0e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) pipe2(&(0x7f0000000040), 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:21 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r0 = gettid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0xeb, 0x3, 0x9e, "539d688d008440baa102e42c581d9b50", "85a914b03518312764da089cb8fb0143780579d4f47deaeab4aa77b207ff71547fb19cfe6cc48eea6a8289826222f989e1f2c65cdd7ac6a8b4ca15c0af235921ae1dd702cca4580dc48ac57bb80ae2e54dcc8d1edff7191c5391b395c0847b04ad5830d9388a4bc155b46f905e1cab6d1461d0f153f7d58390c78896f583e28424077f91ba829a4f18e40bc330caec97808ad400cb125267fe112736ec8f156624bf00af04fbdaf953d91a0b1e43d2e577525e80c402c6dda534137d2ef530560dcfd3b385e9faa8bb5df2216b8dbd36ed75536d4891"}, 0xeb, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x7439, 0x6, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) mknodat(0xffffffffffffffff, 0x0, 0x400, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fallocate(r2, 0x11, 0x0, 0x100000001) 04:44:21 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) pipe2(&(0x7f0000000040), 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:21 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) pipe2(&(0x7f0000000040), 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:21 executing program 1: creat(0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000180)={0x1, 0xd3, 0x286}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5008820}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x2000c800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000140)={'ipvlan0\x00'}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 04:44:21 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20300, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000080)) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fff, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000240)="daf5992042eebbbf5728169621f629c2c2d513a7a506fba5e5b1a1ecfb13761478389076a7ea5c62a896bd95427e0ec7f06b9b665578be01dd1ad3af5dbf3371ede9ade4cb4aa9f26444f94a602e6e0554e3d1a4f4cc2b8b0a781db89e8f177890a156083c3293cca34ff671f0f7e1cdac08649df865bec65827af454be4f393c6ac4c9cc4c799b14a78d75cad54e1e75b2e13a32c0bcc623f08434bd7baa6ce035247de9b02fcf7", 0xa8, 0xd897}, {&(0x7f0000000080)="9f304c6ebd065dd8bcc58e6aaf640abe5b92a1f3b4c755d65c30166eb02d3e3e38231a727e47f8bd80ec4513", 0x2c, 0x9}, {&(0x7f0000000300)="a72613c1b5168277976b343cdc6ab6e71abb10918db298df36c422683f42955f7f06444a9cf613a8bd3d1fa4d1850d04f8d3eeda14a566f60a3c01e8570e37e88af5087692f6a97ecd796e72a39b7d99ee9ae37d8f4e288102e73dfb217ddb9397903e15488ae040d3c04cc1ec6c129ac0c027b146d3345689c53964a26d67c589be319d899ae8f1686a60f90334af2829f224fb1e2ba0a167f7a63a4b90a6c05ac77165f91b35b20d545a7e30d37dd536119525d17ad36b4fb940f7fdc673103a0f3cafe3d5ae2aaa8dbb5343489b08cfe6c66fb624732eb932fcf19e146c96e1822da6fa72", 0xe6, 0x1}, {&(0x7f0000000180)="3784f65d92177f9a5a91eb6a5ed14f13a32bb44a0509e18dc3", 0x19, 0x1}, {&(0x7f00000001c0), 0x0, 0x1}, {&(0x7f0000000400)="ec30", 0x2, 0x6}, {&(0x7f0000000440)="cca87eeab444ec497606b5e7acc98cd989b4a1c779e6633d5ac8e13751ed543a1f938fd715e9ef3fae1843f453a708", 0x2f, 0x9}, {&(0x7f0000000480)="64da1dba30ba38d3526e70d8a663c110186885541e128b4d79568d25979b0ac6acf9d1e8adb6e6", 0x27, 0x7}], 0x42, &(0x7f0000000580)={[{@check_int_print_mask={'check_int_print_mask', 0x3d, 0xf1e}}, {@noacl='noacl'}, {@fragment_metadata='fragment=metadata'}], [{@smackfsroot={'smackfsroot', 0x3d, '$'}}, {@fsmagic={'fsmagic', 0x3d, 0x38bf}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@subj_type={'subj_type', 0x3d, 'wlan0,'}}]}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x3}]}}]}, @IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) 04:44:21 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 352.974629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 353.061365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.142358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.217923] net_ratelimit: 17 callbacks suppressed [ 353.217928] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:22 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgid(r0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x8, 0x4}]}, 0xc, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:22 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f070001241a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1f00000000000000600012800b000100621c00050800000500262e0001000000050019007e73000005002b000200000c008f0003000021001a000008000a00b4f118eb2500"/81, @ANYRES32=0x0, @ANYBLOB="6b4062de49995ec6e70a03102626088ddf0795ef52126fdf16e3b988755c811321eca62851b299b9626f75d981809d9cd946001dc9458992ac3b903af52938dff87cd217b3b7aa135af634457e23662666ad14c40a92cc06ce385f72a7dda2c0180199a369493707c844"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) [ 353.473298] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:22 executing program 5: socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x41484, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) rmdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x20, 0x9, &(0x7f00000015c0)=[{&(0x7f00000000c0)="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", 0xfe, 0xfffffffffffffffe}, {&(0x7f0000001700)="2ec8ef14cab6c1771a67fbc33ddf3e6e9b94a5c250251160ffa6941c8733831c5897d5159095d9526b03726ca0316969cb4ead16bbc9994140c1ad8181f164414cf2d61ddb3013b7955eb20029776b82e24a58128e7f2fb44e1984e3f96900000000", 0x62, 0x3}, {&(0x7f0000000280)="d54b489737d2fc1507a7fe42d8fb3f893e4a8455cf0d2eb282d9f7dccd2230f73997f1382af3c1d20d9021e99a090bf8617e7c17fd64385f2daba837613ec870d2f93989d7e86c4d1324decf360c4fcccb10ffbed5e2eee65bda9ce349c181a140ad5b70d48787eded05772bdefae21ba99e4e885a51af671ce91bf3bf3ad7052651a0a77b1f29e4987b3edfe661279efce69658006940de3fe223785ca345d0c6b67ee5f31024e0ac5aec7145d5b15ac45c8a7422", 0xb5, 0x3}, {&(0x7f0000000340)="fff02e62d9d67a58068737f9e0892d23aca316e1a6ef74b969955485f12b8ffd2cf26d57c3fa06bb8c891c84be8a41943e761fd662", 0x35, 0x1000}, {&(0x7f0000000380)="cd34faabdcb315288d97bda888b5f2f050a99b0dd5ae179ae5b3458f024c2a6620827a9fe5524d", 0x27, 0x13}, {&(0x7f0000001b00)="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", 0x1000, 0x3}, {&(0x7f00000003c0)="336e61296e0c44deb83971b99bdeaaa5fa4bb61a33bdb9ff257c1e96df22226b93fc9270ebb948c84d32279bc23ffa6a500d9de7d79e46f024f513a0f0b3794f2e1c781e67c193a3d4e886109348d68019a85a2dc0b30c11bdd8f1cc08cacec1ce1be094a2fabf8f74058c697bd656a369ed1a2474407bca9f0315315490787c98d611c34f898cbc7a16ad4b08cb42865ccdc9", 0x93, 0x3ff}, {&(0x7f0000000480)="ce226da9ecaed36ff15692dabdeef578e34de5662a119cf66130621f99f8d77c6ee177a246c1e95ce2688d24dfe2bec7faf87b064ea1f708", 0x38, 0x1}, {&(0x7f0000001500)="0b6cf0cd949356bc779c1888e80e74b550e3d8a795f5f3303a55431d503089a50742fc3fde420db7c2184b49a9971215b315cff76e86022b194ac0c164f1856cef6fc78e5998b6ffc1c7ef9e179c357a9585efcfcd28f24465dd828936ef423b609614cf0b3b44aa14589de2fe56b8dade96fe5b2770e2dde82bfaa67968fc7a38fcbcda855ebd445b350b29f729caeca2360ccdcae8b728590ae69454f6eee06637ed1bef2df443b663e06a9a08ebe9a6a374bf98893b4d9e8f4ec9", 0xbc, 0x5}], 0x9, &(0x7f00000016c0)='./cgroup.net/syz1\x00') [ 353.545861] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.568973] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 04:44:22 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r0 = gettid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0xeb, 0x3, 0x9e, "539d688d008440baa102e42c581d9b50", "85a914b03518312764da089cb8fb0143780579d4f47deaeab4aa77b207ff71547fb19cfe6cc48eea6a8289826222f989e1f2c65cdd7ac6a8b4ca15c0af235921ae1dd702cca4580dc48ac57bb80ae2e54dcc8d1edff7191c5391b395c0847b04ad5830d9388a4bc155b46f905e1cab6d1461d0f153f7d58390c78896f583e28424077f91ba829a4f18e40bc330caec97808ad400cb125267fe112736ec8f156624bf00af04fbdaf953d91a0b1e43d2e577525e80c402c6dda534137d2ef530560dcfd3b385e9faa8bb5df2216b8dbd36ed75536d4891"}, 0xeb, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x7439, 0x6, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) mknodat(0xffffffffffffffff, 0x0, 0x400, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fallocate(r2, 0x11, 0x0, 0x100000001) 04:44:22 executing program 0: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x7ff, 0x97e3]}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000001c0)=""/124, &(0x7f0000000000)=0x7c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:44:22 executing program 5: socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:22 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10007, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) syz_emit_ethernet(0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYPTR, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=0x0], 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) 04:44:22 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x28801, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getegid() sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c00000000000000ada554751b91d617de33d5a9dd2e5000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40000}, 0x11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:22 executing program 5: socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f0000000600)=""/149, 0x95}, {&(0x7f00000006c0)=""/189, 0xbd}], 0x5, &(0x7f0000001480)=""/4096, 0x1000}, 0x63e3e717}, {{&(0x7f0000000800)=@caif=@dbg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/241, 0xf1}, {&(0x7f0000000180)=""/48, 0x30}], 0x2, &(0x7f00000009c0)=""/28, 0x1c}, 0x101}, {{&(0x7f0000000a00)=@tipc=@name, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/223, 0xdf}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000001040)=""/162, 0xa2}, {&(0x7f0000000d80)=""/94, 0x5e}, {&(0x7f0000000e00)=""/236, 0xec}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x7}, 0x7}], 0x3, 0x40002002, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x6, 0x7f}]}, 0xc, 0x3) r3 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r4, 0x0) setuid(r4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_VL_CLR(r5, 0x7014) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000000c0)=r6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2, 0x401, 0x20, 0x400, 0x400, 0x240, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r8, &(0x7f00000017c0), 0x3da, 0x0) 04:44:23 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 5: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000001c0)="8053ac0ed51f6c842b5705693076af342dbb92a2a1aa66674c926b9f01973658d06a7075121e30873930576f6dd9918926b6f04c2ddc4bca6c3d981f84adf948265036fb1443bd05890ac46949a2e6261e9c240fcf9b4be00409ac29fd92ba262b88a904897add064bd7c875d4b0e6a8cb0a322ca48b3c1861f939118adbbb36859cef4e3053b86c017bf594fcfea1f0cdb1362c2c8d7015c1cb42a6e1db1915648ff78bfc598a08da24793987c2e7f474ab1ecd76ec363d5085cdf33c2c8a9420aedf120aeea8cd61a4deb87345f90f5df2d1af9dfb30b006d8e952363820fdbf0dad4f93519a9e01f98d5572412c1ea19724481db68244") r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000001a80)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) keyctl$get_persistent(0x16, 0x0, r1) 04:44:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:23 executing program 1: ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0x4000, 0x4000, 0x9, 0x38e2, 0x7}) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="0405000000000000846174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="806f646f74732c00"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400181, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) 04:44:23 executing program 1: ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000375590c3f47ec43820ccc0005f0c000000000000040000000000000003000000000104000000000000000000e7c4b600fcffffffffffffff07000000001c42ff5d4c27c7b9464f15000000060000000000000008000000000000005e0a000000000000980000000000000020990000000000000000800b0000a70200000000000000000500000000"]) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x1c44000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x405280, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x80000007, 