(0x7f0000002dc0)="6b070103219b47d78b3243584fa50a67b7aa8426a722029aefcafba89286768b6befad7d12d5ed384cd3ce4a82a0eeafb65ec75ee10b951a17232c07f45dc02590f0819105c59bae42fb91680fc51d3f8891ae32ee8d7778669c8947164d742b3eae889ad211d6c4549ccd4cf0b2c14e840800c10617b9f6c8c5f1d099db77d65e17146a22a3600a8d56194ee027397b67411b45596dc76e0482132426da86c90940b0b0cb83", 0xa6}, {&(0x7f0000002e80)="113f9849d1cc0d6d4dbf734d8fde36f982243114d6f509a08cf21474d51890dde72190961b9965e5", 0x28}, {&(0x7f0000002ec0)="029376587e6e086c9d149e3d921b0c8aba1ed8b53d66b5ab100a67705817f0c7c386e9a08cddadc42c074b8af3ccbe5567c656119b889d9e6899bf7d1f32fd954f58902dfb0c55faab428c06867719424664cb21fdcaa8f4d07f33c71acb2bf53be66416204e833488c8073d0f2818f461babdfdb751b0c647423981f3662084e680e58ac11f62781d2900f81abf24ac8b106a842e6182dc26d53a6b0f771338ddcfcbab8f4191d3cc18aeaacb8e9a0b3fca0bae7276fca5caf449a0f3fce853b367cea57b71a0ea7670ad5327b21960d0cf67fab5c4406200187d1d06b0b615", 0xe0}, {&(0x7f0000002fc0)="59aad90c8537225618eeb5bda9522e5f7e56bd07c1d0d3adb0e8ed9c885e71f214b74a9b89b13fa8f6557e08e24a7af98553838feec125525d3b4b0916d8185c46ac276bab178dc9c0f5ed3f3cfb96c6fd7fe26e0bc52ba8ebb2539d21ea5b3c5fb611e375ed0c5aefc13f1099d48efe89c9cb65c1c8ad0ce45283e85ca11943e69d627506cb0f043b47ac6f0937534d126770d3eb0131d11dcc438c65c02eb317f8fd7d", 0xa4}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="ed98e761a14341c5d42d4f644f3c5ce0f99f89ed76a207e9bc6771b53798f16e82cf028693599c9a6ccb6c84cbe8bfd6476138f1511e128c4d7644fae4767fb667ba7b846b0afc", 0x47}, {&(0x7f0000004100)="56ccc26fb1309a8e558513670f703c8e1f366b1277dc7afae5ff2050a2cfc7f2a1205a4cf9934e8854eb2dfc78b5f9a785d2c798f5edd5c665cb8340844de9e8e6647bccc0ca98b447cfd2d52363d08ac27607379521a40a6a69cca7", 0x5c}, {&(0x7f0000004180)="372b7593024b58d0985c15fc139defe1d489", 0x12}], 0x8, &(0x7f0000004240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x8, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r21 = getpid() ioprio_get$pid(0x2, r21) 20:06:16 executing program 3 (fault-call:2 fault-nth:73): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1020.774323][T15104] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1020.774335][T15104] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1020.774341][T15104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.774347][T15104] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1020.774354][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1020.774360][T15104] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1020.852301][T15134] input: syz1 as /devices/virtual/input/input554 [ 1020.891245][T15186] FAULT_INJECTION: forcing a failure. 20:06:16 executing program 1: r0 = socket$inet6(0xa, 0x6d17fa2a391abf9c, 0x8000000000000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) [ 1020.891245][T15186] name failslab, interval 1, probability 0, space 0, times 0 20:06:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dt\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00') [ 1020.979494][T15186] CPU: 1 PID: 15186 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1020.986993][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.997048][T15186] Call Trace: [ 1021.000351][T15186] dump_stack+0x172/0x1f0 [ 1021.004691][T15186] should_fail.cold+0xa/0x15 [ 1021.009292][T15186] ? fault_create_debugfs_attr+0x180/0x180 [ 1021.015110][T15186] ? percpu_ref_put_many+0x94/0x190 [ 1021.020334][T15186] ? __kasan_check_read+0x11/0x20 20:06:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000000000820fd06e955d32317ce9bb864c958a529e0e01d5a29e60078979f3b9b5488d74c4b38cc03addc967d9c567740f5c84dff523d9a232f92e35c1979c9551f604444fef7d1fd8d9f1ec8da616540936f4ed040cb5d8d8373e8b89b1e425653ca7bf25670cff6d3974c1dc549546509fbdb3f998eee80400009425df514a698207b6336c1473950456200d49f77362b4ccaaee2fafe87b8b707026e49fb6b07739d75730ab4dcdb4da2b2b4b68fecf663e0cc1b4208e159fafc9693a07678b2e4503edaca614776c10f687576f873f88db3d132677c06cd28af5266a6c1c0626240716e65243ff932b8bb049152980f09f35354"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x20000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000200)="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") [ 1021.025363][T15186] __should_failslab+0x121/0x190 [ 1021.030303][T15186] should_failslab+0x9/0x14 [ 1021.034811][T15186] kmem_cache_alloc+0x47/0x710 [ 1021.039580][T15186] anon_vma_clone+0xde/0x480 [ 1021.044174][T15186] anon_vma_fork+0x8f/0x4a0 [ 1021.048681][T15186] ? dup_userfaultfd+0x15e/0x6d0 [ 1021.053615][T15186] ? memcpy+0x46/0x50 [ 1021.057602][T15186] dup_mm+0xa47/0x1430 [ 1021.061681][T15186] ? vm_area_dup+0x170/0x170 [ 1021.066273][T15186] ? debug_mutex_init+0x2d/0x5a [ 1021.071145][T15186] copy_process+0x28b7/0x6b00 [ 1021.075823][T15186] ? _kstrtoul+0x170/0x170 [ 1021.080247][T15186] ? __cleanup_sighand+0x60/0x60 [ 1021.085189][T15186] ? __f_unlock_pos+0x19/0x20 [ 1021.089864][T15186] ? __kasan_check_read+0x11/0x20 [ 1021.094893][T15186] ? lock_downgrade+0x920/0x920 [ 1021.099743][T15186] ? vfs_write+0x34c/0x5d0 [ 1021.104161][T15186] _do_fork+0x146/0xfa0 [ 1021.108315][T15186] ? copy_init_mm+0x20/0x20 [ 1021.108333][T15186] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1021.118365][T15186] ? wait_for_completion+0x440/0x440 [ 1021.123654][T15186] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 20:06:16 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00') [ 1021.129896][T15186] __x64_sys_clone+0x18d/0x250 [ 1021.134675][T15186] ? ksys_write+0x1cf/0x290 [ 1021.139176][T15186] ? __ia32_sys_vfork+0xc0/0xc0 [ 1021.144030][T15186] ? trace_hardirqs_off_caller+0x65/0x230 [ 1021.144042][T15186] ? trace_hardirqs_on+0x67/0x240 [ 1021.144062][T15186] do_syscall_64+0xfd/0x6a0 [ 1021.159269][T15186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.165161][T15186] RIP: 0033:0x4598e9 [ 1021.169092][T15186] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.188695][T15186] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1021.188708][T15186] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1021.188715][T15186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.188722][T15186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1021.188728][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1021.188735][T15186] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1021.242453][T15266] input: syz1 as /devices/virtual/input/input555 20:06:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\xba\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:16 executing program 3 (fault-call:2 fault-nth:74): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000480)="43107afd1bc67cf8d10d4fb5ee1d377c90719c229060baaa48a7ecdfb14116a5c2875fa73b1c09508603901badf28c246a612ea0") ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x800000, 0x100000000, 0x2002, 0x1000000000000], 0xb}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={r4, 0x80000001, 0x5, 0x7, 0x3, 0x1f, 0x9, 0x800, {0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [], @rand_addr=0xfffffffffffffff9}, 0x5}}, 0x7, 0x7f, 0xb9, 0x1e6e, 0x3}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)={r5, 0x5, 0x9}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000003c0)) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00', r7}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00') 20:06:16 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1021.471409][T15379] input: syz1 as /devices/virtual/input/input556 20:06:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1d, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r2 = getpid() ioprio_get$pid(0x2, r2) [ 1021.578152][T15395] FAULT_INJECTION: forcing a failure. [ 1021.578152][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.615924][T15395] CPU: 1 PID: 15395 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1021.623404][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.633450][T15395] Call Trace: [ 1021.633471][T15395] dump_stack+0x172/0x1f0 [ 1021.633491][T15395] should_fail.cold+0xa/0x15 [ 1021.633506][T15395] ? fault_create_debugfs_attr+0x180/0x180 [ 1021.633520][T15395] ? page_to_nid.part.0+0x20/0x20 [ 1021.633535][T15395] ? ___might_sleep+0x163/0x280 [ 1021.633555][T15395] __should_failslab+0x121/0x190 [ 1021.666338][T15395] should_failslab+0x9/0x14 [ 1021.670886][T15395] kmem_cache_alloc+0x2aa/0x710 [ 1021.675764][T15395] ? anon_vma_clone+0x320/0x480 [ 1021.680615][T15395] anon_vma_fork+0xfc/0x4a0 [ 1021.680630][T15395] ? dup_userfaultfd+0x15e/0x6d0 [ 1021.680641][T15395] ? memcpy+0x46/0x50 [ 1021.680657][T15395] dup_mm+0xa47/0x1430 [ 1021.680676][T15395] ? vm_area_dup+0x170/0x170 [ 1021.690079][T15395] ? debug_mutex_init+0x2d/0x5a [ 1021.690095][T15395] copy_process+0x28b7/0x6b00 [ 1021.690109][T15395] ? _kstrtoul+0x170/0x170 [ 1021.690128][T15395] ? __cleanup_sighand+0x60/0x60 [ 1021.690140][T15395] ? __f_unlock_pos+0x19/0x20 [ 1021.690156][T15395] ? __kasan_check_read+0x11/0x20 [ 1021.702726][T15395] ? lock_downgrade+0x920/0x920 [ 1021.702740][T15395] ? vfs_write+0x34c/0x5d0 [ 1021.702755][T15395] _do_fork+0x146/0xfa0 [ 1021.702769][T15395] ? copy_init_mm+0x20/0x20 [ 