0x2, 0x0, 0x9, 0xbac}]}) 04:44:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 354.827759] audit: type=1400 audit(1583642663.719:82): avc: denied { map } for pid=23525 comm="syz-executor.1" path="/selinux/status" dev="selinuxfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 04:44:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:23 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x7, @remote}], 0x20) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYBLOB="5efda25635b4d1ae4e3b4b27a13b80ef290dce504fe0c0217112ef4401d24e12daa4caec714850d2e591f4b70be4c437a91798ae62eb33a0e66c3c0a0074171d8faa47c9b3d2fe3a647e06c3d92d22d5b7d80b05f25abbc5b92769e5246f16bde0c9334699a8cc0f5cc2b0a44d22b7f2c41be93dfaef79582772a0fa6a5cb2f3386d7b903cf3962a5852f8eca2e04a7d49fd126be4", @ANYPTR, @ANYBLOB="af144339dda2e580473f1f3674253260a8886632147d51909dc7b978eb25959316"]], 0x3}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efdb1c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867d88fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa801c820bb0053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e716b256acf183d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010c8b1000000000000000000000059dcd345c2afdd76a4daac2c0c41764867a39df30c3dce65109e037248f05d9dbdf569cbeee8882cf003df5208304b7df0920ddc086191a54aebbb80f63a1b06c870048739b5fa32107f2764163d8e3b9362520d94ecd5fcbc2dbffb44900f46a3a51330f31cd95ee9b5460c848fe996b6a17c1fe9a7bbbdc6d485bf79e36a6312499fde4dea9dd49c42d97248c9e3a316aa688a8601dda9c0ba73e4c5396bd961dcf897618101aa3abd4a49cbc7f59169870ae4a1ff75550b4ec8d9970c5b5942d7060d33d25aaa7e94068df8960e050201f70598e5ec13a25e769830c43e52fe0e395fb0d68bfd9062d3"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca00000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) socket$packet(0x11, 0x3, 0x300) syz_open_dev$mouse(0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006e, 0x28001) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x10007, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000300)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000100500005003000038020000000000004801000000000000400400004004000040040000400400004004000005000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="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"/1296], 0x570) 04:44:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x400) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x80500, 0x0) r2 = socket(0x21, 0x6, 0x81) recvfrom$netrom(r2, &(0x7f0000000d80)=""/4096, 0x1000, 0x40000000, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x10007, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000380)={0x0, 0x0, 0x7ff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000003c0)={r7, 0x80000}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000440)) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r8, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c) sendfile(r8, r8, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/352, @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) 04:44:23 executing program 5: socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x62, 0x0, 0x9}, 0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x4, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffd}, 0x0) sched_getscheduler(r0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:24 executing program 5: socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/40) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x1c3, "ef1dfd57cdbe17beed678013d7b6e01cc61e90243d8e458ead0bce455cdac63c", 0x2, 0x8, 0x3f, 0xd3, 0x0, 0x0, 0x7, 0x80000000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x148) rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x389300, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000100)={0xffff0000, 0x7fffffff, 0x1, 0x10001, 0x7, "603f56d329e4fac953091d2ac48c312840e7eb", 0x5e, 0xe25}) 04:44:24 executing program 5: socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) accept4$netrom(r0, &(0x7f0000000a00)={{}, [@remote, @default, @bcast, @bcast, @default, @null, @rose, @bcast]}, &(0x7f0000000a80)=0x48, 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000000000005183ea44d49244c800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) mount$9p_virtio(&(0x7f0000000940)='syz\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='9p\x00', 0x200000, &(0x7f0000000d00)={'trans=virtio,', {[{@nodevmap='nodevmap'}], [{@hash='hash'}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type'}}, {@permit_directio='permit_directio'}, {@smackfsroot={'smackfsroot', 0x3d, 'mask'}}, {@measure='measure'}, {@euid_lt={'euid<', r3}}]}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/bsg\x00', 0x300, 0x0) r5 = openat(r4, &(0x7f0000000900)='./file0\x00', 0x200040, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x18, 0x1406, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000850}, 0x200440c5) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x96, 0x6, &(0x7f0000000540)=[{&(0x7f0000000300)="543902b43c72542fd4a7ea588fc866df06a713ab1bda8a6130f561e343efc1d87429e924272e1c662c29a0efb39d0b1d5e5fa6cee39b8dbd524d3d916e9a3ef9882cd4aebea93ebfc4718ac834bc8faf9224d0ade8f8d4c891554adb0adfb966f372b2f0a487104713aff63e86ff017bab94c313dd9cd9c4ceb970d556bad2a43a71d0ab5da4f39442fde342a5976febc65685eb298b749d35210fcfc10cab44a04c2d993a4f69860dcf45b8b69efedfc11d3a4b407c321de5e7568d32ca", 0xbe, 0x6}, {&(0x7f00000003c0)="6cec9635eb987b85bb9687f5307e9af2a4b0184e90eac1386d449f4612fc0018fa4ba7926c7e05d75fe8f14c4d7888bb601d931edaa2fbaa650fa76a9f04960455df1ef9b59641951b88b2f4ac0a6c24b284725f5be11bb0fe363f7090ceca9b680866adfb629e7b62746ed1bd50395b2342602432b3aab31ce6ae03847e42f3f26a28083252463d9897d1b4af585c57c332b89dcabc6190aa9140963befdbdf159d6005aab744141c6a94212af74fe0f2b763ff80b071341bfbff1c9b61744909c86735e47a3b18fd9badbe4fd55fa3e9a14d1f4ad807bcdf", 0xd9, 0x6}, {&(0x7f00000001c0)="f60160d37271959cb5", 0x9, 0x9}, {&(0x7f0000000240)="4d59572edb30e9976f1144d8d07b2d1cf01a2d4d95ee2f7685001e943fc934fb28003e30d3ed9208da2ed7b314d115be3ac1679a93776dcf602d34cd5d9e11efe77f5cfcba1621ddd5594b98eafb1e50a0a1f9902b87c1f46aea156b97688e2349b7f7a34a8fc3d81c5c79af27dd0b1715951b566f4eee8d", 0x78, 0x4}, {&(0x7f00000004c0)="31e6576f", 0x4, 0xa7b}, {&(0x7f0000000500)="cba281cfd598", 0x6}], 0x80080, &(0x7f0000000dc0)=ANY=[@ANYBLOB='dots,debug,dmask=00000000000000000000002,smackfsfloor=vmnet1,uid<', @ANYRESDEC=r2, @ANYBLOB="2c666f776e65723c238846531e526242a3d34a6036fa27b6748373bed124c8b805095da944c69b0d44aa42c05d7d16404b2380f5ee3bdedd055d377affcf4e070000000027aad419ee56563b9a452f7b0aa3b6568b24ee467e48c8c73ec43d6e636298dee93e6642d206031beb94eeb7964dd1e49807593ac685f7e88a64c300"/137, @ANYRESDEC=r6, @ANYBLOB="2c8661736b22302b0e994006fe47b94f82c8532bea93e48b9fa20035f0403dec7f306b7dd2ad633dac752516328994cec8b5e589c066babeb40ac4bed1fc880d82903094058883960a79e6fec428ad3a1add20ade296af939010ac8ca4982be72e605ec649a4e3b090f2b8a5f3d351b599fb8b577ec9d688cfb16d1604a39f5edc205ce322b586ee994172df45a768d464870b57520f75058a5835aade511e9bbbbb90f91d04192e1cdfb7c20c7f32c9"]) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r8, @ANYBLOB="d7fefa62a69eada6c8e540dbfd0cac1ef8c08406c42cc98a8d44611801efe454f8340e52478550d92d978641f1fd323001aa3c3535664aeff1e3"], 0x44}}, 0x0) 04:44:24 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000000)='./file0\x00', 0xeffffffffffffffe, 0x0, &(0x7f0000000240), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x420000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup2(r3, r1) r4 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x6, 0x2000) fchdir(r4) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 355.623353] ISOFS: Unable to identify CD-ROM format. 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x280000, 0x0) getsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = syz_open_dev$media(&(0x7f00000017c0)='/dev/media#\x00', 0x0, 0x400000) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000001800)=0x9) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:24 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0)=0x6, 0x4) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x146) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000002c0)={0x2}, 0x8, 0x0) msgrcv(r3, 0x0, 0x0, 0x3, 0x0) msgrcv(r3, &(0x7f0000000100)={0x0, ""/251}, 0x103, 0x3, 0x2800) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x375) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) 04:44:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6(0xa, 0x6, 0x20) r1 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0xfffdfffb, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 04:44:25 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc4680, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xff27) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = getpid() r5 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) 04:44:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10007, 0x0) r5 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r6, 0x0) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r8, 0x800000c004500a, &(0x7f0000000300)) fstat(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000001c0)={0x61, 0x7d, 0x1, {{0x0, 0x43, 0x80, 0x7, {0x10, 0x3, 0x5}, 0x2100000, 0x9, 0x1, 0x1ff, 0x7, 'vmnet1.', 0x9, '/dev/kvm\x00'}, 0x9, '/dev/kvm\x00', r6, r7, r9}}, 0x61) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) dup3(r0, r2, 0x0) 04:44:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f3000"/658], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00e20e641e8b5124000280100005e616219000aaaaaaaa8a000000080001001000000008000300030000000a0005000400"], 0x60}}, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x240020, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10007, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/5) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000000c0)={0x24}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000100)=0xfff) 04:44:25 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1b2a) clone(0x2000000061000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 04:44:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f3000"/658], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:25 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f3000"/658], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 356.626031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.640790] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.951266] IPVS: ftp: loaded support on port[0] = 21 04:44:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2e, 0x4, 0x0, {0x4, 0x4, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d000000687372"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000580)={0x100000001, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000005c0)={0x100000000, r5, 0x2, 0x9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e61623518d9968a7b9c84b5f1261b954eecf683312daf4b231f7b846a095804970175504723d88e40b897d40fd587c4fb415feb67089fb0e5363b167a5b1028dbc346710ad473536966efe3e1e8abf20ba121e27004c5b84e00cf4529f13"], 0x0, 0x96}, 0x20) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x440, 0x0) mincore(&(0x7f0000a94000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/65) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x8010) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d000000687372"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d000000687372"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xfffffffffffff800}, 0x1102c, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x62d7bea61e7c88eb) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1d2, 0x26, &(0x7f0000000900)="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", &(0x7f0000000400)=""/38, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f0000000780)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x9, 0x9c, &(0x7f0000000580)="a6c9157cced850156b", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x8, 0x26, 0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20a04, 0x2, 0x8, 0x8, 0xff, 0x4, 0x80}, r11, 0x40000002, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.stat\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x28e) openat$cgroup_ro(r13, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1152], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1152], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1152], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1b2a) clone(0x2000000061000900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 04:44:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xc0!\xcf\xcdl\xe4\x1c\xab\xec\x14D(\xda\x8b!', 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000140)) fadvise64(r0, 0x0, 0x224b, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x102002700) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000001c0)={0x7, 0x6, 0x4, 0x400, 0xfffffffb, {}, {0x4, 0x2, 0x6, 0x0, 0x0, 0x13, "ade6764e"}, 0x1, 0x3, @userptr=0x81, 0xfff, 0x0, 0xffffffffffffffff}) r4 = socket(0x10, 0x80002, 0x0) close(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r5, 0xf, 0x0, 0x0, {0x5, 0x10}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r5, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x24004001) 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1234], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./file1\x00', 0x1, 0x3, &(0x7f0000000280)=[{&(0x7f0000000340)="ed346c2e1a9268207ec271fc4dfc2f8140bfec138557f44533238085f61d1c23f0922da9894a06415d213b7a6b83eefdd363d012073d46a60f373f9ba462067a930d8a56892cada9eac99117200b508808cec84662a9cdb1a68915428c7a38ab1b0583ea9637f249f64fbc861a3e27f7d658b3fefec48133dcad0bb38e02a0b269d8afa042e09751874f90c74553dc3bb7486c6ac46a01ffa454aa7f4d203c583ce3ad3b82d6576c7741d1", 0xab, 0x100}, {&(0x7f0000000400)="5cba0099f16fb34a30160c60b0286f2bef4eb25b4bf41a2e12f16c96929e2b7c30ee023d614c7a4d599a1dbf6e12795eeb97075c99f985befae3fe4bd217d23e7d9dad79647ea344c55732ea419651b810fa8db4fce6f5b5af44e9436fd5f0386846111d56b6f12f42b6ccbfe3f5f13a57de9501d13992dc66372eb6a87d5ed442eff8551651acfc6e40c04754d1e2b8b123acf6dee2acca", 0x98, 0x10001}, {&(0x7f0000000500)="5f1f7180209d3d3f7a1b456690995a3ea50f86f78c37969920b68ccc0759c145c4b5948ba82a8cd520ea6a87f90a02d6ef87d3f61177d9d436c4b854d14eb83b61bab0605e64821257f173dd29a90aeee9e15c600398bf46f4d85828d787ff2bb24c61e3b288cbf5ab02baedaebb1baad28068d59fc5391292192828560d03548c43678bac246bf5aa1c6f1a2d630d94ce85602e9cae9c219c683069d9fc7f66aa422db14c44566fd531479e763ba25c3d424ab5bdb4023da13d9f93f81b6039439ac2c8ffe1dc041903d91e16d062181b710f07ba", 0xd5, 0x5}], 0x1802, &(0x7f0000000200)={[{@jqfmt_vfsold='jqfmt=vfsold'}], [{@subj_role={'subj_role', 0x3d, 'posix_acl_access@'}}]}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000600)='/dev/vcsa#\x00', 0x1000, 0x40402) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000640)={0x6, 0x6, 0x4, 0x4000000, 0xfffff801, {0x77359400}, {0x2, 0x1, 0x81, 0x80, 0x7, 0x20, "848d62e0"}, 0x5, 0x4, @offset=0x2117, 0x100, 0x0, r3}) socket$isdn_base(0x22, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1234], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:26 executing program 1: syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) fallocate(r0, 0x11, 0xfdfffffffffffffc, 0x100000001) 04:44:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xfffffffffffff800}, 0x1102c, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x62d7bea61e7c88eb) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1d2, 0x26, &(0x7f0000000900)="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", &(0x7f0000000400)=""/38, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f0000000780)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x9, 0x9c, &(0x7f0000000580)="a6c9157cced850156b", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x8, 0x26, 0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20a04, 0x2, 0x8, 0x8, 0xff, 0x4, 0x80}, r11, 0x40000002, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.stat\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x28e) openat$cgroup_ro(r13, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) 04:44:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000005b40)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000005b80)=0x14) sendmsg$can_raw(r1, &(0x7f0000005c80)={&(0x7f0000005bc0)={0x1d, r2}, 0x10, &(0x7f0000005c40)={&(0x7f0000005c00)=@can={{0x1, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "39300a33f18ea550"}, 0x10}}, 0x8094) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010eef6b480f5bcd16b94b146bd464b00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002b0000000000"], 0x44}}, 0x0) [ 358.153859] selinux_nlmsg_perm: 70 callbacks suppressed [ 358.153874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60944 sclass=netlink_route_socket pig=23727 comm=syz-executor.3 04:44:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400"/1234], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x3, 0x100}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}}, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x1, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) rt_tgsigqueueinfo(r4, r5, 0x24, &(0x7f0000000340)={0x28, 0x2, 0x7f}) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000000c0)=r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x84080, 0x0) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c004500a, &(0x7f0000000300)) r15 = dup2(r10, r14) ioctl$TUNSETIFINDEX(r15, 0x400454da, &(0x7f0000000240)=r6) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8471fdab077726bd020180002ebbc9385ac98ab500417100400000000000005769c0d6a3b3d6fbf67545aaa1dd0336b269fe476b61f1e9e22960f4f8655eab4cb19f69ed3585ca69ac6ddbb841190f19747fd2bbe904e25af7b498acd79f1daaca030876c25a211936467a1234e14a26738dcc2e594de68aabfd0dd6e5be1fe8cd4ee5aa63c172d465a38fe8f9a96c49c641181b7e011e07e4d469c2efc36721bd5db85e9779935766ec78f4855d5b668f992703576bb7cc701262cdd291f8967a39435cb65c146be8b88cb50bf931c3c99861d0faf5369dd1d54261aca05f24e31301ac86ae18320e0ea736c7a0c1b94a2107f929793ac9e82929bbfdd2ae6bd87e97128dabf948", @ANYRES32=r12, @ANYBLOB="00004900140003000000000001040000ff0f00000100010008000b000500000008000100e00000011400030000000000060000000000000004000000060006004e22000014000100000000000000000000000000000000010a000200aaaaaaaaaa1d0000060006004e210000"], 0x84}}, 0x0) [ 358.234605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60944 sclass=netlink_route_socket pig=23734 comm=syz-executor.3 04:44:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000"/1275], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:27 executing program 3: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f7e93dba4d64b5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145201b062261ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c262869ba15d8f0c2211a2b975eb2b9d08501c56ab5aa0d110c5d197e50ff28b4a3b05489d1d1245cb774879b0871dd61703eefe87d7919c5ea2a361b18cca1a363b2b28add653"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, r0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="fbbe22cf104c948f665e6007769d", 0x0, 0x2b1}, 0x28) [ 358.394654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30471 sclass=netlink_route_socket pig=23746 comm=syz-executor.1 04:44:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x1d8, 0x1d8, 0x0, 0x1d8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38, 'quota\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/98, 0x62}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x1, 0x20, 0x3, 0x6, 0x46b83f1, 0x80000001, 0x7, 0x5, 0x194b7ae8, 0x401, 0x8000, 0xf4c, 0x10000, 0x20, 0x2, 0x8, 0x7ff, 0x49, 0x2, 0x7fffffff, 0x5, 0x3}}) syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/907], 0x0) 04:44:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000"/1275], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:27 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) ioctl$void(r1, 0x5450) ioctl$RTC_AIE_ON(r0, 0x7001) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f00000000c0)) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/101) [ 358.602079] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:27 executing program 3: mkdir(0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x400202, 0x29) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000380)) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000020000000000200002000000210090455b814894a2a0ca1b3ee202519bbb5f1037bdd9d1e170ee78369dd355cc1f29cc457fcced"], 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{}, {0x0, 0x40}, 0x2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000240)) lsetxattr(&(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000480)='vboxnet0{#userlo\x00', 0x11, 0x2) r4 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 04:44:27 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000"/1275], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 358.663819] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8d, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x50a02}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') 04:44:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xfffffffffffff800}, 0x1102c, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x62d7bea61e7c88eb) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1d2, 0x26, &(0x7f0000000900)="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", &(0x7f0000000400)=""/38, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f0000000780)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x9, 0x9c, &(0x7f0000000580)="a6c9157cced850156b", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x8, 0x26, 0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20a04, 0x2, 0x8, 0x8, 0xff, 0x4, 0x80}, r11, 0x40000002, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.stat\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x28e) openat$cgroup_ro(r13, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) 04:44:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1296], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:28 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x107, 0x41, 0x40, 0x34f, 0x337, 0xd54, 0x243, 0x7}, "642c1eecf0dc190fe9a410b76188a8857fa341ced8efe9e4dfc8ed6c6e82c8e952aa44e12bc87bdaba891522850b6e636df60881161a9ed57c45c7cc6495d78deec3a9aa39c249ef291544468a48405adf7497399eec4b739a8bc04de59a7bd05a5710", [[], [], [], []]}, 0x483) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10007, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000080)=0x4) getpid() tkill(0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/48) sendfile(r5, r4, 0x0, 0x800000080004103) 04:44:28 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x72250b56, 0x40) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000000c0)=0x49, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x148000, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r4, 0x0) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="ef880da6dc06dc1c5380988857fc564b3d8a3c446e6b9abc8afe01cdb35666f6e5172d7ac3c8d1fa1c0f8982aa5ba6df02f6691d7ffa7f6d728f8214bb08a4b600687e8ce9e4077ae18466c496e40b9614f818cfe35c26dff7102209b89b463416ec3c9033fd1fc7fe0530fdf6e094184023171cedf12ba46e95ede3e553999477747d752b5f622f13677eee81e0329463a7a1fbd16ef5b2e1c6dd3596e77bf23de8f45ed9bae0132a676c4f78e44a9006682cfbdfcd9f327208f2f485154d", 0xbf, 