1021.702780][T15395] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1021.702796][T15395] ? wait_for_completion+0x440/0x440 [ 1021.723680][T15395] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1021.723699][T15395] __x64_sys_clone+0x18d/0x250 [ 1021.738199][T15395] ? ksys_write+0x1cf/0x290 20:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") sendto$inet(r2, &(0x7f0000000000)="6733a4c2f7bca6626f158b902caa02c9e29f6af4328d11b1b20f82b4f39eaec925e2e920790f2ea73efa89b0327a187ee534cf4c3b13d49f17d8b87b1a2885b4aee3a25bc12e299839363ac53231a593b1b10e3781866727e1fe53dab34c7f8af9bcb84340d58f58edf545df15e5fb5887ee8f9f10eee95af64dc5e00f22ac43ca9441277cbae537e323a3af97240ecaca93ca71fe188c619920e716c1c9288f4df9021e4bd33de9710149a52868b1c445685c763c844d6bc0017aaa81b0a0e5bf22008b05f1dd873918a107766c0c7399ef", 0xd2, 0xc115, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) ioprio_get$pid(0x2, r1) 20:06:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x306}, 0xbdf29c09b7bc8326, {0x2, 0x4e21, @local}, 'bpq0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x10\x10\x00\x00\x00\x00') 20:06:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x02\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1021.738218][T15395] ? __ia32_sys_vfork+0xc0/0xc0 [ 1021.746752][T15395] ? trace_hardirqs_off_caller+0x65/0x230 [ 1021.746767][T15395] ? trace_hardirqs_on+0x67/0x240 [ 1021.756787][T15395] do_syscall_64+0xfd/0x6a0 [ 1021.756813][T15395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.768279][T15395] RIP: 0033:0x4598e9 [ 1021.768292][T15395] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1021.768304][T15395] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1021.777522][T15395] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1021.777529][T15395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1021.777536][T15395] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1021.777548][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1021.793070][T15395] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1021.884215][T15457] input: syz1 as /devices/virtual/input/input558 20:06:17 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:17 executing program 3 (fault-call:2 fault-nth:75): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00') 20:06:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x03\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:17 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="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") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1022.146041][T15528] FAULT_INJECTION: forcing a failure. [ 1022.146041][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.185330][T15557] input: syz1 as /devices/virtual/input/input560 [ 1022.210714][T15528] CPU: 0 PID: 15528 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1022.218198][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.228247][T15528] Call Trace: [ 1022.231546][T15528] dump_stack+0x172/0x1f0 [ 1022.235889][T15528] should_fail.cold+0xa/0x15 [ 1022.240490][T15528] ? fault_create_debugfs_attr+0x180/0x180 [ 1022.240505][T15528] ? page_to_nid.part.0+0x20/0x20 [ 1022.240527][T15528] ? ___might_sleep+0x163/0x280 [ 1022.256156][T15528] __should_failslab+0x121/0x190 [ 1022.256179][T15528] should_failslab+0x9/0x14 [ 1022.265579][T15528] kmem_cache_alloc+0x2aa/0x710 [ 1022.270433][T15528] ? anon_vma_clone+0x320/0x480 [ 1022.275284][T15528] anon_vma_fork+0x1ea/0x4a0 [ 1022.279875][T15528] ? dup_userfaultfd+0x15e/0x6d0 [ 1022.284821][T15528] dup_mm+0xa47/0x1430 [ 1022.288893][T15528] ? vm_area_dup+0x170/0x170 [ 1022.293502][T15528] ? debug_mutex_init+0x2d/0x5a [ 1022.298350][T15528] copy_process+0x28b7/0x6b00 [ 1022.298364][T15528] ? _kstrtoul+0x170/0x170 20:06:17 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1100, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1022.298384][T15528] ? __cleanup_sighand+0x60/0x60 [ 1022.307436][T15528] ? __f_unlock_pos+0x19/0x20 [ 1022.307450][T15528] ? __kasan_check_read+0x11/0x20 [ 1022.307470][T15528] ? lock_downgrade+0x920/0x920 [ 1022.317055][T15528] ? vfs_write+0x34c/0x5d0 [ 1022.317070][T15528] _do_fork+0x146/0xfa0 [ 1022.317085][T15528] ? copy_init_mm+0x20/0x20 [ 1022.317098][T15528] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1022.317111][T15528] ? wait_for_completion+0x440/0x440 [ 1022.317135][T15528] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1022.327071][T15528] __x64_sys_clone+0x18d/0x250 [ 1022.327086][T15528] ? ksys_write+0x1cf/0x290 [ 1022.327100][T15528] ? __ia32_sys_vfork+0xc0/0xc0 [ 1022.327118][T15528] ? trace_hardirqs_off_caller+0x65/0x230 [ 1022.335634][T15528] ? trace_hardirqs_on+0x67/0x240 [ 1022.335653][T15528] do_syscall_64+0xfd/0x6a0 [ 1022.335669][T15528] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.335683][T15528] RIP: 0033:0x4598e9 20:06:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000480)="43107afd1bc67cf8d10d4fb5ee1d377c90719c229060baaa48a7ecdfb14116a5c2875fa73b1c09508603901badf28c246a612ea0") ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x800000, 0x100000000, 0x2002, 0x1000000000000], 0xb}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r4, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x209, 0x1ff00000000000, 0x1, r4}, &(0x7f00000000c0)=0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x6, 0x0, 0x0) 20:06:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00') [ 1022.345693][T15528] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.345700][T15528] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1022.345713][T15528] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1022.345720][T15528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.345732][T15528] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1022.357192][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040)) 20:06:17 executing program 3 (fault-call:2 fault-nth:76): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1022.357200][T15528] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1022.550519][T15721] FAULT_INJECTION: forcing a failure. [ 1022.550519][T15721] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.566523][T15721] CPU: 0 PID: 15721 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1022.574008][T15721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.574014][T15721] Call Trace: [ 1022.574036][T15721] dump_stack+0x172/0x1f0 [ 1022.574058][T15721] should_fail.cold+0xa/0x15 [ 1022.574075][T15721] ? fault_create_debugfs_attr+0x180/0x180 [ 1022.574088][T15721] ? page_to_nid.part.0+0x20/0x20 [ 1022.574103][T15721] ? ___might_sleep+0x163/0x280 [ 1022.574122][T15721] __should_failslab+0x121/0x190 [ 1022.574138][T15721] should_failslab+0x9/0x14 [ 1022.574149][T15721] kmem_cache_alloc+0x2aa/0x710 [ 1022.574163][T15721] ? validate_mm_rb+0xa3/0xc0 [ 1022.574181][T15721] vm_area_dup+0x21/0x170 [ 1022.574198][T15721] dup_mm+0x549/0x1430 [ 1022.639834][T15721] ? vm_area_dup+0x170/0x170 [ 1022.644405][T15721] ? debug_mutex_init+0x2d/0x5a [ 1022.649232][T15721] copy_process+0x28b7/0x6b00 [ 1022.653886][T15721] ? _kstrtoul+0x170/0x170 [ 1022.658284][T15721] ? __cleanup_sighand+0x60/0x60 [ 1022.663196][T15721] ? __f_unlock_pos+0x19/0x20 [ 1022.667847][T15721] ? __kasan_check_read+0x11/0x20 [ 1022.672852][T15721] ? lock_downgrade+0x920/0x920 [ 1022.677678][T15721] ? vfs_write+0x34c/0x5d0 [ 1022.682159][T15721] _do_fork+0x146/0xfa0 [ 1022.686293][T15721] ? copy_init_mm+0x20/0x20 [ 1022.690774][T15721] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1022.696307][T15721] ? wait_for_completion+0x440/0x440 [ 1022.701587][T15721] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1022.707805][T15721] __x64_sys_clone+0x18d/0x250 [ 1022.712543][T15721] ? ksys_write+0x1cf/0x290 [ 1022.717044][T15721] ? __ia32_sys_vfork+0xc0/0xc0 [ 1022.721873][T15721] ? trace_hardirqs_off_caller+0x65/0x230 [ 1022.727572][T15721] ? trace_hardirqs_on+0x67/0x240 [ 1022.732586][T15721] do_syscall_64+0xfd/0x6a0 [ 1022.737065][T15721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1022.742928][T15721] RIP: 0033:0x4598e9 [ 1022.746806][T15721] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1022.766402][T15721] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1022.774795][T15721] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1022.782743][T15721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1022.790693][T15721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 20:06:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1200, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00\x00\x00') 20:06:18 executing program 1 (fault-call:6 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) [ 1022.798651][T15721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1022.806604][T15721] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00') 20:06:18 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xe5, &(0x7f0000000040)="11dc9a2390a50d7a0bcf6c7bf0700eb6f5b095d0cd89d1c7bb12d3006c7d16ade679209a0196293fa505b67ceaa0044479f916bd15d4323955757e06c3ecd7dbb1325550ce2a69eb20755a17382afce33991da33425b9ecd428ab78b34d0aae726642bd7b30000000000") r2 = dup(r1) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = getpid() ioprio_get$pid(0x2, r4) [ 1022.876302][T15764] input: syz1 as /devices/virtual/input/input561 20:06:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x04\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:18 executing program 3 (fault-call:2 fault-nth:77): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:18 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1300, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1023.003794][T15794] FAULT_INJECTION: forcing a failure. [ 1023.003794][T15794] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.067333][T15794] CPU: 0 PID: 15794 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1023.074816][T15794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.084866][T15794] Call Trace: [ 1023.088172][T15794] dump_stack+0x172/0x1f0 [ 1023.092513][T15794] should_fail.cold+0xa/0x15 [ 1023.097107][T15794] ? release_sock+0x156/0x1c0 [ 1023.101792][T15794] ? fault_create_debugfs_attr+0x180/0x180 [ 1023.107606][T15794] ? page_to_nid.part.0+0x20/0x20 [ 1023.112636][T15794] ? ___might_sleep+0x163/0x280 [ 1023.117495][T15794] __should_failslab+0x121/0x190 [ 1023.122436][T15794] should_failslab+0x9/0x14 [ 1023.126942][T15794] kmem_cache_alloc_node+0x268/0x740 [ 1023.126967][T15794] __alloc_skb+0xd5/0x5e0 [ 1023.136541][T15794] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1023.141650][T15794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.141665][T15794] ? netlink_autobind.isra.0+0x228/0x310 [ 1023.141678][T15794] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1023.141691][T15794] netlink_sendmsg+0x972/0xd60 [ 1023.141708][T15794] ? netlink_unicast+0x710/0x710 [ 1023.153537][T15794] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1023.153552][T15794] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1023.153569][T15794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.153580][T15794] ? security_socket_sendmsg+0x8d/0xc0 [ 1023.153599][T15794] ? netlink_unicast+0x710/0x710 [ 1023.164566][T15794] sock_sendmsg+0xd7/0x130 [ 1023.164581][T15794] ___sys_sendmsg+0x803/0x920 [ 1023.164600][T15794] ? copy_msghdr_from_user+0x440/0x440 [ 1023.175049][T15794] ? __fget+0xa3/0x560 20:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x19, 0x10, "8627a5d349f3eb6f01a530a69614e8e32c0fcc1962b0c72eb7837a45fb33bf039a989c7bd43001f4ec24ecd63279312ca635394bf44049ef761f6dbbad9a7b36", "faa0d2578816e45be4032edbf0b90571f9865aefbe1790df4e94a74ed2817ac7", [0x3, 0x7]}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r3, 0x1}, &(0x7f00000000c0)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = getpid() ioprio_get$pid(0x2, r4) [ 1023.175066][T15794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.175080][T15794] ? __fget+0x384/0x560 [ 1023.175096][T15794] ? ksys_dup3+0x3e0/0x3e0 [ 1023.186761][T15794] ? __fget_light+0x1a9/0x230 [ 1023.186776][T15794] ? __fdget+0x1b/0x20 [ 1023.186789][T15794] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1023.186810][T15794] __sys_sendmsg+0x105/0x1d0 [ 1023.197161][T15794] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1023.197183][T15794] ? switch_fpu_return+0x1fa/0x4f0 [ 1023.197203][T15794] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 20:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00') [ 1023.206241][T15794] __x64_sys_sendmsg+0x78/0xb0 [ 1023.206258][T15794] do_syscall_64+0xfd/0x6a0 [ 1023.206274][T15794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.206288][T15794] RIP: 0033:0x4598e9 [ 1023.211844][T15883] input: syz1 as /devices/virtual/input/input562 [ 1023.215776][T15794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:06:18 executing program 1 (fault-call:6 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) [ 1023.215783][T15794] RSP: 002b:00007f9f8ce85c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1023.215797][T15794] RAX: ffffffffffffffda RBX: 00007f9f8ce85c90 RCX: 00000000004598e9 [ 1023.215804][T15794] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1023.215810][T15794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1023.215822][T15794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce866d4 [ 1023.226163][T15794] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 [ 1023.384302][T15893] FAULT_INJECTION: forcing a failure. [ 1023.384302][T15893] name failslab, interval 1, probability 0, space 0, times 0 20:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1000000000000135, 0x4000036) recvfrom$unix(r2, &(0x7f0000000000)=""/144, 0x90, 0x100, &(0x7f0000000140)=@file={0x2, './file0\x00'}, 0x6e) [ 1023.424899][T15918] input: syz1 as /devices/virtual/input/input563 20:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00') [ 1023.481640][T15893] CPU: 1 PID: 15893 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1023.489125][T15893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.499176][T15893] Call Trace: [ 1023.502467][T15893] dump_stack+0x172/0x1f0 [ 1023.506829][T15893] should_fail.cold+0xa/0x15 [ 1023.511423][T15893] ? fault_create_debugfs_attr+0x180/0x180 [ 1023.511447][T15893] ? percpu_ref_put_many+0x94/0x190 [ 1023.522410][T15893] ? __kasan_check_read+0x11/0x20 [ 1023.527436][T15893] __should_failslab+0x121/0x190 [ 1023.532383][T15893] should_failslab+0x9/0x14 [ 1023.536889][T15893] kmem_cache_alloc+0x47/0x710 [ 1023.541657][T15893] anon_vma_clone+0xde/0x480 [ 1023.546249][T15893] anon_vma_fork+0x8f/0x4a0 [ 1023.550752][T15893] ? dup_userfaultfd+0x15e/0x6d0 [ 1023.555684][T15893] ? memcpy+0x46/0x50 [ 1023.555705][T15893] dup_mm+0xa47/0x1430 [ 1023.563728][T15893] ? vm_area_dup+0x170/0x170 [ 1023.568318][T15893] ? debug_mutex_init+0x2d/0x5a [ 1023.573166][T15893] copy_process+0x28b7/0x6b00 [ 1023.573181][T15893] ? _kstrtoul+0x170/0x170 [ 1023.573199][T15893] ? __cleanup_sighand+0x60/0x60 [ 1023.587172][T15893] ? __f_unlock_pos+0x19/0x20 [ 1023.591844][T15893] ? __kasan_check_read+0x11/0x20 [ 1023.591867][T15893] ? lock_downgrade+0x920/0x920 [ 1023.601734][T15893] ? vfs_write+0x34c/0x5d0 [ 1023.606148][T15893] _do_fork+0x146/0xfa0 [ 1023.606166][T15893] ? copy_init_mm+0x20/0x20 [ 1023.614806][T15893] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1023.614820][T15893] ? wait_for_completion+0x440/0x440 [ 1023.614841][T15893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 20:06:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00') 20:06:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() ioprio_get$pid(0x2, r1) [ 1023.631790][T15945] FAULT_INJECTION: forcing a failure. [ 1023.631790][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.631938][T15893] __x64_sys_clone+0x18d/0x250 [ 1023.649237][T15893] ? ksys_write+0x1cf/0x290 [ 1023.653744][T15893] ? __ia32_sys_vfork+0xc0/0xc0 [ 1023.658939][T15893] ? trace_hardirqs_off_caller+0x65/0x230 [ 1023.664656][T15893] ? trace_hardirqs_on+0x67/0x240 [ 1023.669680][T15893] do_syscall_64+0xfd/0x6a0 [ 1023.674179][T15893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.674194][T15893] RIP: 0033:0x4598e9 [ 1023.683933][T15893] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1023.703522][T15893] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1023.703534][T15893] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1023.703540][T15893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:06:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00') [ 1023.703546][T15893] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1023.703553][T15893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1023.703559][T15893] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1023.712235][T15945] CPU: 1 PID: 15945 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1023.759523][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.769587][T15945] Call Trace: [ 1023.772878][T15945] dump_stack+0x172/0x1f0 [ 1023.777212][T15945] should_fail.cold+0xa/0x15 [ 1023.781801][T15945] ? __kasan_check_read+0x11/0x20 [ 1023.786829][T15945] ? fault_create_debugfs_attr+0x180/0x180 [ 1023.792642][T15945] ? page_to_nid.part.0+0x20/0x20 [ 1023.797663][T15945] ? ___might_sleep+0x163/0x280 [ 1023.797678][T15945] __should_failslab+0x121/0x190 [ 1023.797697][T15945] should_failslab+0x9/0x14 [ 1023.811930][T15945] kmem_cache_alloc_node_trace+0x274/0x750 [ 1023.817738][T15945] ? kasan_unpoison_shadow+0x35/0x50 [ 1023.823024][T15945] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1023.828828][T15945] __kmalloc_node_track_caller+0x3d/0x70 [ 1023.828845][T15945] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1023.828859][T15945] __alloc_skb+0x10b/0x5e0 [ 1023.828871][T15945] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1023.828885][T15945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.828898][T15945] ? netlink_autobind.isra.0+0x228/0x310 [ 1023.828916][T15945] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 1023.868307][T15945] netlink_sendmsg+0x972/0xd60 [ 1023.873078][T15945] ? netlink_unicast+0x710/0x710 [ 1023.878021][T15945] ? aa_sock_msg_perm.isra.0+0xba/0x170 20:06:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x10\x10\x00\x00\x00\x00\x00\x00\x00') [ 1023.883566][T15945] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1023.889028][T15945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.895266][T15945] ? security_socket_sendmsg+0x8d/0xc0 [ 1023.900723][T15945] ? netlink_unicast+0x710/0x710 [ 1023.900740][T15945] sock_sendmsg+0xd7/0x130 [ 1023.900753][T15945] ___sys_sendmsg+0x803/0x920 [ 1023.900768][T15945] ? copy_msghdr_from_user+0x440/0x440 [ 1023.900783][T15945] ? __fget+0xa3/0x560 [ 1023.900797][T15945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1023.900808][T15945] ? __fget+0x384/0x560 [ 1023.900823][T15945] ? ksys_dup3+0x3e0/0x3e0 [ 1023.900840][T15945] ? __fget_light+0x1a9/0x230 [ 1023.914822][T15945] ? __fdget+0x1b/0x20 [ 1023.947800][T15945] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1023.954045][T15945] __sys_sendmsg+0x105/0x1d0 [ 1023.958643][T15945] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1023.963679][T15945] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1023.969750][T15945] __x64_sys_sendmsg+0x78/0xb0 [ 1023.974520][T15945] do_syscall_64+0xfd/0x6a0 [ 1023.979028][T15945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1023.984910][T15945] RIP: 0033:0x4598e9 [ 1023.988804][T15945] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.008403][T15945] RSP: 002b:00007f9f8ce85c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.016813][T15945] RAX: ffffffffffffffda RBX: 00007f9f8ce85c90 RCX: 00000000004598e9 [ 1024.024774][T15945] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1024.024781][T15945] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.024788][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce866d4 [ 1024.024795][T15945] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 20:06:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00') 20:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getpid() r1 = gettid() ioprio_get$pid(0x2, r1) 20:06:19 executing program 3 (fault-call:2 fault-nth:78): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 20:06:19 executing program 1 (fault-call:6 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) 20:06:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x05\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:19 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x1400, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1024.138502][T16029] FAULT_INJECTION: forcing a failure. [ 1024.138502][T16029] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.177640][T16035] FAULT_INJECTION: forcing a failure. [ 1024.177640][T16035] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.190891][T16029] CPU: 1 PID: 16029 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1024.198356][T16029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.208406][T16029] Call Trace: [ 1024.211702][T16029] dump_stack+0x172/0x1f0 [ 1024.216022][T16029] should_fail.cold+0xa/0x15 [ 1024.216040][T16029] ? fault_create_debugfs_attr+0x180/0x180 [ 1024.216058][T16029] ? page_to_nid.part.0+0x20/0x20 [ 1024.226413][T16029] ? ___might_sleep+0x163/0x280 [ 1024.226430][T16029] __should_failslab+0x121/0x190 [ 1024.226448][T16029] should_failslab+0x9/0x14 [ 1024.236270][T16029] kmem_cache_alloc+0x2aa/0x710 [ 1024.236289][T16029] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1024.236308][T16029] ptlock_alloc+0x20/0x70 [ 1024.245703][T16029] pte_alloc_one+0x6d/0x1a0 [ 1024.245719][T16029] __pte_alloc+0x20/0x310 [ 1024.245737][T16029] copy_page_range+0x1520/0x1ee0 [ 1024.265600][T16029] ? pmd_alloc+0x180/0x180 [ 1024.265613][T16029] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1024.265633][T16029] ? __rb_insert_augmented+0x20c/0xd90 [ 1024.279249][T16029] ? validate_mm_rb+0xa3/0xc0 [ 1024.279263][T16029] ? __vma_link_rb+0x275/0x370 [ 1024.279276][T16029] ? __kasan_check_write+0x14/0x20 [ 1024.279292][T16029] dup_mm+0xa67/0x1430 [ 1024.279311][T16029] ? vm_area_dup+0x170/0x170 [ 1024.290267][T16029] ? debug_mutex_init+0x2d/0x5a [ 1024.290284][T16029] copy_process+0x28b7/0x6b00 [ 1024.290298][T16029] ? _kstrtoul+0x170/0x170 [ 1024.290316][T16029] ? __cleanup_sighand+0x60/0x60 [ 1024.290328][T16029] ? __f_unlock_pos+0x19/0x20 [ 1024.290346][T16029] ? __kasan_check_read+0x11/0x20 [ 1024.304823][T16029] ? lock_downgrade+0x920/0x920 [ 1024.304835][T16029] ? vfs_write+0x34c/0x5d0 [ 1024.304853][T16029] _do_fork+0x146/0xfa0 [ 1024.318294][T16029] ? copy_init_mm+0x20/0x20 [ 1024.318308][T16029] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1024.318324][T16029] ? wait_for_completion+0x440/0x440 [ 1024.336941][T16029] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1024.336957][T16029] __x64_sys_clone+0x18d/0x250 [ 1024.336974][T16029] ? ksys_write+0x1cf/0x290 [ 1024.359803][T16029] ? __ia32_sys_vfork+0xc0/0xc0 [ 1024.359819][T16029] ? trace_hardirqs_off_caller+0x65/0x230 [ 1024.359835][T16029] ? trace_hardirqs_on+0x67/0x240 [ 1024.387278][T16029] do_syscall_64+0xfd/0x6a0 [ 1024.387299][T16029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.413174][T16029] RIP: 0033:0x4598e9 [ 1024.413190][T16029] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1024.413197][T16029] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1024.436664][T16029] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1024.436671][T16029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1024.436679][T16029] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.436686][T16029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1024.436693][T16029] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 20:06:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005b40)={{{@in6=@ipv4={[], [], @initdev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000005c40)=0xe8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x36) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000005c80)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000005d80)=0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r11, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000005fc0)={'vcan0\x00', r11}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r17}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r17, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r17, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r22, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r22, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000006000)={@rand_addr, @loopback, 0x0}, &(0x7f0000006040)=0xc) r24 = socket$nl_route(0x10, 0x3, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) r26 = socket$netlink(0x10, 0x3, 0x0) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r28}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r25, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r28, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r24, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r28, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000006080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000060c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006200)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000006300)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000066c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006680)={&(0x7f0000006340)={0x308, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0xfc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x7c, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r28}, {0x164, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xa292}}, {0x8, 0x6, r29}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x40000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x308}, 0x1, 0x0, 0x0, 0x40004a4}, 0xdd144f8744002a52) ioprio_get$pid(0x2, r1) [ 1024.452276][T16035] CPU: 1 PID: 16035 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1024.477074][T16035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.477080][T16035] Call Trace: [ 1024.477101][T16035] dump_stack+0x172/0x1f0 [ 1024.502631][T16035] should_fail.cold+0xa/0x15 [ 1024.502648][T16035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.502661][T16035] ? fault_create_debugfs_attr+0x180/0x180 [ 1024.502677][T16035] ? netlink_remove_tap+0x4d0/0x4d0 [ 1024.502694][T16035] __should_failslab+0x121/0x190 [ 1024.502709][T16035] should_failslab+0x9/0x14 [ 1024.502720][T16035] kmem_cache_alloc+0x47/0x710 [ 1024.502736][T16035] ? lock_acquire+0x190/0x410 [ 1024.502752][T16035] ? netlink_deliver_tap+0x146/0xbf0 [ 1024.546244][T16035] skb_clone+0x154/0x3d0 [ 1024.546265][T16035] netlink_deliver_tap+0x94d/0xbf0 [ 1024.556187][T16035] netlink_unicast+0x5a2/0x710 [ 1024.556203][T16035] ? netlink_attachskb+0x7c0/0x7c0 [ 1024.556222][T16035] ? _copy_from_iter_full+0x25d/0x8a0 [ 1024.565528][T16035] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1024.565544][T16035] ? __check_object_size+0x3d/0x437 [ 1024.565558][T16035] netlink_sendmsg+0x8a5/0xd60 [ 1024.565576][T16035] ? netlink_unicast+0x710/0x710 [ 1024.575394][T16035] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1024.575410][T16035] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1024.575424][T16035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.575440][T16035] ? security_socket_sendmsg+0x8d/0xc0 [ 