0xffff}, {&(0x7f0000000280)="77a3251087bd07c1e4acfff973b6d8f3d1a92e9b6d73cd0c2b556a11929ad84ebfcc7deef206929293225343b6fb45f9e4504f641a0bd304efe9e7e0a7fb4f053035712779bfd1231022198b754d56c158ffaef539c929774d4a685e307a17820704cb821dce76b96c2beb8567752c9c56f33f3fb22c9cdf2f4808e1d6364ccc1d96b6457b9b77cfaf3e99f268919a2493e67106e0c7842dcfb144b1c32e74be6e212794cf79c4ce26d4c1ea39e923c0e26762ca3c", 0xb5, 0xfffffffffffffff7}, {&(0x7f0000000340)="484bfb30a1cd98d2879655a651386d5c940c586077c3bb9aa967c5", 0x1b, 0x2}, {&(0x7f0000000380)="1a4a8646aeadca048b5b832cd04b3d15fb93372fc5093d5b6658670c3199fba96f72ee2003810a3d92d75fc47b55994ae832fff43f7cd234c138dd196534b8daf5187cb43b2c8032a0af006082b93140cc2061df31e167845653b1b8b2f2964af5303e0c7f2746d72aaeec71c3e16529a95f2715ebb1b578d9076e05f53a0c981a4086318f750bfb9bb4adc300bea8a68b965ad7b5b35f06c93622a9eb6051c2d0862c9086a293fe673d0e022bc559769accd225c0b1d55a6658bce476f845adeda42c6ec9033712c1b80bf5b31c5debffbd6feedaea356faae6534f84b20ae340d06be9", 0xe4, 0x7f}, {&(0x7f0000000480)="2b9ab6be8bb3b589a1773d96bd25de2151640feeddc63c59a0a5407bbe31bbca8338a6db2b", 0x25, 0xf4a}, {&(0x7f0000000500)="5fce6a051401c33525a69d559c8a6f83f922c5", 0x13, 0x1275}, {&(0x7f0000000540)="55d5efdbb7c95d", 0x7, 0x7fff}, {&(0x7f0000000580)="d9d9ead42a6abcbbf6b14a22a8737089a35f3a3c99456a348cb157152cf78bbe7fac987f91c9bdfe233392957437c387361436886b1aa04c85379da8b9775c85076878ab12ff6ac36e229f03431827f01fbf559a97f666571349c9bc46f29aeb8a655fe7a64aa720", 0x68, 0x20}], 0x40, &(0x7f00000006c0)={[{@noinline_dentry='noinline_dentry'}, {@data_flush='data_flush'}, {@noquota='noquota'}, {@grpjquota={'grpjquota', 0x3d, './cgroup.net/syz1\x00'}}, {@resgid={'resgid', 0x3d, 0xee00}}], [{@uid_eq={'uid', 0x3d, r4}}, {@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor', 0x3d, './cgroup.net/syz1\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/hwrng\x00'}}, {@audit='audit'}, {@dont_hash='dont_hash'}, {@obj_type={'obj_type', 0x3d, './cgroup.net/syz1\x00'}}, {@smackfshat={'smackfshat', 0x3d, '+'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'selinux)em0'}}]}) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1296], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:28 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x72250b56, 0x40) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 359.664885] f2fs_msg: 6 callbacks suppressed [ 359.664894] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.687147] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 359.753978] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.779428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 04:44:28 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1296], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:28 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x72250b56, 0x40) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 359.798283] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.847309] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 359.885837] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 359.914977] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 360.014057] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 360.014066] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 04:44:29 executing program 3: mkdir(0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x400202, 0x29) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000380)) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000020000000000200002000000210090455b814894a2a0ca1b3ee202519bbb5f1037bdd9d1e170ee78369dd355cc1f29cc457fcced"], 0x2, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r3+10000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{}, {0x0, 0x40}, 0x2}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000240)) lsetxattr(&(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000480)='vboxnet0{#userlo\x00', 0x11, 0x2) r4 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 04:44:29 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x72250b56, 0x40) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1306], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = getpgid(0xffffffffffffffff) waitid(0x2, r0, &(0x7f0000000440), 0x1, &(0x7f0000000500)) chdir(&(0x7f0000000240)='./file0\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f00000003c0)={'syz0', "ebf0856f0de7e8943d55fdaa81028a804f8ca79e8a97639a8b2ea204190ba11b6eefdb98c986c0f26e87e9ae27930eb92930a06fdab8dd153a482222dcf97ddad2207309fb35fdcda713aa9b274ddeea73e23856453a129c8fc325df"}, 0x60) splice(r1, 0x0, r2, 0x0, 0x10007, 0x0) r3 = getegid() r4 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2080000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000,40000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',default_permissions,fsname=./cgroup.net/syz1\x00,obj_user=security.,fscontext=sysadm_u,context=staff_u,euid=', @ANYRESDEC=r5, @ANYBLOB=',euid=', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xfffffffffffff800}, 0x1102c, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = gettid() r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x11, 0x7, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r6, 0xb) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r7, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x62d7bea61e7c88eb) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240)) sendmsg(r4, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1d2, 0x26, &(0x7f0000000900)="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", &(0x7f0000000400)=""/38, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f0000000780)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x9, 0x9c, &(0x7f0000000580)="a6c9157cced850156b", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r10 = gettid() r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x8, 0x26, 0x4e, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20a04, 0x2, 0x8, 0x8, 0xff, 0x4, 0x80}, r11, 0x40000002, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, r10, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.stat\x00', 0x26e1, 0x0) r14 = socket$kcm(0x2, 0x7, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x3e, &(0x7f00000002c0)=r13, 0x28e) openat$cgroup_ro(r13, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000500)={r5}) [ 360.339999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61675 sclass=netlink_route_socket pig=23903 comm=syz-executor.2 04:44:29 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYRESDEC=r4], @ANYRES64], @ANYRES32=r2, @ANYBLOB="000000001c00128009000100626f6e64000008000c0002008000000000003f0000000000"], 0x3}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x10007, 0x0) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000000200)=""/170) 04:44:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1306], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x11, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1306], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10007, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0x0, 0x3}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f0000000140)=""/176, 0xb0}], 0x3, &(0x7f0000000240)=""/9, 0x9}, 0x5}, {{&(0x7f0000000300)=@ax25={{0x3, @default}, [@netrom, @null, @null, @bcast, @netrom, @rose, @null]}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/229, 0xe5}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/182, 0xb6}, {&(0x7f0000001c00)=""/187, 0xbb}, {&(0x7f0000001d40)=""/83, 0x53}], 0x6}, 0x8}], 0x2, 0x0, &(0x7f0000001d00)={0x0, 0x989680}) 04:44:29 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1311], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:29 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:29 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x0, 0x0, 0x120, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10007, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000380)=""/21, &(0x7f00000003c0)=0x15) socket$inet6_tcp(0xa, 0x1, 0x0) [ 360.906207] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 361.152680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61675 sclass=netlink_route_socket pig=23911 comm=syz-executor.2 04:44:30 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) syz_mount_image$cifs(&(0x7f0000000040)='cifs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="2ee9ea73ccee525d800a295203a23fd540a115c4d83ec8ada148e57496e1144407b06383eff2483f5dcf059563595ea507aa6e6c3e4cca0c66b9b59a0f27ed46a2737e13363c8bb14e9e73f1c767b72fd24942d6b8e5bb11c250ceee", 0x5c, 0x120000000000}, {&(0x7f0000000140)="56b76299fe3f107e0112e36b7100e59cbff9bd884f6f91e3d109379aaeec660185", 0x21, 0x2}, {&(0x7f0000000180)="a64d7a4f863d60e5e414e80319c3d8bb63f3882e1ef8916eb645da85fbebf5a8e41d1cd7e1e9db44f363073f42a513f9ab478def0ddbc20ebd0c70ef03506a9e93e6f6e93258c912517a6316bdfafa019ee886", 0x53, 0x8}, {&(0x7f0000000280)="89aae820a75301106410441cf833f4bddef568e0d5711482797cefc6aec77d2b374aef3ac97ee50746c751114288c923dfc659e65a8a4fd5ef11b939a184ab513ef8953f41a18c14f5f3a505f0ece4dd90674197de8a62cae20eab598f11044cfc16b681c5a5d7a88b433e3c23fb17756287a1c5c14d9bff8e3a6ec112a2a49d91e74fac91de4bc62884e6606c2590df2a26727e00875d56d08215c8553e96733793157cd91c01a338101cd06a709edff0ce63e52a0fbefe409e5517da", 0xbd, 0x3}, {&(0x7f0000000340)="d1417aa8556c24d80ce91d175fffcc47d789b05ed189b4304a3830e4e8764c2a8da736004438711066435e49b40e799ab40429c188fb033dfae5814155fcdf43bbec6f25d135eacf64adfc885df885a1febc8d493387ec3e99d3", 0x5a, 0xffff}, {&(0x7f0000000500)="272d15a33da4993b60638e90294d660ea82d26e26ea072445a1eba87e2a4dccbfcb9af84b99d54e43ecca43781524313469f441f435bc8efa23c658c64e1c086ba470a4b1db39a8edfd39d15bf2022af34d7752db108124e74f56db0f4c9648c7140304f329a506b523fdacdc34373f38fcdd9e769505e6dd03df92c08e159e5025d7bf18106a109a2daf049af8c010a4745ac8e3006a6fb502e8e4254ac92c6edd189e12bd0bfd4f4a58b15061daadea71f7ed153f962a17fb15d3fddc5d99c93ca43899acd0932ee6c38e6de0d5fb06e9af324d711eb6577aad29346ed5b51a4110f396422def96a446fbfb7fe1edff854f02d7c3d1af2d60e58e47a4ae2daaa211570c8828d360d54738d049788e9a7173af0664c61a5ab5066dffac7e14c04925f7eac80f1eda870dcb581e343c552bff505778bf5116de9b5c4ded553537756e36117765085ce98a44562d6f643ff3637d0fae430c5c52ac2d8df3e0629f6fb29876f3ad1352e3a4f530b7f18397c83fa69f0b746a2a94bd41a0e65cf88e88372ded856353cfd387e900a924324c71108d580930bee05b990710f5563aa968a84e8b22b1e1c5dd8d05403a1489255273f4af3ce745c66dcf438a7e56871072b06df3d788a42cba623dc3f64232f6d16df0cdfd9637d698282b5c0fb0f02e97fb7c38f47b0cb55460db7be55ac5991426727137d05c234b15cca90f979c7356479c839665a3252d6daa0bb04fa41ac33d645bb00b2711f84a09d1babce892edf894a56a9aaaa59baca0093fef1a3d5ff959c7991023342a44f1f706d53699787aac46a25887d6f666e57c29a639d87fe4321fbeb7c64b6b789422304ef1d7015da74749320912954baec25454cae571cdd9727e27e2c54e8c232f7e84a14f32c07b306459b846f4d82566c527815272da2b63aa046d87962c5e272cb18fe6cd15c26881b21ebc1a3cf5092310498810cb736f1c47a9212ca89c41e672ebad2857772e44439c79b41a9b87b1bd8f83ee012702f9ce55b7fc4d22bbd994a258de807611380e206575acc3241c1065648950de7ca364200f9e4896263501c9a2b1b2393f7d252fa68bfc662e73bd820e6b336ccc29c07d9e3b015b76695a08e0befbd7012c532a1de576a7faa7a5c3d232104605b420f21552b4e10eeef5095b5e539f9bf588a6c78b263071e8f4d4cbd87b4260285175e8bc84ae8a1a5750dbe9c6f0ba489218ab829458ed9abed9635ab0540c0d538cbe29033b5b307915140b69b891819cf279c309d43163aad9cd3e8327f3ffb57096e2412602bc0a6ef6c0b8eba2d8a2615701ea827b9680f1834a3a2560bb9e1e715847bae8e985bfa93aa932770c3faa8cd611e954336a1aa3dcdef67292ae7e212705bb81d4ba3c07bb1bfeac664d9e293fe55ddbe01be113796bd88f41e6ee7bfe8ccdb87a56b9ce1cd7ebf13e852a0d8ca398c04ace271c26a6516616b2fb8d65df76e474facdf4bec9273444dded280078c551c89c50da5eafc9c4a76429c23600d2b7ab97d46bcdae593a80c0e656863e20c659b49e1d71c0c4c76c41abf1dd47cf401975682b03750ee8d5db76a35666806ec9ce6214195e12a0c57fb400e59c6603aa8341c76bef65ce96a809186ac91c7b4a4aa6751d653151b1a4c12cbec500eb169a344237dad9ca4c779c66fdc7bd4fb8f5d2deeaf2d89a5aaefdcccfa60cb2ba8867f2d0e1816e92b4b0a3bd070a1f4da47b2177141bb0aefef4f919093167d8e4b95d74480f6adc5af562f95c6c80a9661caed1e67fa8b0c3c524558e1c7a9d7ff2be393bc46a31509308a8f385f0c8c3deda999036f848e7b646b628e57f43266b5f739dd4a5b9a33cbfa7f1672892047ebc05e5cc11029a85e9752334aef66af52f6ac4b0f1d2c7c9af6ef924eec8010c6dbc9c2b0c9eb0c074af1c5465d813574fcfbaf031fc9bf837ee4376330d9b83d35e703128a94379b1a4b1ecf9b8d2bf111ff06f4ef3ff8d99879d871db97e5583d7a1f529ff98cd6bcd4bc7fb6043a5f4c8acf126da686c5c52ff36f9dfeb561ccd8a4af21bc26058ebac51d79719d1bc95ebbd112c734a70511893a77193fbc2b334fd9ec22f72d9a6f8624a8862b8869b3fa5ad4da168b802ed3a9502b2a1e7d09c3c0f204cf1e7a41f6f288b086cdd57bd99584b121ad70ee7f9a30b8f034cf86eac7ff84fd1fb5063dc7f86887d1973dc174337e3649c689f7d28e96dda382e6a10775427d463b553734be2ce0c39c80492326e90c3b5dec30f14cae78e6e8b335402d8c133c83c2ca1af4581df2935989d5981c8be5d2837ec9f240f3f7df6212116f4e8295e075527fb3ddb9032ac85b475f6967b7a2a7a13a58619bd0dc0d9b506a32db1b3aa5a5522b59dda133230ec75ead5ef5399fe0221bffe6127c58d646d78865a4994123f507f48166981cc6310dd8265c6bf7c0b2b96092deb0aa89c7290d084300cb71c3e3ac35b57a219038446db37dd92b373ac953ed7d5ebcc8167421ece278d13d8513f4704e9c2aa567886bca3ffbf616f181e5de757d02057f3f748deda8d1baab43b7381e43e79cd4f24a8f39f025a832a23f1b9f42d9f8cb6322cec8d95a9f7560d92bb4e703dc4ecd2598addb021e42ca1ff7cee2047ad42f633b51933fb4d9c94cd95c7aa4f9d85637bc9ecbbc21d7a63145c78b97c90d631481f74760db72fc58f5ea31bcad6daca21a7c15f7e8dc9ffbc87a61878a6b7108c8ff0ad5f291a008b3917c281cb87ce7cdd10bccf491d33b1fb86bf6d3d8b36ab5a8e6ffe53da35074e20d2b5bf510970be388d0a553cfbf31b74d9c2f50c6457441a789c65c40e451a3ddb69f790622e7a0bdd83c4d5ac80573309a733032d043705196abee3e03b239072ece35bcfbe6b2116c40da83c9563c2641dac624af7059f9c01490621f01a7d338d41846741b93fe310c31c48273635292c088f6e97829a8764950b8cec784523d33cda67aae4ef7ad04f0a08af8a9beabc4ce529c4313efd1f5a6f351eccc4abb9aff865111ac4013d9e591ba80a8e2646bf95d535672a50983193f2d02dd044c0bfc8b9a5e47803f326909dafb78d0d2c422af29e856d14d2ba60880be65faaaaab0547e4326ec3ac73e3f18ef9c45b1684a4590235194d5e6e8eaf02db312f4cb6cf43f50872c64c9d77d96485345203dca44922cec59db4f593189c35b7fa8e48fba2efc16e949c41fbddbb52eb0790609abe23e2146622b67a6376a38963e62d1dd90c57c0f32b8c7ee24162e91de75a6bd219f80f3356148cf052fef59ec73e89f4a0bdc51ba73cef0f5fdb2525c00fe264fb81c5e70f5efdefa37ee84e2cb04f6aa665155e0b013a3a54b26401b53a8ee925d261f343217e511d895d363134c3a1ddb3f0a06c3778cd1c66acf503bd973143eba7efabe1c9dc9d8c3907e395e44ec8c46974d3c25595bcc44b7fd186f1f596237a120b49242348fe37bad20914848d7c358f090f6c5ff4ea169747fd91490d0d765a113918a197469413f8abe81022eef0db5ac8d1a2fb7b94bdb012f80763698e807d7c52f7380790ff28de96d5e0e42e342b7ef54f90324e209145597822d07ecdbda6427716d3256cd3283f079b449ee3af4fea3c6f0d52e6917153c9338ac7cf5705c176207235aedd3853dc90528509989310801bc7d8b883c3a2d138cb3661716b3b34298db69f1d507200df076f59bbd4fb8e36d6888f712fdd5391bb8e701ceee1656df52540f500fa3d5456e92600fb6e13c4efed6ae2a37fcab77d5ff1e9626968d7999a3a468824e8fa73deb8b2b829f102c2a5651072f47bc1635bde19ef4f321df1f81eacabeeacda85ae5a511541d3bde4d8e407b732d8c5bc6954e968347b2cc995c0374052b253d10ea3e87a54b0bc156ceac39e712d874d4f991cfecbb1c0cbc0556d88dcadfbdb7d71a71e0a02beb514bd4153d1355b4e0900ee8bf6f125efecf8dba69d3daa81a41b41a197d160db3e4be17771314ca481fd523deefd17903cafad60b548d1b641145cceef360b54c4497b818176ab55f03a0f2babacb5c3b266f17f6682a2a75fc2a37d38f6870495570fb81ea5e2f36d921036487221c03a6eac9f08d9bb62bea9fc8bc132c857130c9b60e31425538a3f4a9debb112ba7eb4a96ca820787c88f73ec871b9440ccf6a4a28ed107ab06aee17b0a7dd6ffb10d2156fddaae0d6b166df4429a3e47203ad593b95147f4c88e17bdf666f5d0b1b0a18cb69109cb66cc59c523550d1d9ce998dde7196adfbc0aa95b246e24cf52d5070b7dd39f1f0b2135b628488861c3b91ec6f7e72d165fd88badb4152f0e67fe6c655e85ea190dd02005aebfbeb3c8734f67cefaa3b20dbb5546a532f1804ef26e7d99794204d8fdcb623d0ea78ac4decb2a57818b25036ce80bfb6174d9c53fd181257625ad98a1ba8f46b3bef03f443ac4af7996311751d68f5f45fd9ac71787f3ebfb9ea71d71cd1fa72a78f84b6dbd000684c64732205afce01e1a50df5e044ff3d7376ba6d22c25b1df778eb6302884c4de0ebaeee0a5279fcab46fa9bdccabc29cc17da1a16c3033edea3f88a9201e2b37f566f56de45c0b9879919c308be4368e96b687299dce9e33b4f4a760dbd9896109dfcb84637f5bb0cfa7c040521a2c76c1a7cb47362bfa359b4f25a3dd37523aead4dcedc02aaa4927a7e3ae83dcb0c58f87fc05e9e0caeff37c9da77ae093eae1b0af5b66a44c618c5710cbe75492f437b49d4c42fb92b1f4484efb2c558f72ed16fe69cdb81d5a1b63901bb659f5363f42fd1eddc9ab274dc52599550e947a2a053da78a7afe5912bcc0cdfea4988922b073cc6cf00c7653b07e862ffe0600c5e6c6f294ac0e78a47bc24644c954939f2b5878ec48ef40d3679477171c665e8d966e46c4e6df7d3cb3b525471eedee0984b7191879b6073bfec51ab84e9621cbf856c2a5d0b8560aeee5737211acc7ed21519535a070371debc166e6991679e3cf597bd27b89af5e5ce0f1f7a65b90e9d26e3e70eb9beff19b9e65e2e1eb3322c756acc340a9d1344c5d46f9db11014856ea4ae102c4e99148e2b8423c2ef8b9571513c2e047c0bfa52d3f3430729db5477d082089f9597e2841a8a9ce6efcd3f4be46a86669b680471e5506a9292e91f938331ff601a5bbdf1caee1ae40224d9e1a89cb91dfda35b4c492feb3947e9437d55dac393abd0dda300f34cd9e3c3c2f6bc9121223fef6a1a3ec03c87849049ee49254d2bab503695a8e709b4bdfb9a2974183e8aa631a99a766f83c928c0b253729d50b9a9e6d7cf8f0eaf698832020d68da877bfb4a102154c0da44934c8e96a24e24cfa314e555ca3737895720e1f41ac9115bf8a88fd4ac6b5da714de489a186a1845b013e148c0876bb846a4bd7b3146510b5505f9b586a11a47dadb1c369c2ddf62e9310bdf57e65251207683dc3cfa7ec9a3e7a2d786d9d78cbc4ae4181b3e16113fbb567060818bd927c7c80cce1877c3ac9013f6893c3d6452fa49f3cf572a29b0406a5ebfb8c59e313036ee6f85eca3f294d9f8ea08b9273d0a949a404699581d356d35b3e73929d762f43933c02f89ac7141ea61764c6c1d6f0d97caec4a4c31847449dd042933b665f0207b14b722cd619938510e865d18b22b6c0750a2f0ff7284032fc758db7bd9248cdc1a4d465ac5b2d49f6948380ba3494ec437db4ed12652089454b14a40f1a8fdbffd1f0c49fac119ba06dc80c349e67972ef4805693f21d7561e21c39fee353d0666d810197b4f33a", 0x1000, 0xbe99}, {&(0x7f0000001b00)="18f04e24b511b8a7c549a608860e92964c3881f630688f12ecff29bad3f9701724b8293c935f06b3f2af9307bd532f6b1172589559fdaf734e7b4feabe3dcc236c2c649fa44b74af0a68f6fa4cff351b74d05163ece5d69e5b2c69eeb9c8fa22b3d1712f57d0ddb98a2d28bf5d66e5b05640798412906fe62f53bdad4bb3c6fc5219ef56c750e6d2c294caaf1f24142e5a435f659aa3796cc2cc5f983627a74c18e7b5364167be28881f293d3f8b07ea0945acecd331af0a0c4cf568a679fadf9172868b3d7dc432c0bdea9f5dff55a1b2e3b3090c8c0ec35da9adfe2230d18ca6c708069f0c3bb9a8c5d635a91b169fe3712c99836e9d75a844241a7da572071f6e14ace325cbbfe7caaec59099424cd0baf36471c2b502db8e33102c685a8dc79b8edd9aa4e12484fb1e6a66640f2fa2adb67302493a7800d738358e5ed78a6d4f87e49dcfb933dd9a5302fe244d8173ccc7bc0ab5f0f25dbb2c60bc29f564ae858d47e1520ae9a6c3692dbd61b595612dfeea9cf449a87e386ea9723fc8f8ac0ba87f8d2a4d0163acd3898ed33001c5545958e98a262c02673406a492c7b03360e94a6127fd5d7fc63b469094f1e775668643d6cdf932f93268ce42a92188bd6018072b47c34d803b8f88a4a97295a6a6902da3a1448508b196664d22a319b9f92851d94f204929bdacb5b06ea3fd62c05b8d1787710d44cb7b97abb44a26960cb15e95f9fb55323a8df1dc217ad7b37a9c5da378a84c7a1b5f9b080e4d305f35da7ca9bcd75a11f51e0e0ffd591f2d74ac2a7d086ced592263b6995ae565c295ca2bd4e5657377e42a099cfbdfd8222143c1b9c43363c1cc9d43ce8c406572c2f07ccec35cb63c03c3b26e4fc0429d307bbeb07064f7e8cf7d3c262d79da4e8b6a924aa3a83b5712402bfca1aad96b04a0017d3c9e9b7cb29792c65af69c2d29f4fea45e3a3094f9618005daad3c8184c4d62f38c6588ae9b4f50f8bb7a5b8e795de13b486845f21f1c634275a78c937e52a979a2df3a03ee9db3b6ba5c5af95fc587d8a74071ad360b68b6250fe5d185fc3f553bbe3168955e3dc58bbbce517f69df4d6b0f92c6e08bb22b29e546b42f98590450308a127a2346bd7000b493a06d9db67aa690964bbbc9a5eaf0014123ee709b7803404bff4413fe18900e7367a4c36b9c115b330580dd1affac9d7ee2e4e9a725a0db79bfea7af0e02ff4736ce27e784841b2e70922edd11d9111f6526623f83c538456f14f01ac9dd87dd2b0e16629195e8f3073ae3a1355d1b8705fe6ddb841ca9129047ce8ad42c1728f2e93ed036707c35d0b496b714dc6968f4e6feb4945197ebc0591eaafb3f5cc10ecca5283a216c1cf3167256c42118d3b7d232d35c5d04bdceca6405fd1f068371b67255e59c90a073c777ae6c6c6a1908eee6e2a3b6766e4ed905485313835f4663c0eaf2b13ba951d0e677ce3f31226c5bcd6aee08a92c953c4a64443a5cb5844a25cc5392834430af47ddde6da6b1da68aa7a1fecb31aa0cb09df3d7868fa3d6418362900aaf2b074a5b0e3deecc043c492d4a8c605e02ec703c11bd690d6894dc44896c88d48458cdbc929e5b67ae394729f90d1fe368d0b9a3c2a413846fae2d01f16ded72d647e24ee74e90afb89568b1ecf7fef0b57bdd33e879a1fb05231d35240f8938d3d99e3c96aad4e396bb4a202039a3149d3148222f77a4f2b5971b4c2114b8e9aaf72c86e6a3ddc8c3dcd7c168c32093c99303ca0cf9e70a43d491cd67c98b517fef9c706b0d68a0b247234aef481194337068ed2a4089a930e0792451cd34a6fcfcedfdff68f9408231d93f8b04a3b255d47df722f73f818b84a6e81f17368ca1d5b7171bfbc03939aafe2bffa4733c12d0bebb282a31c3cae32e534ee2606867a57576c2f3cd5815a00596bf20c1734489350fd6b9fc403b7e0b96884a2f373e9eaeab65f7042d3cf0edd0a4b9e69b5ea79f8b3c9342ff181bd6fda4af9da62f24aa5f9ec2b564b85e1eb889f4ae29622a6be057874d14076d68c45dfe4321f64648f833850720edfa1cb46ad4eb02e8ce449f1cc69f48508939b27861fc8a2db01f194fc089ab452bbb038874990feafa08d914bf21a089a532f0dac752611767dd272fdeb2675a3ab24a1f225aa455ecc849b33c8ff7df463426a1f70b7e9f7cdbda3ae0e718f790cbb2796b4bf0bc9ee79da1e5250a2d4c945cd1a1c662f3cd09da3934847afeaea1ecbdff630369582606e91c640744a0c05c75c8ae7a789a4ba571fecbd252b941588eb65945560809faa7fb29b1ce41aea4b1c2db669042f0b1f3d9cc2305e844aa7712ece88b0334f2ff0bc25c61ef4da319ccfe29a643256d62070e609592b378ec6fe137b2efc29e371552693af9e1715894a3d930ac756a1e46435140508aa350ce5c561e66825aa59c926fb5ca3e9610e3b96f5bb67ad72d782e4d8197a322bf8855656ad753e1cd5354f949623dbc6175e77f47dd38e017a56eea45e2672ff8c9b817ece49bc590d1d9b78a677fd659985b2e7df4296ee4981016b319766460451b98afd7af0b51dfd3aca002ececc72254e6f7e915ce417fbde8e7050dfd2002359005f79716c4204ec84f807c19a63940d2e305c8810441cd165e77ebbf94875ce1ead18765e60b980cb2cbdd9325c36d564243f5f953913babe3977139a96575214b0e3a13a9335b57a7bcd063c1ad9f9ece421a50eebf450bf7600b4d579d0900fa650e4d97a3dac943c3e5f26b5cd848ed28568591f46d6809308090922a07e85275bc5c241a868ecf4be702fd7ff59ae4bd11e851a9c9df50939ad34ff78f0806eb41b77a70674659588547c25d3e848a1536f2a472b80d57682ab7a11f9f5999a3bd906764c97657aeb6b52e4bfbae6e25dcdf4a97f2c7a1a72bdabb349b43ecc283463583d0709feccbeed65cdf3948bee0eecbeb8b28d86b16756150223fe0f0b22a8d7320378e19f5d8b472735cf7e32eb6e5768798f2f1da8b3bf0ed96cfbb4f8bbd84499c6c829e9da6aff5ec5ec6bbc256dd149fad8e7e570e61c419e529d197ee88ab68e877f452db7fd868ee44d873582dae4a0649a99e5324b0f8e6e458f37d42c699bcc7bc7106060771ab360a804c53862d72952c74b8b4923e50e722fe80cbb63bb9b7d542637d80982b4327a025e03d9c7703f65e25ea68809e29b000f424063bbeae46b4a03e11255b3c58a3be78d0fcd91cd171b7a384e1645cb37e07f6dbe30738d9734c54f8dff61f1ddbd6aab609c6d25207837a920a14e080826bed07a881e03d3cce6493e70a67a9b0be63d15218430f8b772bb24a00ac90ae4210e4c49b061787eb58df7a0d19d0d9dfec5d6629f539fea27c9a503193a8bf88cf3e020062d82413972f6b9ae92a3413ddaafcb5e2e70ee2c238a5b40dc20d923a79c4928a7b45795358cbf2faf81307ac61826de6751465110fde60755bac9396f5fdda72634fd793f793febf756d454a691501a887410852e7f25322abf08be46038e950385248160ae47246e0869fbc67a9c32ae18ea7d8aecb966556d0d37147d5595777c80bb57926d2b88a9eb0493ffd9bb9fb9e41a94f1b8a5979e047894224c0cf1f3cce9ffc7209bae24572756ee52397d97b9d443d4b45b27b31f66d397555ade54f87891576c726d8e23c25bc683c2cc38d344d6caad24c1f142115aa2abaad8ad1d8a5a04c5f47af45210a2e4c2cb5bdc8a77aa2692dcaaa484e9962b514e0aa683a9e1af8861e62f3577b86efa92c4d9368aeeb0c2e2e3f5fb7f45e4ad971d1bd6bb1fb8154a4fc8df92d53423fb90feca5ab9339bcb525758637e3ffac63cf3996d86e07b18f3c41131b3fe8ffb4fd9f40b53ab75f3e4b32e18ed6d5a7a0363df10e4f46b90ee502cda0740dc767a736b41c2ff01e43eedf0f4b255021b78dcd0e80419d106ee8bf0e81cb4e2ef2e5caecbcae601b2bbbf7e186d2ecc5483af194591aea5184e9c643ddb6c4b9fd43c7f160ce4d592cb9630128a1189cf8ea3ce91dec688e6d6291222409a0895c0c0b29e019a3a07727dd1632516b0682d163cb5562c7d73aefdd9d021273478c1f42855d9704a912b5a74c0cfd358506290a1d904aa8883b9680f2f4a3299766e83dd2cca83fe916a0ded05f1418cfe6590bf7fc95e573d7defdb38956668de8fd48e92e0bfc3df5434eaeddf1fe584730eb35752590539d9f0551e39e0de4e65271a62138af9b5a4eb500512d304bc7d901367010d5a079626f109c8b9cb89eaf18f039a3f3448b1c873d4775069842bd209a1cd822eb0666f67b60dd834696dbf2ee0e5eb2027c0b7c45f47fa5c08242bd6ee450ad2f8088f1325aabd4854c9943547c4b6e1cfd8575aab4169024e24f8bddfc55309449b3592f78c274438e87921597e972dde54e46126a0952f8011417c0a316ec6c2b05e816463ffd250211231d0a60fd21512b3766ef26e34256b8edd271dfa0cf8b68282caae210cd5e81c65e5adb905af37d9cee2c7a08d78cb67fb6f8436f56b1f8dcf49cb7503583639d4964a7782192fbf0135db4010418bad5fe897a5b33dd3a6448dd2a1ea4061fd855d7ee436afdd5dd9eb498a2ee9f4e8d0fc129bece0e5da6209730d65c895b41b0118c4ef3efc92a536ed7550e9a5c1adaebcb08a8410905a49099a4cf982f52cc2d5694d8107bed2e5f5079e715c062cb5c1610413ebd2e9785ed6f5abe219362a9abafdb6ab37a8019205384cb7a9a41a3b3047d020043161ec1de07cc2903a7fdfc63747318b2a444d8e43bd15b86126724f9e1b6944cc7edb83855ddcc00c46f0322081812f76ee922f5455003b57c37f4b2720b177f051da3e0d0861eaa5e90cf28dd88ee7940ddc38f09b78b7ae43ac369fdcd949fb0e7cd0354e387e06fc0abe3e68e9f0f1f5607cde316f73ee2bc2c8ea3116088f225d0fb8d235b4033859e137df98476613602af24dd103d78a070668ef18ec8c241ee2019d6cd2149b7f102c56edd2df544a000bcb595533e4606f016d2dd8cb3a9c5654e0bd33538d6e7f8fdeb9fb7e3968ee1fbf07354c7e1cdaa226715ddd0bc6d35503987669403fba17a9ff3cd7fc4b6393733cf6803837f5c294dd9c4071ba5e8e233d46ac3e5a7079f89993d8a9b255a10b4ecb3207010d769db69941371c82f8b07c4399471192765fd32ea41378378ca988b3ae5250c32a2811955421acda841eea36831c79611bff770b2231bbdc8d31011eca6a3d1636280e21de21342071d81499102cdbd914f4c03b709ca4ab50478fb588386ad081efc66a5454f532cc0043a044953a95ddfce48c7682919135246013dc203265d9ed611b1215346dffda6a36e884430db69fc8e6ce54c4ac5acc05674199d2757c4ce4bd1cabca4d5942042eec7e5ce288302d2e0da77bad97e08d1d1cea3322bd6385fd8850db522f81bd8d92ca63528a7f834b492796f5bd4aeb69737bdc2b9afc8362454b0ab02c282757f898fc2733bf2682d32ee60b4733e4ebf568eee4f58989f4dce243fe4f24007b8e07704f8f7e5c897e373fbbf354b6a8f85aa816a66232bda702ea6ee36fc3bfdd480c4e7ad660b997e726e5263bc78e50bf4dc1323b04a96d0e4f9b594fc23b9eaa31745e68b338652cb077dd869175bf827c7af57e388db94c2029092d079cfb796a8b51021e3d59e7844988cc3b9b63c4e062b58f74d5dd51c19e99960f06fce912bf3e68d4f628ee4d25087892187a94bbe3e990e9c4f54b24fafa934a0b634b5810dd653dd5b27c28a9", 0x1000}], 0x1028010, &(0x7f0000000200)='[bdeveth0GPL\x9a.GPL)wlan1cgroup[\x00') rmdir(&(0x7f0000000000)='./file0\x00') utime(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x1000, 0x100}) 04:44:30 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lstat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}, 0xb8fb}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0x0) stat(0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x40000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, "5bdce2f2"}, 0x0, 0x3, @userptr}) shmctl$IPC_SET(0x0, 0x1, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0445609, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0}}) chdir(&(0x7f0000000140)='./bus\x00') openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xa693}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x4b) sendfile(r0, r0, &(0x7f0000000200), 0xa198) 04:44:30 executing program 1: clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1311], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESHEX], @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3, @ANYBLOB="6ec8192b707bddfe6d3c2bfb6a8cfe701bc64c4debadf7805e0fa24564b3a23cce9a2e17d7ee4b8357b93171f5b5656f2b03d99a4ce3c68d3832de5601bb8a2d2ef0c818becdb89aacfcc252f6f2b925b4e5c336799cf97694662d98752b54a03bceca24756fffd35ba0d035a835bf21a764f02f8e805d2a499223915d9d3663f001d92512c5769c51777d9c9d0b4b116f0b8f74febafd4e19781c21e142f2e23d225b2dbde2d191c6fba843eb0765ba6d24237317cbabdd2a10aa71559aae09e775a0f7c25893f35a7e43ff673cf8e1733b0ac5f6b52bed00862f76c1d285"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="000637620003555e5689d91b59672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6a23e220ad9d351dfe3e71bf8c7784a744eaf295764d3c9f9"], 0x43) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa8a4d70f7ff29dd2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140)=0xeb03, 0x4) r8 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x106) write$binfmt_aout(r8, &(0x7f0000000680)=ANY=[@ANYBLOB="000637620003555e5689d91b59672a8a298a7dd8a16795e08348c14dadc3cab5ed450fe2f2ea32a8944ae6a23e220ad9d351dfe3e71bf8c7784a744eaf295764d3c9f9"], 0x43) sendfile(r8, r8, &(0x7f00000001c0), 0x8080fffffffe) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000000c0)={r11, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000400)={r11, 0x40, 0x6a, 0x2}, &(0x7f0000000440)=0x10) keyctl$clear(0x7, 0xfffffffffffffffd) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) 04:44:30 executing program 1: clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1311], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:30 executing program 1: clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 361.309503] batman_adv: Cannot find parent device [ 361.321284] audit: type=1400 audit(1583642670.219:83): avc: denied { associate } for pid=23967 comm="syz-executor.3" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 361.446955] overlayfs: './file0' not a directory [ 361.479413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=23975 comm=syz-executor.0 04:44:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/148, 0x94}, {0x0}, {&(0x7f0000000980)=""/153, 0x99}, {0x0}, {&(0x7f0000000b00)=""/137, 0x89}, {0x0}], 0x8}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/9, 0x9}], 0x2, &(0x7f0000000380)=""/203, 0xcb}}], 0x2, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x82) getdents(r4, &(0x7f00000005c0)=""/223, 0xfc61) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f00000005c0)=""/223, 0xfc61) fcntl$dupfd(r4, 0x0, r5) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0xca}], 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001c80)="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", 0xfff}], 0x1, 0x1) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) sendto$l2tp(r0, &(0x7f0000000040)="8bcb20e93814c0bfa69f09baf2657de21f6643f7153ecfe25773a02a5146b408648273cdaa2fc6bacccfdd521f64f1a7a81bf4439fb8a7121501f46f82aea82759ca2abcd115f3d9c8addda03283acd392e0b6ee4c3c95b46298735e06c208677203bfb7dd26fc622d9b9707982d4ed09ab4da7139ff49e74c89b3175c0ebefe1c12a245556ed0d7aacb59619af674418949d343ce1cd9ffa4cf912aa7aff5a9c269fa8893442343f82bb03fe2fcec59e0e070b088dba5586272bd014557", 0xbe, 0x22044050, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xffffffff, 0x3, 0x0, 0x4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresgid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00') ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) memfd_create(&(0x7f0000000000)='dummY0\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x38}}, 0x5, 0xff, 0x5, 0x7fffffff, 0x21, 0x7fffffff, 0x4}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r7, 0x800, 0xf1, "3ff8c755ff238b16430d932ae26046665b035cb553f5dc35425c04c2924a7ef14861d7f569319344353b95ba8b454c1c43a2ef7104122d4a16ea9390f31fb494cae0e287dc970c8098b1aa5ce595d31fe7444033c7c8d62503d99875711ae6b9534c0b804f5b72230cd98bd2e174e7311e012970f8195f12e01c345801562d989fcea0777b851aa5ae23e5f7f9aba010e9c5a21a3d295a8c33629460550e395105406b549a3eb1a601db74ee3e28ffe1a1a2fba5fca41541377c810b2d73493d4e87ed9459ce3a8d769ad323452247b1057ad74c4a7457360d54675525c453f48876483d2c7991690d7332928f46d24478"}, 0xf9) setresgid(0x0, 0x0, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 04:44:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:30 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:30 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 362.140759] batman_adv: Cannot find parent device [ 362.166467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=24046 comm=syz-executor.0 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300)) splice(r0, 0x0, r2, 0x0, 0x10007, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0x0, 0x81, 0xfff, r3, 0x0, &(0x7f0000000040)={0x990a77, 0xddbb, [], @value=0x7ff}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@null) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x800000000000002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r6, 0x800000c004500a, &(0x7f0000000300)) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) r7 = dup(r4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000000140)={0x7f, 0x7, 0x4, 0xee, &(0x7f0000000340)=""/238, 0x72, &(0x7f00000000c0)=""/114, 0xc0, &(0x7f0000000500)=""/192}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x8) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000200)=0x9aba) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000340)=""/174, &(0x7f0000000100)=0xae) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000000)) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = getpid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) tkill(r3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x21000, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xffff, 0x200000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$TIOCMBIS(r9, 0x5416, &(0x7f00000002c0)=0x3) splice(r7, 0x0, r8, 0x0, 0x10007, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r12, 0x800000c004500a, &(0x7f0000000300)) r13 = fcntl$dupfd(r12, 0x406, 0xffffffffffffffff) ioctl$KVM_SET_PIT(r13, 0x8048ae66, &(0x7f0000000400)={[{0x6, 0xfff, 0x7f, 0x1, 0x29, 0x9, 0x0, 0x40, 0x1, 0x2, 0xff, 0xff, 0xfffffffffffffffb}, {0x2, 0x9, 0x8, 0xfc, 0x8, 0x0, 0x40, 0x3, 0x1, 0x6, 0xf, 0x2, 0xffffffff}, {0x800, 0xd8, 0x97, 0x0, 0x7, 0x7, 0xff, 0x0, 0x38, 0x6, 0x1, 0x73, 0x6}], 0xfb1}) ioctl$KVM_GET_FPU(r11, 0x81a0ae8c, &(0x7f00000006c0)) 04:44:31 executing program 4: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000800)={0x6, 0x7, 0x4, 0x100020, 0x3, {0x77359400}, {0x1, 0x0, 0x5, 0x1, 0x40, 0xbb, "75945720"}, 0x1ff, 0x1, @fd, 0x8, 0x0, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000880)="310e6f27fe193c1bd1136d01e27e082ad641bb34bece849cf66425cb94ab9235c4b3c4ecacc2a96ec4eb97ca36e5008e6dc195154a85357294ea3e8d5ef5475d41d459ba955b319f62ddee0dadde160a436ceaeb0d20fc282aed1addccda68e836fb53c0400d66df632921c9852f9ae9060fedaab0fbefc6e63ee6a0692a36ce81dc4c181ff1079e42c0506d973eaf452d2795280b322f58e860bf397900413301a4172e8dabd48673b9298885f672d31c552bbde551c46caa1422c24704fccc9f04619d2dffbc77a3a74c37fe47816b52b5a01c9aebebd85eca9ce73a2cde5044fa80f0eb3aabd0cac5737d5f0bf4229ca0eb8a60c6b99894b6a1ac26d9acbb0404f92626959fbd20c0dba53c6019941ad6763930117ae8e8314ce3b72a42c60daa58ab5f306635142ec093c01b71e40cff9d616a862fdba1718e8d7d25d81a7d4fced0abf736af11b0194b471ae5e6fd19b2da7e6e7a9b295353af7472ce93a3cb7b19b79698859565f937bacad74724697e168bb662c7ec76787bfeac4e46b6bca1bdaf4c08b0120d529c046f33b6aec455b49550a920dbd574f0ec6dc53f19ef6c91623516e21aa13b16692d2c937ef696842ef69c39f329bb3e952c6e072d47c664e86dc90b3520d81f550c7c25285e9438569ae6241cb1b75ee92becef4478461515183ced47174a934b8c75c717f706a7a8f1762418f7b7b899f982f298f04422f8eb7528f364922610b4d4ce82642e3ce6274d0602ab0b519229edbb75b9f06e66ce43a204409c13b04a67c4712bbfce40b650c1a9b03b2ab73b1f212a360a0aecf09f27e84d2ba10478971b79bdc467088e3d6f7ae98b1ca23a3717f46c41b1f4bb894bae9754352e7d9ca5d45f003ae73b328ee9ba308ee34dff9bfbe9552bd8342526b38440af61fe3abc074cd2ec43e4bf9c9b509ab0924bcc748b077eeb10c7ef0cfdcae222cf027808ab03da7ab25f5d40cf347f08f0d116638fd2b6d79295d5006215f3406d301575171bf27660d734b0491bc142498cdbfe027577b4295e3929e56c1e4e9c99701916d9a151474471244e0650c4948dbf766c2e2594527c78eade427f3daf0bcc9e47c4ad2a74bd581f3c1626da2a0c8074d3e3025c3ba39ff0ae4ee30a991394407115d68b5a52a6a26ca128d63f8f9bacbef11cab08ec871a871d2d9b35ab5dbcc116c06bd1a58934dd89fa527ab1339b2072e4ebfca84c5e2f558fc77dbcce52ee6aa672c26ea4717cfb7a0b5f7043aa4f2d0b606a4e7147bcaa4ef1aa54310c9b984ac0b2070fc6974211bdd43919b70bd61c7de37993d14cb49ce1cb7832ca8e3de2fd598a62195f507956949d951cd4271d92104be4f2a5c96c39d2c7183bcc0de8418df45dc276db90f1ecbc76cb31b8d8a1c3688846bd9bb8c5b17d4389c258290d04d37e15fe5a5c0bbb62d88a09836b04865e278cc68a1dbaf2c0203d6d03b3548aefb66c149a8014691e12f9e60d2896973dc88e3f14367ce6a732a9d2671b58f722c7bba265adcd358503d9b9b72beba49640eeb9b7347362b456b2a4c598c49d7f11a0123ed6c694b89ef6ac0638b95646ce7d986faf0b064f7fb5ff4eafca134aae4f0a3ba721f16a77440bdfd90c400610a9b2190e2a56c734b4d60ffc4c16bb0f1bf7f7d4052cc9765c42a5a337b0512ff714c3e416356b549275d03d250c21e90ebbd8d13e1c03902637cfeed6b8e3d511b0b486a7d430426a7bd56204ce43d9cdadd6575087d26313242238c075b31b1046b68af1ef26787e1703a51b8583042497584c4a117df1ce9140433ad4f4e07bdfe17c2c0e346a848de3fd1e63e39ef7c045920d8b0924b00f23da45ea60f0198107daee447e942914d984886dcbee11aa00568008c2a5341e4a1b45b6304cac27c1b44966a69e19b35a08733016ba8ef40a7bc900222bc3e0c959eb41156aefe2917c86d26057e5ba5a30ac76af660a93be49d91787c3529802abeb6eb23b5c9eed46403586aae85ae16a335fe7a87d4adaef4db9f174f3a6f2ba04389ed6963824930ab08a863872031074dd3a850c810f155ec76807740459bc3acd587f19634a9f4efaea557e91dd41b1445d55520d2abfe51817db92978635cd523f8a9677fbc702a5b9defeac6fe2ebc8857ab35257745f2b08de845534818895195551d8333a17c343487f0b733d9dc5370d40cc593810c9a3503facaa750d6947d644c02d7f65d5a444f0bdf865683a472266f412f9c7aabb4ac5e2ed7b48f1f612acac62c607fd4b4b678c4857201834464b0684cc70ab3f30a89c1f5e8fd158a2811912c46d89215f98c6941ee4dbf7817e8a63a6e5a4e55a3df3e3f0c7ea3e3da51ec93a3080493195bab45aa20d356eddc24bba7cc5385f639f85cd0fc99fd562357f4e520210a318b93fb65784493ee8d50eeb27c24f80323eaabc67bbabb71d7c301a1cad471e07c3b423cf847ba88a550b6b91b9722f605d6aea81b85406086b1b5515ad4dccb1a293d24c88625a818e4c00f4cb1b1521a44fa6933cf77d8e77366da9cb7f9b545492598da97e271029a972561a536a7f4ffa49f6819a49bef452010c410c0ecb140faf44514315831a187d063739b86913f6b8db1b5657681d7f04e9ee233a61c9870901cbf51aa904f8add885ef19dda8d0832b15f8b0252c83b0daa416c3be8b993dc272704f63c6ab204f77aed16fbca0d90844cb1003866551ea64380f6f16776b5e93d84fe7a6754943f2267e50e0d5f911d35ae2959f76952023645113bea8f9fe25842eca6cb0484f742ed383e2132bf76dee3921795195be8819343a8d6e57321721b54bdcc60a32a4719ab6096e9f9282c0d846779b4ca117635a8942c89e496861d251e35b690e06214172a35c980bea5ef893a62156b17e51548724b4c483cec104fe9e8d953512d2f4a0ad10cc26e629978b5ac9f86d4170d1fc5c90ab8e53d6ed56e8b43819231d9fa65149dc0283dbd98c7ee21a23c0163865d9f6e281619609aac091de2ff1cda78f964a109e1a2047f2dd3e10701bcd6e2551e66d486322387d7e64937a7ef456706901a7a60949b410904510f6f4bc9e8f6722091450673205157f2cfca6aefef25d91c05c54a585fc4a6d7c478e3e8e0a9937f5124619a5e91a6be6415f530cee321d37ca56c80547dc311ed271d4c79a1800f706efee6cc3841f3639a3e357271d7d36427055c7d41417f68b7cd607546b6411acc8f09e9a92321811d977c7f90f10d768e93ec307d031ae6c1faa39fab15ab41c552946cda292481900fe849232e11b7f2e85df802eb9aa437c30d9b754d1e051a18eb3ec96c65ab1df70d02f67461264e25ade59723dcae666f0ce413a24956564de5d68d87fd6e63fd537dcb4808a1e78de2481e12e3ba9af8d21fc21efd7ba1d4230709c50952bc4864dbe1f9adceee3ade02cd07f71d5878cc06b7f1946f9e91ecdcf290e4c482fad26b28620fe256aa8cf508419681b1fe010c87966928b526e4f89f5f8450236a71b36da1c630b0af63fd26ccb458b58231298886fdfaa3ba62bccf3fc8195804344833bf1093cd200f1f328d60a9b72b2526e9f89dbc91bc03d6e495e5ae9b1fa26e7296475e406aa853d1127523b762b8b86a1080ffdec180830b81881239af32e1b0edd52210a8e4bc01e3751d133343911018a1333a1e4d1bb4639ec4fb416e7e326f36362117ad42b88e26772153afa13f705907bc5b5abc1b5dc4cd107a762729ed22f80c35d7104892f305438935d5c90790458e07cddc30e77634d7ca32dce0cee15bde4b5cd8b3995bdd69b9582a94fcb2830c5d004c9e1089995f2263312b45c1bc9d5c3ab4cb243310c5f6712ffa868a15fbb745390e163495ae8c770a6128a05adac99612cc8056861d0a5cd6c1c4864c62d4374be370045c47fae947b9a3016e9f3efb6bb1204f275521fd2aca644065aa30405067255d2b04a71a4afff5fe62f6ea0bc87dbc6a5e8273f04bf1e1f76bcfeac94a0a8f868b28f8319bda3d9d365c6f25fe461d7ebf2f8618d461c06e341107752cfdf5571f4b48a5c578f37cc848868b8e5d23dc46825bc6a524737a02b52af15675da0f441e9dd330924cf6d79b988bc7bf363486c7b41a214cc52ef84aa0a2b1497d2483053bd26903dacf833debffd0c7db9bbdf7e565b81a0ec3fb74c98a2635294479d476cc5e9ef612f0b8aa42a7607abeeff85c1676d364ac180a8332b84cb882a70e29743c68032871a3ee0f535be1d0cf8e70ac39296ea4422efdd0afe7c5d312de81d63ed07f93747730e70443ea8d6cc503f191495e0290008c0bfdfca5e4c212278d159cca469700273548a20db70f2915a391e1692eb399ebd2ab17f21c8db904376dfdb812a81b23d7e016bee83c1d6a11ba22d83830e0cf1be53e1e26d6b353ce5c9382642b541016a7ba5e9f1e3a706f8fbe16a00e844c5d602442c2675624ca394b7bd1ba6d6d8ec268eb0dc6a6c7463d51133cd5a92c2b975947586e260a95db0f11e74fa13f5ca494be8a37c658cce281a51df9a17af7a4445690870f665398175034f513121c32a46b9065cd74180bcef80ddf5c13566df53547cf6a7e833064066cb85dd1a37b5b4fbdd63043ff3d440848a67971ba304ac216a889b15d8d080aba828d7bc6943933a34cdc36ac6b2b83029fc1877d8514cd73dc9f38352ce70b0aafec3b40c7123fc6bab89347779c26e0425e4550336ed693659ba01014ca91b4098d3ffeaf2b7e88298805eb09228404758c427fbb501b0b2036f6a1db6d2436c76fec2add057d358bf8a08e88b0d3e80e6ba4708ddd1789a3b544cb6f85bc79a6f88004cb1c8ea154eb5670cc1b42e7919536a78951ff7636bed863206aee499934cf1a61a4c7f677f44eeef79b6d55f847166c4aa9fbcdd5806c1e35d5fe7d56702d0954d810ad12e2c60b881b8152fa100478821cb3bfaf03a0a4aa48c5cfa967d7db15a429bc1f73749fcff582fea758f082ecf88fd2b30202ad0318138b76826942821bd6801e8def69679bdc063f4c17920bbd8dad77b398854b613e83cb3a142eee0fc3bd7c38a5af1881932305231ef38d7fa4e6c4d42cdfbf7ac49894305d98ac153f9621d637d939736ed3d2f75ddfd6650e8156ab5e44bb88b5f87bb67346b395dd87d0343897eb296fb447437bda2772fa4f57b375b62b53077ae83590fd129b9426b2b958e6bcc8b4701392db2b2ccd290c6a6922b47e842dfaf2c57d16ce383a3b8390d09285f8a31f2a5840b4587fdb9eb9dbb29b727a0f98ba186dce16a9490a0845fffbdc4c860cf192dd8d2da79a880347acff56f3fd4bb0579ed6e16d1a8a567649de05bd759b78c5936f346cfc97e21a094faee1dcd29fe6a5a527ab72c7990bcee52eb8261d2cf18a1d86e8ac5d8f74e18780b7c0c11951684a46774de37aebcba444436f1ddfde90721413478317eabbd6031eee4b70e6c69a5edd3d7b1718d36a23b7c36b0205fa9de37e3be82fd333c4d1343df1615ecde2191a184b5d8d57c9603e8b45c9f324086b8109ba170869558ef6341fa0829442fc6739b4f7eafafd52424359c92d95c46be92ef9b262c97da14e8cbdfd43817a569b55529470442bd6f288a38745353866d9436a628a32bbffaa3f6a8f06831dc9c5b557875a5a4b5c46621df46e88ebab2e32ecbf5d115f7188c63d0581a7a8a9ac48ff6359c8691a99eb8ee0f70f1838d0e341393ed97a48f4070ec037dff513fc63648c30f900eb1c47d529b642f05f23794847f52a04cb2", 0x1000) sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe) 04:44:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:31 executing program 0: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x10}, 0x40) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="2300cf5764020000000000000010c52321ff0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfffffffffffffffe) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8001) ioctl$NBD_DO_IT(r2, 0xab03) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdf52, 0x728df551}) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) perf_event_open(&(0x7f000001d000)={0xfffffffffffffffe, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4cad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x29, 0x2, 0x0, 0x0) mlock2(&(0x7f00007c9000/0x4000)=nil, 0x4000, 0x0) readahead(r3, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) r5 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='net/igmp6\x00') sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x4, 0x401, 0x7, r6, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 04:44:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 362.425924] audit: type=1804 audit(1583642671.319:84): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir539892040/syzkaller.ju89XB/515/bus" dev="sda1" ino=16739 res=1 04:44:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 362.529761] audit: type=1804 audit(1583642671.399:85): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir539892040/syzkaller.ju89XB/515/bus" dev="sda1" ino=16739 res=1 [ 362.647683] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/253, 0xfd) 04:44:31 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:31 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:31 executing program 4: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r8 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='cpuacct.stat\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r11, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000e80)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r13, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r13, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r14, 0x407, 0x0) write(r14, &(0x7f0000000340), 0x41395527) fsetxattr$system_posix_acl(r8, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r13, @ANYRESHEX=r12, @ANYPTR, @ANYRES32, @ANYBLOB="deca3844292c7e3f5d9ab5a7e9ce7dd14d64d716d164745e8ea8ad58812d7b5f547e292e3c2026ebe3ea75dacaf6753eb8c34d514a3274c9d1e7b6f84302bda90bf80833b9daf94ca1b2ee415dc56602d43fcf6bf621d924df1a6695430547c2a3a8ff126bd7d369a98ef2a8367f448615ee0cc5a1836cd17dc6f1356f81eab4d98d2e997f72dfcd59bba7f809c0372d6048be98e8aca89ef905e4709cb696c858b04b9dac4ea9fd463d4488f72f5946776b909e3d150ef19864faf8cdbfed604fcbc28962c876f3085d7fed", @ANYRESOCT=r14, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYPTR], @ANYBLOB='\x00', @ANYPTR64, @ANYRES32, @ANYRESOCT], 0xb, 0x3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x120, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8dccb737e05facad}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40090}, 0xd1) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r15, 0x400454da, &(0x7f00000000c0)=r17) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r18, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r20, 0x400454da, &(0x7f00000000c0)=r22) r23 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r23, 0x400454da, &(0x7f00000000c0)=r25) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001a80)={'team0\x00', r25}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xcc, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r26}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x36}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0xcc}, 0x1, 0x0, 0x0, 0x488c7}, 0x4048091) mq_timedreceive(r0, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x719000, 0x0) mq_timedsend(r0, &(0x7f0000000040)="38d5ce2a28e34b8981ee19b68f0a587559c9929fdda52ae85211be319b75de16ea6551b69fdb1aa97aebc9447239f18e0e473e4c56870dbbf84f80355e85e1d4f0803a0a679ddc7824cfea6f8e774b6955fad025ef48b75dc767f2975fd1b5858235fb0ce7165c088ec809175539b68ef172b84f48bbbabaa364434a4b74fa23ca173a4e46f06ae587752eb872af2221f48d2c16206df715333108fbc88920aca4df0207dfad401db1d95abcd0317e28c4b9d978c1c35034354463510b5d3e5033098ff131fecd31bce8fbc7284f78e2c54b711ae14332b925e01648911390bfac00", 0xe2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}) 04:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x400000000080803, 0x0) write(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x1, 0x0, 0x0, {{0x0, 0x7}, "325be54f8e1ea200ef"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x5c}}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) 04:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 363.156097] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:32 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r2 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10007, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000280)=0xbfd) r5 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x0, 0xfffb}, {}], 0x2, 0x0) semctl$SEM_STAT_ANY(r6, 0x1, 0x14, &(0x7f0000000040)=""/45) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x80801, &(0x7f0000000200)=ANY=[@ANYBLOB="726573697a653d307830303030303030303030666666666664380098416995c4f904dd47468e4b679a2dd3807d2bfbb39256a66f4cbba06708aeda95aeecdd680cd6c3d88e11ff6b193285996ebaa625012b0a640e3ab93146c457d825e166c4635cfb6da58c920b825da70f5617274da0c7b3b3e6b67e"]) 04:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x21) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) 