1024.586481][T16035] ? netlink_unicast+0x710/0x710 [ 1024.586498][T16035] sock_sendmsg+0xd7/0x130 [ 1024.586510][T16035] ___sys_sendmsg+0x803/0x920 [ 1024.586528][T16035] ? copy_msghdr_from_user+0x440/0x440 [ 1024.596444][T16035] ? __fget+0xa3/0x560 [ 1024.596461][T16035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.596478][T16035] ? __fget+0x384/0x560 [ 1024.606927][T16035] ? ksys_dup3+0x3e0/0x3e0 [ 1024.606945][T16035] ? __fget_light+0x1a9/0x230 [ 1024.606957][T16035] ? __fdget+0x1b/0x20 [ 1024.606976][T16035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1024.618623][T16035] __sys_sendmsg+0x105/0x1d0 [ 1024.618639][T16035] ? __sys_sendmsg_sock+0xd0/0xd0 20:06:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00') [ 1024.618660][T16035] ? switch_fpu_return+0x1fa/0x4f0 [ 1024.629009][T16035] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1024.629028][T16035] __x64_sys_sendmsg+0x78/0xb0 [ 1024.629045][T16035] do_syscall_64+0xfd/0x6a0 [ 1024.629059][T16035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.629069][T16035] RIP: 0033:0x4598e9 [ 1024.629087][T16035] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:06:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\t\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1024.638120][T16035] RSP: 002b:00007f9f8ce85c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.638134][T16035] RAX: ffffffffffffffda RBX: 00007f9f8ce85c90 RCX: 00000000004598e9 [ 1024.638141][T16035] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1024.638153][T16035] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1024.702951][T16035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce866d4 [ 1024.713311][T16035] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 20:06:20 executing program 3 (fault-call:2 fault-nth:79): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1024.740416][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1024.812867][T16156] input: syz1 as /devices/virtual/input/input564 [ 1024.830937][T16159] FAULT_INJECTION: forcing a failure. [ 1024.830937][T16159] name failslab, interval 1, probability 0, space 0, times 0 20:06:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00?\x00\x00\x00\x00\x00\x00') 20:06:20 executing program 1 (fault-call:6 fault-nth:3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) [ 1024.876378][T16180] input: syz1 as /devices/virtual/input/input565 [ 1024.968964][T16159] CPU: 1 PID: 16159 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1024.976446][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.986580][T16159] Call Trace: [ 1024.989870][T16159] dump_stack+0x172/0x1f0 [ 1024.989895][T16159] should_fail.cold+0xa/0x15 [ 1024.989913][T16159] ? fault_create_debugfs_attr+0x180/0x180 [ 1024.989931][T16159] ? page_to_nid.part.0+0x20/0x20 [ 1025.009602][T16159] ? ___might_sleep+0x163/0x280 [ 1025.014458][T16159] __should_failslab+0x121/0x190 20:06:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x11\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 1025.019397][T16159] should_failslab+0x9/0x14 [ 1025.023899][T16159] kmem_cache_alloc+0x2aa/0x710 [ 1025.028747][T16159] ? validate_mm_rb+0xa3/0xc0 [ 1025.028766][T16159] vm_area_dup+0x21/0x170 [ 1025.028777][T16159] dup_mm+0x549/0x1430 [ 1025.028795][T16159] ? vm_area_dup+0x170/0x170 [ 1025.028811][T16159] ? debug_mutex_init+0x2d/0x5a [ 1025.028830][T16159] copy_process+0x28b7/0x6b00 [ 1025.028850][T16159] ? _kstrtoul+0x170/0x170 [ 1025.041873][T16159] ? __cleanup_sighand+0x60/0x60 [ 1025.041884][T16159] ? __f_unlock_pos+0x19/0x20 [ 1025.041901][T16159] ? __kasan_check_read+0x11/0x20 [ 1025.055958][T16159] ? lock_downgrade+0x920/0x920 [ 1025.055970][T16159] ? vfs_write+0x34c/0x5d0 [ 1025.055988][T16159] _do_fork+0x146/0xfa0 [ 1025.079793][T16159] ? copy_init_mm+0x20/0x20 [ 1025.079807][T16159] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1025.079824][T16159] ? wait_for_completion+0x440/0x440 [ 1025.098389][T16159] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1025.098408][T16159] __x64_sys_clone+0x18d/0x250 [ 1025.114635][T16159] ? ksys_write+0x1cf/0x290 [ 1025.119144][T16159] ? __ia32_sys_vfork+0xc0/0xc0 [ 1025.123997][T16159] ? trace_hardirqs_off_caller+0x65/0x230 [ 1025.129732][T16159] ? trace_hardirqs_on+0x67/0x240 [ 1025.129750][T16159] do_syscall_64+0xfd/0x6a0 [ 1025.129767][T16159] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.129777][T16159] RIP: 0033:0x4598e9 [ 1025.129790][T16159] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:06:20 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 1025.129796][T16159] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1025.129809][T16159] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1025.129815][T16159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.129822][T16159] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1025.129828][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1025.129834][T16159] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1025.222853][T16282] input: syz1 as /devices/virtual/input/input566 20:06:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x12\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:20 executing program 3 (fault-call:2 fault-nth:80): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1025.292289][T16279] FAULT_INJECTION: forcing a failure. [ 1025.292289][T16279] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.311823][T16279] CPU: 1 PID: 16279 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1025.319295][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.329352][T16279] Call Trace: [ 1025.332649][T16279] dump_stack+0x172/0x1f0 [ 1025.336991][T16279] should_fail.cold+0xa/0x15 [ 1025.341593][T16279] ? fault_create_debugfs_attr+0x180/0x180 [ 1025.347399][T16279] ? page_to_nid.part.0+0x20/0x20 [ 1025.347414][T16279] ? ___might_sleep+0x163/0x280 [ 1025.347436][T16279] __should_failslab+0x121/0x190 [ 1025.362215][T16279] should_failslab+0x9/0x14 [ 1025.366718][T16279] kmem_cache_alloc_node_trace+0x274/0x750 [ 1025.366734][T16279] ? refcount_sub_and_test_checked+0x154/0x200 [ 1025.366758][T16279] ? lock_downgrade+0x920/0x920 [ 1025.374287][T16354] FAULT_INJECTION: forcing a failure. 20:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") getpid() r1 = getpid() r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000040)) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpid() r3 = gettid() ioprio_get$pid(0x2, r3) [ 1025.374287][T16354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1025.378681][T16279] __kmalloc_node+0x3d/0x70 [ 1025.378776][T16279] qdisc_alloc+0xbb/0xa90 [ 1025.378795][T16279] ? do_raw_read_unlock+0x3f/0x70 [ 1025.396799][T16279] ? _raw_read_unlock+0x2d/0x50 [ 1025.396814][T16279] qdisc_create+0xec/0x1210 [ 1025.396828][T16279] ? nla_memcpy+0xb0/0xb0 [ 1025.396841][T16279] ? tc_get_qdisc+0xc10/0xc10 [ 1025.396854][T16279] ? __nla_parse+0x43/0x60 [ 1025.396870][T16279] tc_modify_qdisc+0x524/0x1c50 [ 1025.438171][T16279] ? qdisc_create+0x1210/0x1210 [ 1025.443028][T16279] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1025.448136][T16279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1025.454363][T16279] ? qdisc_create+0x1210/0x1210 [ 1025.454380][T16279] rtnetlink_rcv_msg+0x463/0xb00 [ 1025.454395][T16279] ? rtnetlink_put_metrics+0x580/0x580 [ 1025.454413][T16279] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1025.474846][T16279] ? __copy_skb_header+0x250/0x550 [ 1025.479951][T16279] netlink_rcv_skb+0x177/0x450 [ 1025.479966][T16279] ? rtnetlink_put_metrics+0x580/0x580 [ 1025.479978][T16279] ? netlink_ack+0xb30/0xb30 [ 1025.479998][T16279] ? netlink_deliver_tap+0x254/0xbf0 [ 1025.485503][T16352] input: syz1 as /devices/virtual/input/input568 [ 1025.490207][T16279] rtnetlink_rcv+0x1d/0x30 [ 1025.490222][T16279] netlink_unicast+0x531/0x710 [ 1025.490236][T16279] ? netlink_attachskb+0x7c0/0x7c0 [ 1025.490251][T16279] ? _copy_from_iter_full+0x25d/0x8a0 [ 1025.490265][T16279] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1025.490284][T16279] ? __check_object_size+0x3d/0x437 [ 1025.506420][T16279] netlink_sendmsg+0x8a5/0xd60 [ 1025.506438][T16279] ? netlink_unicast+0x710/0x710 [ 1025.506451][T16279] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1025.506467][T16279] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1025.515600][T16279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.515613][T16279] ? security_socket_sendmsg+0x8d/0xc0 [ 1025.515630][T16279] ? netlink_unicast+0x710/0x710 [ 1025.531777][T16279] sock_sendmsg+0xd7/0x130 [ 1025.531792][T16279] ___sys_sendmsg+0x803/0x920 [ 1025.531807][T16279] ? copy_msghdr_from_user+0x440/0x440 [ 1025.531825][T16279] ? __fget+0xa3/0x560 [ 1025.552220][T16279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1025.552238][T16279] ? __fget+0x384/0x560 [ 1025.552251][T16279] ? ksys_dup3+0x3e0/0x3e0 [ 1025.552267][T16279] ? __fget_light+0x1a9/0x230 [ 1025.552282][T16279] ? __fdget+0x1b/0x20 [ 1025.569386][T16279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1025.569404][T16279] __sys_sendmsg+0x105/0x1d0 [ 1025.569417][T16279] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1025.569437][T16279] ? switch_fpu_return+0x1fa/0x4f0 [ 1025.583413][T16279] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1025.583433][T16279] __x64_sys_sendmsg+0x78/0xb0 [ 1025.583447][T16279] do_syscall_64+0xfd/0x6a0 [ 1025.583464][T16279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.599151][T16279] RIP: 0033:0x4598e9 [ 1025.599166][T16279] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1025.599173][T16279] RSP: 002b:00007f9f8ce64c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.599185][T16279] RAX: ffffffffffffffda RBX: 00007f9f8ce64c90 RCX: 00000000004598e9 [ 1025.599192][T16279] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1025.599199][T16279] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1025.599206][T16279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce656d4 [ 1025.599218][T16279] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 [ 1025.645730][T16354] CPU: 1 PID: 16354 Comm: syz-executor.3 Not tainted 5.3.0 #0 20:06:21 executing program 1 (fault-call:6 fault-nth:4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) [ 1025.682027][T16354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.682032][T16354] Call Trace: [ 1025.682051][T16354] dump_stack+0x172/0x1f0 [ 1025.682071][T16354] should_fail.cold+0xa/0x15 [ 1025.682085][T16354] ? fault_create_debugfs_attr+0x180/0x180 [ 1025.682098][T16354] ? ___might_sleep+0x163/0x280 [ 1025.682116][T16354] should_fail_alloc_page+0x50/0x60 [ 1025.682128][T16354] __alloc_pages_nodemask+0x1a1/0x900 [ 1025.682142][T16354] ? stack_trace_consume_entry+0x190/0x190 [ 1025.682152][T16354] ? page_to_nid.part.0+0x20/0x20 [ 1025.682165][T16354] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1025.682176][T16354] ? __pte_alloc+0x1b5/0x310 [ 1025.682188][T16354] ? copy_page_range+0xef4/0x1ee0 [ 1025.682200][T16354] ? __kasan_check_read+0x11/0x20 [ 1025.682221][T16354] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1025.714525][T16354] alloc_pages_current+0x107/0x210 [ 1025.714543][T16354] pte_alloc_one+0x1b/0x1a0 [ 1025.714557][T16354] __pte_alloc+0x20/0x310 [ 1025.714570][T16354] copy_page_range+0x1520/0x1ee0 [ 1025.714593][T16354] ? pmd_alloc+0x180/0x180 [ 1025.714611][T16354] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1025.714627][T16354] ? __rb_insert_augmented+0x20c/0xd90 [ 1025.714645][T16354] ? validate_mm_rb+0xa3/0xc0 [ 1025.730565][T16354] ? __vma_link_rb+0x275/0x370 [ 1025.748026][T16354] ? __kasan_check_write+0x14/0x20 [ 1025.748041][T16354] dup_mm+0xa67/0x1430 [ 1025.748059][T16354] ? vm_area_dup+0x170/0x170 [ 1025.748079][T16354] ? debug_mutex_init+0x2d/0x5a [ 1025.776039][T16354] copy_process+0x28b7/0x6b00 [ 1025.776055][T16354] ? _kstrtoul+0x170/0x170 [ 1025.776073][T16354] ? __cleanup_sighand+0x60/0x60 [ 1025.776093][T16354] ? __f_unlock_pos+0x19/0x20 [ 1025.792243][T16354] ? __kasan_check_read+0x11/0x20 [ 1025.792263][T16354] ? lock_downgrade+0x920/0x920 [ 1025.792274][T16354] ? vfs_write+0x34c/0x5d0 [ 1025.792293][T16354] _do_fork+0x146/0xfa0 [ 1025.802558][T16354] ? copy_init_mm+0x20/0x20 [ 1025.802571][T16354] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1025.802585][T16354] ? wait_for_completion+0x440/0x440 [ 1025.802606][T16354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1025.802619][T16354] __x64_sys_clone+0x18d/0x250 [ 1025.802635][T16354] ? ksys_write+0x1cf/0x290 [ 1025.812637][T16354] ? __ia32_sys_vfork+0xc0/0xc0 [ 1025.812655][T16354] ? trace_hardirqs_off_caller+0x65/0x230 [ 1025.812665][T16354] ? trace_hardirqs_on+0x67/0x240 [ 1025.812683][T16354] do_syscall_64+0xfd/0x6a0 [ 1025.812698][T16354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1025.812708][T16354] RIP: 0033:0x4598e9 [ 1025.812722][T16354] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1025.812728][T16354] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1025.812744][T16354] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1025.824055][T16354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1025.824063][T16354] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1025.824071][T16354] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:21 executing program 3 (fault-call:2 fault-nth:81): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1025.824079][T16354] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1026.055351][T16352] input: syz1 as /devices/virtual/input/input569 20:06:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") init_module(&(0x7f0000001680)='em\x06\x86\xff\x03\x00\x00et0\x06\x00\x00\x00', 0xffeab, &(0x7f00000016c0)='\xb7\xcdk\xcb\xa9\xf1F\xa8\x00\xe2T\x1b\x15\x91oo\xce\\M\x1dG\xf2\x80\x10,\x01\xcd\x92\xc3\xc5o\x83\xb9\x99c\x9fc\xb0+\xc7LU?p\xef\xc8\xc6k\xef\x1d\x1a\x14pI\a:\xdc\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00') 20:06:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0xfffffffffffff146]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00\x00\x00\x00\x14\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 20:06:21 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002a000100"/49], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, r3}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfff6}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 20:06:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r1 = getpid() getpid() ioprio_get$pid(0x2, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d6f0bcf6c7bf070") ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)={0x4, 0xd73, 0x9, 0x0, 0x0, [{r2, 0x0, 0x4}, {r0, 0x0, 0xdc43}, {0xffffffffffffffff, 0x0, 0x9}, {0xffffffffffffffff, 0x0, 0x800}, {r3, 0x0, 0x4}, {r0, 0x0, 0x3ff}, {r4, 0x0, 0x10000}, {r0, 0x0, 0x8}, {r5, 0x0, 0x3f}]}) [ 1026.218988][T16403] FAULT_INJECTION: forcing a failure. [ 1026.218988][T16403] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.246837][T16413] FAULT_INJECTION: forcing a failure. [ 1026.246837][T16413] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.263857][T16403] CPU: 1 PID: 16403 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1026.271346][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.281506][T16403] Call Trace: [ 1026.284790][T16403] dump_stack+0x172/0x1f0 [ 1026.289116][T16403] should_fail.cold+0xa/0x15 [ 1026.293694][T16403] ? qdisc_alloc+0xbb/0xa90 [ 1026.298188][T16403] ? fault_create_debugfs_attr+0x180/0x180 [ 1026.303989][T16403] ? page_to_nid.part.0+0x20/0x20 [ 1026.309005][T16403] ? ___might_sleep+0x163/0x280 [ 1026.309022][T16403] __should_failslab+0x121/0x190 [ 1026.309037][T16403] should_failslab+0x9/0x14 [ 1026.309047][T16403] kmem_cache_alloc_trace+0x2d3/0x790 [ 1026.309068][T16403] ? fault_create_debugfs_attr+0x180/0x180 [ 1026.328659][T16403] ? page_to_nid.part.0+0x20/0x20 [ 1026.328682][T16403] tcf_block_get_ext+0x882/0x1610 [ 1026.344474][T16403] tcf_block_get+0xb9/0x100 [ 1026.348981][T16403] ? tcf_block_get_ext+0x1610/0x1610 [ 1026.354273][T16403] ? walker_check_empty+0x70/0x70 [ 1026.359297][T16403] ? lockdep_init_map+0x1be/0x6d0 [ 1026.359389][T16403] ? dsmark_dump.cold+0x40/0x40 [ 1026.359408][T16403] ? __kasan_check_write+0x14/0x20 [ 1026.374334][T16403] sfb_init+0x36/0xa7 [ 1026.376549][T16420] input: syz1 as /devices/virtual/input/input570 [ 1026.378301][T16403] ? sfb_change+0xe90/0xe90 [ 1026.378318][T16403] qdisc_create+0x4ee/0x1210 [ 1026.393680][T16403] ? tc_get_qdisc+0xc10/0xc10 [ 1026.398350][T16403] ? __nla_parse+0x43/0x60 [ 1026.398365][T16403] tc_modify_qdisc+0x524/0x1c50 [ 1026.407636][T16403] ? qdisc_create+0x1210/0x1210 [ 1026.412540][T16403] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1026.412556][T16403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1026.412571][T16403] ? qdisc_create+0x1210/0x1210 [ 1026.428709][T16403] rtnetlink_rcv_msg+0x463/0xb00 [ 1026.428727][T16403] ? rtnetlink_put_metrics+0x580/0x580 [ 1026.439083][T16403] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1026.444359][T16403] ? __copy_skb_header+0x250/0x550 [ 1026.449467][T16403] netlink_rcv_skb+0x177/0x450 [ 1026.449484][T16403] ? rtnetlink_put_metrics+0x580/0x580 [ 1026.449496][T16403] ? netlink_ack+0xb30/0xb30 [ 1026.449513][T16403] ? netlink_deliver_tap+0x254/0xbf0 [ 1026.464259][T16403] rtnetlink_rcv+0x1d/0x30 [ 1026.473916][T16403] netlink_unicast+0x531/0x710 [ 1026.478668][T16403] ? netlink_attachskb+0x7c0/0x7c0 [ 1026.483789][T16403] ? _copy_from_iter_full+0x25d/0x8a0 [ 1026.489151][T16403] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1026.494858][T16403] ? __check_object_size+0x3d/0x437 [ 1026.500048][T16403] netlink_sendmsg+0x8a5/0xd60 [ 1026.504797][T16403] ? netlink_unicast+0x710/0x710 [ 1026.509719][T16403] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1026.515267][T16403] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1026.520725][T16403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1026.526952][T16403] ? security_socket_sendmsg+0x8d/0xc0 [ 1026.532407][T16403] ? netlink_unicast+0x710/0x710 [ 1026.537329][T16403] sock_sendmsg+0xd7/0x130 [ 1026.541730][T16403] ___sys_sendmsg+0x803/0x920 [ 1026.546400][T16403] ? copy_msghdr_from_user+0x440/0x440 [ 1026.551852][T16403] ? __fget+0xa3/0x560 [ 1026.555916][T16403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1026.562146][T16403] ? __fget+0x384/0x560 [ 1026.566292][T16403] ? ksys_dup3+0x3e0/0x3e0 [ 1026.570702][T16403] ? __fget_light+0x1a9/0x230 [ 1026.575367][T16403] ? __fdget+0x1b/0x20 [ 1026.579537][T16403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1026.585767][T16403] __sys_sendmsg+0x105/0x1d0 [ 1026.590346][T16403] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1026.595376][T16403] ? switch_fpu_return+0x1fa/0x4f0 [ 1026.600502][T16403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1026.606562][T16403] __x64_sys_sendmsg+0x78/0xb0 [ 1026.611316][T16403] do_syscall_64+0xfd/0x6a0 [ 1026.615820][T16403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1026.621698][T16403] RIP: 0033:0x4598e9 [ 1026.625585][T16403] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1026.645195][T16403] RSP: 002b:00007f9f8ce64c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.653596][T16403] RAX: ffffffffffffffda RBX: 00007f9f8ce64c90 RCX: 00000000004598e9 [ 1026.661558][T16403] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1026.669515][T16403] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1026.677473][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce656d4 [ 1026.685437][T16403] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 [ 1026.693412][T16413] CPU: 0 PID: 16413 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1026.700864][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.710916][T16413] Call Trace: [ 1026.714209][T16413] dump_stack+0x172/0x1f0 [ 1026.718541][T16413] should_fail.cold+0xa/0x15 [ 1026.720167][T16403] kasan: CONFIG_KASAN_INLINE enabled [ 1026.723236][T16413] ? fault_create_debugfs_attr+0x180/0x180 [ 1026.723251][T16413] ? page_to_nid.part.0+0x20/0x20 [ 1026.723266][T16413] ? ___might_sleep+0x163/0x280 [ 1026.723289][T16413] __should_failslab+0x121/0x190 [ 1026.728636][T16403] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1026.734419][T16413] should_failslab+0x9/0x14 [ 1026.734430][T16413] kmem_cache_alloc+0x2aa/0x710 [ 1026.734447][T16413] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1026.734464][T16413] ptlock_alloc+0x20/0x70 [ 1026.734484][T16413] pte_alloc_one+0x6d/0x1a0 [ 1026.739594][T16403] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1026.744307][T16413] __pte_alloc+0x20/0x310 [ 1026.749233][T16403] CPU: 1 PID: 16403 Comm: syz-executor.1 Not tainted 5.3.0 #0 [ 1026.757287][T16413] copy_page_range+0x1520/0x1ee0 [ 1026.761757][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.766592][T16413] ? pmd_alloc+0x180/0x180 [ 1026.772809][T16403] RIP: 0010:qdisc_put+0x25/0x90 [ 1026.777120][T16413] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1026.781600][T16403] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 81 2f bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 1026.788507][T16413] ? __rb_insert_augmented+0x20c/0xd90 [ 1026.792797][T16403] RSP: 0018:ffff88803f19f488 EFLAGS: 00010202 [ 1026.800227][T16413] ? validate_mm_rb+0xa3/0xc0 [ 1026.805128][T16403] RAX: dffffc0000000000 RBX: ffff888058f75300 RCX: ffffc9000835b000 [ 1026.815163][T16413] ? __vma_link_rb+0x275/0x370 [ 1026.819551][T16403] RDX: 0000000000000002 RSI: ffffffff85b3557f RDI: 0000000000000010 [ 1026.824374][T16413] ? __kasan_check_write+0x14/0x20 [ 1026.829883][T16403] RBP: ffff88803f19f498 R08: ffff88805de0e540 R09: fffffbfff11cae5f [ 1026.849462][T16413] dup_mm+0xa67/0x1430 [ 1026.854886][T16403] R10: fffffbfff11cae5e R11: ffffffff88e572f3 R12: 0000000000000000 [ 1026.860929][T16413] ? vm_area_dup+0x170/0x170 [ 1026.865931][T16403] R13: ffff888058f75300 R14: ffff888093e1c980 R15: ffff888058f7533c [ 1026.873883][T16413] ? debug_mutex_init+0x2d/0x5a [ 1026.878610][T16403] FS: 00007f9f8ce65700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1026.886557][T16413] copy_process+0x28b7/0x6b00 [ 1026.891637][T16403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.899587][T16413] ? _kstrtoul+0x170/0x170 [ 1026.903622][T16403] CR2: 0000001b30923000 CR3: 000000005a4bf000 CR4: 00000000001406e0 [ 1026.911572][T16413] ? __cleanup_sighand+0x60/0x60 [ 1026.916136][T16403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.924220][T16413] ? __f_unlock_pos+0x19/0x20 [ 1026.929045][T16403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1026.937965][T16413] ? __kasan_check_read+0x11/0x20 [ 1026.942604][T16403] Call Trace: [ 1026.949183][T16413] ? lock_downgrade+0x920/0x920 [ 1026.953565][T16403] sfb_destroy+0x61/0x80 [ 1026.961506][T16413] ? vfs_write+0x34c/0x5d0 [ 1026.966411][T16403] ? sfb_zero_all_buckets+0x20/0x20 [ 1026.974358][T16413] _do_fork+0x146/0xfa0 [ 1026.979004][T16403] qdisc_create+0xbc6/0x1210 [ 1026.986953][T16413] ? copy_init_mm+0x20/0x20 [ 1026.991946][T16403] ? tc_get_qdisc+0xc10/0xc10 [ 1026.995228][T16413] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1027.000050][T16403] ? __nla_parse+0x43/0x60 [ 1027.004258][T16413] ? wait_for_completion+0x440/0x440 [ 1027.008654][T16403] tc_modify_qdisc+0x524/0x1c50 [ 1027.013847][T16413] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1027.017976][T16403] ? qdisc_create+0x1210/0x1210 [ 1027.022532][T16413] __x64_sys_clone+0x18d/0x250 [ 1027.022549][T16413] ? ksys_write+0x1cf/0x290 [ 1027.027040][T16403] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 1027.031690][T16413] ? __ia32_sys_vfork+0xc0/0xc0 [ 1027.037208][T16403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1027.041593][T16413] ? trace_hardirqs_off_caller+0x65/0x230 [ 1027.046850][T16403] ? qdisc_create+0x1210/0x1210 [ 1027.051671][T16413] ? trace_hardirqs_on+0x67/0x240 [ 1027.057895][T16403] rtnetlink_rcv_msg+0x463/0xb00 [ 1027.062714][T16413] do_syscall_64+0xfd/0x6a0 [ 1027.067447][T16403] ? rtnetlink_put_metrics+0x580/0x580 [ 1027.071923][T16413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.077000][T16403] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1027.081817][T16413] RIP: 0033:0x4598e9 [ 1027.088033][T16403] ? __copy_skb_header+0x250/0x550 [ 1027.093719][T16413] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.098547][T16403] netlink_rcv_skb+0x177/0x450 [ 1027.103535][T16413] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1027.108447][T16403] ? rtnetlink_put_metrics+0x580/0x580 [ 1027.112914][T16413] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1027.118344][T16403] ? netlink_ack+0xb30/0xb30 [ 1027.124201][T16413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.129470][T16403] ? netlink_deliver_tap+0x254/0xbf0 [ 1027.133348][T16413] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.138435][T16403] rtnetlink_rcv+0x1d/0x30 [ 1027.158017][T16413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1027.162755][T16403] netlink_unicast+0x531/0x710 [ 1027.171132][T16413] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1027.176564][T16403] ? netlink_attachskb+0x7c0/0x7c0 [ 1027.240484][T16403] ? _copy_from_iter_full+0x25d/0x8a0 [ 1027.244928][ T3907] kobject: 'loop3' (00000000dc51a6ab): kobject_uevent_env [ 1027.245868][T16403] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1027.255110][ T3907] kobject: 'loop3' (00000000dc51a6ab): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1027.258643][T16403] ? __check_object_size+0x3d/0x437 20:06:22 executing program 3 (fault-call:2 fault-nth:82): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1027.258663][T16403] netlink_sendmsg+0x8a5/0xd60 [ 1027.278721][T16403] ? netlink_unicast+0x710/0x710 [ 1027.283666][T16403] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1027.289219][T16403] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1027.294681][T16403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1027.300918][T16403] ? security_socket_sendmsg+0x8d/0xc0 [ 1027.306290][T16533] FAULT_INJECTION: forcing a failure. [ 1027.306290][T16533] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.306372][T16403] ? netlink_unicast+0x710/0x710 [ 1027.306386][T16403] sock_sendmsg+0xd7/0x130 [ 1027.306404][T16403] ___sys_sendmsg+0x803/0x920 [ 1027.321351][T16533] CPU: 0 PID: 16533 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 1027.323898][T16403] ? copy_msghdr_from_user+0x440/0x440 [ 1027.328302][T16533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.332960][T16403] ? __fget+0xa3/0x560 [ 1027.340377][T16533] Call Trace: [ 1027.345816][T16403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1027.355840][T16533] dump_stack+0x172/0x1f0 [ 1027.359878][T16403] ? __fget+0x384/0x560 [ 1027.363137][T16533] should_fail.cold+0xa/0x15 [ 1027.369345][T16403] ? ksys_dup3+0x3e0/0x3e0 [ 1027.373646][T16533] ? fault_create_debugfs_attr+0x180/0x180 [ 1027.377772][T16403] ? __fget_light+0x1a9/0x230 [ 1027.382331][T16533] ? page_to_nid.part.0+0x20/0x20 [ 1027.386724][T16403] ? __fdget+0x1b/0x20 [ 1027.392530][T16533] ? ___might_sleep+0x163/0x280 [ 1027.397178][T16403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1027.402174][T16533] __should_failslab+0x121/0x190 [ 1027.406213][T16403] __sys_sendmsg+0x105/0x1d0 [ 1027.411033][T16533] should_failslab+0x9/0x14 [ 1027.417250][T16403] ? __sys_sendmsg_sock+0xd0/0xd0 [ 1027.422154][T16533] kmem_cache_alloc+0x2aa/0x710 [ 1027.426724][T16403] ? switch_fpu_return+0x1fa/0x4f0 [ 1027.431196][T16533] ? validate_mm_rb+0xa3/0xc0 [ 1027.436188][T16403] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1027.441012][T16533] vm_area_dup+0x21/0x170 [ 1027.446094][T16403] __x64_sys_sendmsg+0x78/0xb0 [ 1027.450740][T16533] dup_mm+0x549/0x1430 [ 1027.456778][T16403] do_syscall_64+0xfd/0x6a0 [ 1027.461080][T16533] ? vm_area_dup+0x170/0x170 [ 1027.465813][T16403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.469857][T16533] ? debug_mutex_init+0x2d/0x5a [ 1027.474333][T16403] RIP: 0033:0x4598e9 [ 1027.478896][T16533] copy_process+0x28b7/0x6b00 [ 1027.484759][T16403] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.489751][T16533] ? _kstrtoul+0x170/0x170 [ 1027.493611][T16403] RSP: 002b:00007f9f8ce64c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.498267][T16533] ? __cleanup_sighand+0x60/0x60 [ 1027.517927][T16403] RAX: ffffffffffffffda RBX: 00007f9f8ce64c90 RCX: 00000000004598e9 [ 1027.522751][T16533] ? __f_unlock_pos+0x19/0x20 [ 1027.531136][T16403] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1027.536046][T16533] ? __kasan_check_read+0x11/0x20 [ 1027.543979][T16403] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1027.543995][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8ce656d4 [ 1027.548650][T16533] ? lock_downgrade+0x920/0x920 [ 1027.556589][T16403] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000006 [ 1027.561589][T16533] ? vfs_write+0x34c/0x5d0 [ 1027.569529][T16403] Modules linked in: [ 1027.577481][T16533] _do_fork+0x146/0xfa0 [ 1027.583075][T16403] ---[ end trace aa8aca46a2612a4d ]--- [ 1027.590258][T16533] ? copy_init_mm+0x20/0x20 [ 1027.590272][T16533] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1027.590285][T16533] ? wait_for_completion+0x440/0x440 [ 1027.590304][T16533] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1027.590321][T16533] __x64_sys_clone+0x18d/0x250 [ 1027.594796][T16403] RIP: 0010:qdisc_put+0x25/0x90 [ 1027.598575][T16533] ? ksys_write+0x1cf/0x290 [ 1027.598590][T16533] ? __ia32_sys_vfork+0xc0/0xc0 [ 1027.598611][T16533] ? trace_hardirqs_off_caller+0x65/0x230 [ 1027.602822][T16403] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 81 2f bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 1027.608164][T16533] ? trace_hardirqs_on+0x67/0x240 [ 1027.608181][T16533] do_syscall_64+0xfd/0x6a0 [ 1027.608201][T16533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.612762][T16403] RSP: 0018:ffff88803f19f488 EFLAGS: 00010202 [ 1027.618193][T16533] RIP: 0033:0x4598e9 [ 1027.618207][T16533] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.618213][T16533] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1027.623567][T16403] RAX: dffffc0000000000 RBX: ffff888058f75300 RCX: ffffc9000835b000 [ 1027.629694][T16533] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1027.629701][T16533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1027.629709][T16533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1027.629716][T16533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 20:06:23 executing program 3 (fault-call:2 fault-nth:83): r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1027.629724][T16533] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1027.639849][T16410] kobject: 'event4' (000000002b0284f8): kobject_cleanup, parent 00000000e08e1d55 [ 1027.646277][T16403] RDX: 0000000000000002 RSI: ffffffff85b3557f RDI: 0000000000000010 [ 1027.656225][T16410] kobject: 'event4' (000000002b0284f8): calling ktype release [ 1027.680587][T16403] RBP: ffff88803f19f498 R08: ffff88805de0e540 R09: fffffbfff11cae5f [ 1027.687893][T16410] kobject: 'event4': free name [ 1027.691397][T16403] R10: fffffbfff11cae5e R11: ffffffff88e572f3 R12: 0000000000000000 [ 1027.702331][T16410] kobject: 'input570' (000000000565b843): kobject_uevent_env [ 1027.720867][T16403] R13: ffff888058f75300 R14: ffff888093e1c980 R15: ffff888058f7533c [ 1027.734059][T16410] kobject: 'input570' (000000000565b843): fill_kobj_path: path = '/devices/virtual/input/input570' [ 1027.737359][T16403] FS: 00007f9f8ce65700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1027.767799][ T3907] kobject: 'loop3' (00000000dc51a6ab): kobject_uevent_env [ 1027.769782][T16410] kobject: 'input570' (000000000565b843): kobject_cleanup, parent 00000000e08e1d55 [ 1027.779982][ T3907] kobject: 'loop3' (00000000dc51a6ab): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1027.789638][T16410] kobject: 'input570' (000000000565b843): calling ktype release [ 1027.812327][T16535] FAULT_INJECTION: forcing a failure. [ 1027.812327][T16535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1027.815096][T16403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1027.828982][T16410] kobject: 'input570': free name [ 1027.830520][T16403] CR2: 0000001b30923000 CR3: 000000005a4bf000 CR4: 00000000001406e0 [ 1027.847047][T16420] kobject: 'input571' (00000000046dee37): kobject_add_internal: parent: 'input', set: 'devices' [ 1027.849255][T16535] CPU: 1 PID: 16535 Comm: syz-executor.3 Tainted: G D 5.3.0 #0 [ 1027.862532][T16420] kobject: 'input571' (00000000046dee37): kobject_uevent_env [ 1027.865127][T16535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.865132][T16535] Call Trace: [ 1027.865157][T16535] dump_stack+0x172/0x1f0 [ 1027.865184][T16535] should_fail.cold+0xa/0x15 [ 1027.874912][T16420] kobject: 'input571' (00000000046dee37): fill_kobj_path: path = '/devices/virtual/input/input571' [ 1027.884571][T16535] ? fault_create_debugfs_attr+0x180/0x180 [ 1027.884586][T16535] ? ___might_sleep+0x163/0x280 [ 1027.884605][T16535] should_fail_alloc_page+0x50/0x60 [ 1027.884616][T16535] __alloc_pages_nodemask+0x1a1/0x900 [ 1027.884630][T16535] ? stack_trace_consume_entry+0x190/0x190 [ 1027.884640][T16535] ? page_to_nid.part.0+0x20/0x20 [ 1027.884651][T16535] ? __alloc_pages_slowpath+0x2520/0x2520 [ 1027.884669][T16535] ? __pte_alloc+0x1b5/0x310 [ 1027.896738][T16420] kobject: 'input571' (00000000046dee37): fill_kobj_path: path = '/devices/virtual/input/input571' [ 1027.905557][T16535] ? copy_page_range+0xef4/0x1ee0 [ 1027.905571][T16535] ? __kasan_check_read+0x11/0x20 [ 1027.905587][T16535] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1027.905602][T16535] alloc_pages_current+0x107/0x210 [ 1027.905618][T16535] pte_alloc_one+0x1b/0x1a0 [ 1027.905633][T16535] __pte_alloc+0x20/0x310 [ 1027.905646][T16535] copy_page_range+0x1520/0x1ee0 [ 1027.905672][T16535] ? pmd_alloc+0x180/0x180 [ 1027.912579][T16403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1027.917172][T16535] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1027.917190][T16535] ? __rb_insert_augmented+0x20c/0xd90 [ 1027.917202][T16535] ? validate_mm_rb+0xa3/0xc0 [ 1027.917219][T16535] ? __vma_link_rb+0x275/0x370 [ 1027.928391][T16420] input: syz1 as /devices/virtual/input/input571 [ 1027.935584][T16535] ? __kasan_check_write+0x14/0x20 [ 1027.935602][T16535] dup_mm+0xa67/0x1430 [ 1027.935621][T16535] ? vm_area_dup+0x170/0x170 [ 1027.935636][T16535] ? debug_mutex_init+0x2d/0x5a [ 1027.935653][T16535] copy_process+0x28b7/0x6b00 [ 1027.947114][T16403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1027.951896][T16535] ? _kstrtoul+0x170/0x170 [ 1027.951918][T16535] ? __cleanup_sighand+0x60/0x60 [ 1027.951930][T16535] ? __f_unlock_pos+0x19/0x20 [ 1027.951941][T16535] ? __kasan_check_read+0x11/0x20 [ 1027.951958][T16535] ? lock_downgrade+0x920/0x920 [ 1027.951968][T16535] ? vfs_write+0x34c/0x5d0 [ 1027.951982][T16535] _do_fork+0x146/0xfa0 [ 1027.951995][T16535] ? copy_init_mm+0x20/0x20 [ 1027.952014][T16535] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 1027.964935][T16420] kobject: 'event4' (0000000069f1cd0b): kobject_add_internal: parent: 'input571', set: 'devices' [ 1027.965349][T16535] ? wait_for_completion+0x440/0x440 [ 1027.969970][T16403] Kernel panic - not syncing: Fatal exception [ 1027.974230][T16535] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1028.213235][T16535] __x64_sys_clone+0x18d/0x250 [ 1028.217983][T16535] ? ksys_write+0x1cf/0x290 [ 1028.222475][T16535] ? __ia32_sys_vfork+0xc0/0xc0 [ 1028.227311][T16535] ? trace_hardirqs_off_caller+0x65/0x230 [ 1028.233008][T16535] ? trace_hardirqs_on+0x67/0x240 [ 1028.238018][T16535] do_syscall_64+0xfd/0x6a0 [ 1028.242508][T16535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1028.248381][T16535] RIP: 0033:0x4598e9 [ 1028.252265][T16535] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1028.271847][T16535] RSP: 002b:00007fef4a7a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1028.280240][T16535] RAX: ffffffffffffffda RBX: 00007fef4a7a4c90 RCX: 00000000004598e9 [ 1028.288192][T16535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1028.296145][T16535] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1028.304095][T16535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef4a7a56d4 [ 1028.312047][T16535] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 0000000000000004 [ 1028.321385][T16403] Kernel Offset: disabled [ 1028.325708][T16403] Rebooting in 86400 seconds..