04:44:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000140)={{0x8, 0x6, 0x2fc, 0x1f, 'syz1\x00', 0x10001}, 0x0, [0x7, 0x10000, 0x14b, 0x8, 0x5, 0xec3, 0x0, 0x400, 0x6, 0x5, 0xce8, 0x6, 0x1, 0x3f, 0xcc08, 0x5, 0x7f, 0x101, 0x4, 0x7, 0x0, 0x9, 0x3, 0x961e, 0x4c, 0x4, 0x9d20, 0x0, 0x8, 0x1, 0x3, 0xa26, 0xe, 0x4, 0x40b000000000, 0x8, 0x18, 0xff, 0x10000, 0xfffffffffffffff8, 0x2, 0x100000000, 0x6, 0x81, 0x0, 0xf5, 0xfffffffffffffff7, 0x3ff, 0x7fffffff, 0x3f, 0x0, 0x80, 0xe0, 0x0, 0x200, 0xfffffffffffffffc, 0x8000, 0xffffffff, 0x2, 0xec6c, 0x6, 0x5, 0x3, 0x7, 0x8, 0x5, 0x6, 0xe69, 0x6, 0x5, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x4, 0x3, 0xfff, 0xff, 0x401, 0x9, 0xcfa, 0x8, 0x80000000, 0xa74f, 0x2, 0x4, 0x4, 0x7, 0x1, 0x3f, 0x92, 0x3, 0x8, 0x9, 0x7fff, 0x1ff, 0x0, 0x3, 0x6, 0x6bf6, 0xb8, 0x1ff, 0xfffffffffffffffa, 0xffffffff, 0xdcd, 0x80000000, 0xfffffffffffffff7, 0x6, 0x5, 0xecda, 0x0, 0x800, 0x4, 0x200, 0x0, 0x9, 0x1, 0x9, 0x5731, 0x8, 0x1, 0x45cb, 0x401, 0x7ff, 0x7fffffff, 0x8, 0x6]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 04:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:44:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 363.364119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 363.427305] Unknown ioctl -993503981 04:44:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x2, 0x1f, 0xe72, 0x3}}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 363.587066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 363.607605] Unknown ioctl -993503981 04:44:32 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x234, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x200, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "0932157d815d88e36ecae581507850b8f34653585c8dc3addbe2726c7bfd0b98bd18e2f956fcc51f2203dd1ed117a9419f62be9d21d1aae1ed04748374e83d997cdb696379000f5264e16af6c889779f4ec5a3e5e42fc512073c9987ef5332d884cd44e251a5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "ca2d8b5a11113b66625dcb3f794dcb237ee6665bb6399e14ce51dfca00557cda2e0c47d5fbf5b4b55b1e0b7283ad044c6f8a97ff8c38b26762b9c1c94237008af9d2d98364613403dd5e9144e3c7c1d4164837892b31e2fd2330a5df46dac144880d1aa5a8c6e609c3cd228f1a35469db6061e279e12ecc30ec9bb4cacd270b29fcc86caa3a6bebec4d6e2abcd34b9d8a009b04be506"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "6d8473aabd1b7dc3bc7ca64903a8cf0e4a9a2e840232f7b666c6407800cfd4649e6e9cf7b7ccb8b196086b4e4f1ed7a3adaa11de1a297284e836a3133b3d09be4c2c7600ab7374410c67684a8e21c2c03bb8083d4027ff867899cf8cdf937a84e1ee0cf921"}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "63879665c261ef518d6929c0c069e623a8295093318f063b57733a1f5755947639e6b0ed12ca37dc56bd83ea972ea4d7b7d4280eaaf22c64764f50bba03ebea878e78d"}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "b6972e4ef461f9149db68416c5700ce91e63709b9b00222afbbdf318cfe7f56d9641fb5ecb539548d3e3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 04:44:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:44:32 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000140)={{0x8, 0x6, 0x2fc, 0x1f, 'syz1\x00', 0x10001}, 0x0, [0x7, 0x10000, 0x14b, 0x8, 0x5, 0xec3, 0x0, 0x400, 0x6, 0x5, 0xce8, 0x6, 0x1, 0x3f, 0xcc08, 0x5, 0x7f, 0x101, 0x4, 0x7, 0x0, 0x9, 0x3, 0x961e, 0x4c, 0x4, 0x9d20, 0x0, 0x8, 0x1, 0x3, 0xa26, 0xe, 0x4, 0x40b000000000, 0x8, 0x18, 0xff, 0x10000, 0xfffffffffffffff8, 0x2, 0x100000000, 0x6, 0x81, 0x0, 0xf5, 0xfffffffffffffff7, 0x3ff, 0x7fffffff, 0x3f, 0x0, 0x80, 0xe0, 0x0, 0x200, 0xfffffffffffffffc, 0x8000, 0xffffffff, 0x2, 0xec6c, 0x6, 0x5, 0x3, 0x7, 0x8, 0x5, 0x6, 0xe69, 0x6, 0x5, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x4, 0x3, 0xfff, 0xff, 0x401, 0x9, 0xcfa, 0x8, 0x80000000, 0xa74f, 0x2, 0x4, 0x4, 0x7, 0x1, 0x3f, 0x92, 0x3, 0x8, 0x9, 0x7fff, 0x1ff, 0x0, 0x3, 0x6, 0x6bf6, 0xb8, 0x1ff, 0xfffffffffffffffa, 0xffffffff, 0xdcd, 0x80000000, 0xfffffffffffffff7, 0x6, 0x5, 0xecda, 0x0, 0x800, 0x4, 0x200, 0x0, 0x9, 0x1, 0x9, 0x5731, 0x8, 0x1, 0x45cb, 0x401, 0x7ff, 0x7fffffff, 0x8, 0x6]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 04:44:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r2, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x1c, @loopback, 0xba, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f00000016c0)="53a8dadfafc4d95a17eded03d950219fbd9a31ebc9fb867034d6da78b53894e1f7fd2baa2107d2396dae560294d90ea233fdf178773e76c6dbc873741f7e63b12d369b3b4615cd439cbd74cc659f9f138b63759502f15da20408ff4f9a25f3f6dc2d306e596ff8d2a281cc8acf125aa89e8ce3c9036b9c9ef996db24c30d8dd7d5a9a3d4205cad9aace4025630f7a000036b49113d312d60be2af34e1cbaec30a45c36103a14c457fab90d9d89ce293de6d3e439b5a1c433c1aed1a2d0ad9bc6396b8f212eb460e2", 0xc8}], 0x1, &(0x7f0000002b00)=[{0xf8, 0x10b, 0x4, "dde4874007fe4a573d377025f938e58e9f03a439ce39c325631555851d26b9ccc35d5f12c10f53f1b993786af00e8adc3dc0c72553d6bb77e1a228c4a2cde158e5bf1dfbca203ba6c7ccfd2d9c6244437fbcb921d81b40ecc05a1ee32951abcdc7b8218d2c4e8589c9cee52054d1a51810ba6978bb4315a54baedfb81154b9a90284a95b157709e8d3da7c8003efadbe725b35eb7886a64ce408683b1d6cee6c0d615de8c0992212d17c801c49df787e98d706dcca7eed969210e94d94e40ba2d8f461f0b9b4e6e930c6d4ab786a4c1f671a3d251b5bab43ae5dfe1f485fb7934985f216045ec90c"}, {0x108, 0x10e, 0x0, "f760932c597b08410e5029d19b3f277b15bd9c23706b634b33f1982b6347d7cc0547c9cc105508873e01efaf8f3ce83d225d30e894bd639e69275aa3cdf5b3b29bf25d4ba9c87090a401304a17680e5d5968037748886e2d806a6d556ff6462dfc5fd3ec797491826bd97cb57bd24ed26540a68102887e731ea490b8c572d848f7f29ecded61a405774d5ae6c7e4f199619bc631c1470214028893f0047e835c9b964919515909739816b1eeb8a845e28f0cc5f03cdfe0c6006666c78ef53f46ce0c3fc32dfc2173b07e0dc257b7f55eb2ce4f3f9e6cf9433d20e9cf2a216f1c901e64851a8589435237210e6d3d7c091f45256bf5d136a4"}, {0xe8, 0xe, 0x9, "1afd6e3982f28d3bb8ef6708e016b8f4fef2f8edc128f9c0f354670c644f9e3aa9699475378b2f3b18e8cb42392b9a38ffe9a3013f37db6bcd7262e7a1843c0b94596fbae67349c4ff1b576337c90f915278cbc8f0aea371356eb2ee94e60c25373d4cdbcd6d035d1d44b6ac02a7651162431bd6f20b337969a7659ed4f83bcb498489d0375bb801f1bea7f41d70675be4c204a5b8bfb47282a9a3ea2bd9a4557449ea3da15866b685bf182507a03478f6323864fe04682706dcfd39ffa929b7129556ad61d3fa5ac44df7ca0794044fb3db6872"}, {0x110, 0x29, 0x5, "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"}, {0xb0, 0x107, 0x757bf25f, "d4ace7fd1c61903f7921fc8941aec1bfe7c87862f81b7544df7612c128bebb8809aa98a0d904471e2733630c56f644ad3a01c4720964f111ea058ef4f70faefcaa9548c6b5121779c6210fe67d6d1667c82c66c8801831d676c445d9cff8821280b9923c626ca82bb317204f526739cb67114059cdc366f0347b6bbf593f82c065848304ae2a7bf0d3257f616fd76e3e1c49ad374dc1c027a11ef44da4105150"}, {0x80, 0x1, 0x80000001, "90d4bc098f710fac884406e63809f81eafb5eeb71e021e6601a8b0f32b3e14c110a293f99b6df9abb777bb7e3711475c853d5e4997e7a65342f7f17f2d109f7316feb81491902d2f69927082660655a4f95d556386f01a0f6daab0d2ae1b3d84c1886c2049779713d6c1b6"}, {0x10, 0x109, 0xffffffff}, {0x20, 0x10a, 0x3, "c591e6c16507e4984903bc59b37de0c4"}], 0x558}, 0x65fcff51a2bd8bfc) r5 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000140)='./file0/bus\x00', r6, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ac4e28e1ddd40353b935d09fde8da3fd4016317fc62800904c5d8595ea301ae888df16268cbaf61e36f3265dcc54a0b01aa01d3aabc88c19d1ccee02044fffd58c27b31700b2412d36ebed99f110507fe7b57c7874daa016055e0e5dfe3beee8a33e0543cad8abd22a0cfc0d07ca19edf3be2bced1e120e94070baae2d07461cc5d42c99ecf91a84ee667c96a977ee40f4679c21fbd463112b3ff74e613374465b1f852508132be83dfbeb268791e00fd6342a1de63723d187264adaefff6449b95760054b835866fe20ff6c9e706684b03e0b", 0xd3, 0x7}, {&(0x7f0000000500)="66592628fbecf942bee3681068e4e9c1587c1bfd638a225e6e2a1561cde1321623a15649b47fec3662adaea458f65aba30edf4b4e0859185d9441b6f7a73ca36ef39ef2aa81d6581271ff78cc2df4d0dee66b5de5ff29ffd58a7d603fc9b8c57b162c4071b30303c54451331b65c6f06ed96552353f77342e8a580d87f08b7fc85116b78aae87e015d48d7e17c67ca3d01ae9f25fc66fa1c61ec7407182a1081b08877deb8bc33c13ca3dfd5f59ae83f1b7f3e0e271f40812f3453f914293dbd84e3a6485d4082d825b67aff46a836f24e7c743d9cbeca9aabebf92f0d1eaec106cafbdcce87d26fb7b0d1767eeb7535a90ebfd603367d8aaea7602ce49c12f66adbcad0b23db6b5caa7afbbdfa59285eb44f456994acd1a6565eda2bf4c02302b6a29b49e0b82a181328072cd0cd309400ffa1f3b6a8a167060b5aadaefc08a17c1a0a683b9fe11a72c440192784c92f099ed9f1cf4307e5f91d0447eedd65218604b3f3c366ef0aba6f6371d3fdf5504e236807c4367aed0ae2db8b3583d14032bd9b5f600459c24c579842b383e879c649e0e75eaffaf802370d771c8c450d3ebdeba0e85451043eda76b254e1d37de7cdc188fd35c51fce76c6cefc767d6421fcf3ee4b446f39830e794264a152b5776f3f7c844f5ff5099911b164c07444f4cb762253ffdd0de75c3a501382baacf0e9515cac246fe3d8892f15fbf5c2fe4d71606f2c90baa239aa17bb1d3038f8c1453b910a7a553d7c67b12cc0be589d44d77689cf46952406d79188bfd47ee56b3fb09c4753facbe676aa34355331de32f0e5f69f5c1eb1cbce40d11d80fbff6b632062b34f80a1765280b067c39b2ec17c1e88b1536ef61c7a1382967ae2fce335daeca5f95dd1ac007c4194f5603f75a2cebff6879c95c7f5286ae0d126e02f8dfb93a88851fe04035f3f7f66e2ec18b8e472cdb6c26cf78af33b7bfd6b3b688ca3eadad829eb819f1a407b2a6cf99a284f848c00fb1960f1922c85ecd556c9743233558f72f981908669cde479b3cc3ee9ee046465247287b0d82e08a08f2ef71b4c8205c5fbc527ddbcf12b9db3347ec4dd1fd8383a21d5e878c47fe77af23e63e25334a3adf7793b5a4ee908773335db0f9937fca0951c6c2ba02fd3306488a1327678f153d399d863639bf4eb9528fca9196e4f75d90dde88fb88bdd2ca3061296e77f70937de8c8aa24cf7a9bc186e544e2e9c3b1c62008b0980225f7e06e5b3358309c554e6a61852c97d999f7e7fcba4c00160f9a32d5d1ec599612f17a67558a7fea2a112a2d756f982a30a29f637339992d4b2541c76b44895fc7ae2aab3c5d59ccb89fbc2e208d11ef1302c807741b9d2d45af510fe4e608aab2d023003bb06ee05fc4c7cc7b0572d180464d3a247bf41cf5129d349fdb65e300dbd26488dff6c776b700ecd647315df4d0a9803a0d319f4d64bda32aed4997580f5f7c202d4e7f6b0e894d4ff31d40967e61caf36c26e36ac60bba00ba19e8fd662a26f5ef92d0649a6ddc0ec2464c80beaab05325376e8b01df9fbf62e48e5d4e67598cd7952280ef813ca7ebe86fb542a9f9dba191a30a35f8999cadb35c8fef7a978ce935c1892dd8ed149622d6726e490b509dab700ace67f55fcd1aee8c9501ab72faf9be7e793e752a04093cc62150e45c17769ba60e1f3b05852f8fe163a8ca986b44b09274304744a5f775778997b6c0734cba935ad7e695cebce02271b1926609f8b8ee4c736a5f3ae9ff05debc2269b57acb5fb24a76da8d7474c960ff88c2a99ad55c2a05952a0e09266e8f23fe3ff506c53f26eab7abacfae7e6be0e572dbdabe9b93e09c455d1bde33add08a83c30dfe58e853151ac1d498ad8daa29623ea9cbefd732ca898475655abec040a6d3b42d9f8dfa8efbd99cb383cf27373d0af84f4c008ddafb1783d17d54a9c3956105b373fde770e84a66397929b80ce2c26dc701a9eea9d882d34268fec9f742a0bb43e1250ef93ef11ca291efd827172dfb2e9aaa7559d2e1e1bd3401c60924256f1564e5b62ce2eb5e235dfcd33e6cbdc870a198fd7c95fd5ffca516848ecac812ef676b37de1e046caee56e5e4ca0ff10fa109febc5d122da855d80a6d6bdf6620085220224456b8d1fcf17f4511ade99fa4dc8adfbfe572b8a41769c373c15bd7e6fa9df271d9b46dd0d5993a5f5c99c1be65fb540b44bd9b0ee9aec58373cbebf0990a4eedab5d7c6fb45dde4358ab113ea95651ac571feec9d02514c611170691d19aa7cb83fe2a56307d508dea6302b891f8cb7e37eef6bf09e672ad81014fd1597eac079cfb10962735c6bd67a590c645c92cc701a2e7f916f366743b520947372659eb57a115328dba139463bddc18d97f2cfe56365e4be8c9aed696aa4e3dea894614ff13ad7822a875ec6ad7797146d09809ba1624977889c60f885d7f923f1129737613318fbaccffd5d6e242b8244fa09177031d3d5d9ff03467ba61197070f31b2a2d1b35ebd9b6df65d8259e8191964c4960f5981d4164a228248546b2fbc5e44414029907bf335bde060c6a5a2be43717d029e45a6c4ffbd2a85455183ce2ead9009dbe7f9b412c8d6b83d93d0d74ae28955d814d708048f9d27671f0f3cc2c3acb94b829d0add770aced62bcd630d2da8c2599e5537c9082f02941de7caf772b32d5dc7e183da06a2deb0810624301d959de4a7430dd03ee468a1e4b771bd8e44a2cbfd4b88a895ed71107ba63cef132aef7c11e92c580d0a597d4f7816fea97216e9b3e5b3c7f851b9e0e46c738f78c3d2b82c3bfe2ccfdc50eb950bede1caf1daeb732f958f23565ce99312aaeb1a1ab3ac07c59402ae18a21550813e390a3422c3b3bdf11631419a30cc0c50e223946015c514b6bf836572f74fae360c5022c96d56550282f7eb02e9ed589c525b944df53014face0dd0dfc821dd80cc57de1bf80ca3f365fece14a5d53d499f417825675c8ec062093ad74d6fa6052cb67f9914e0193812e31987653fbcfb3b29ff26fab21ed436f334792e800af480986475dfa321fb3d82944ae8e3d3387f435c740bf8b449bb06b551d85135f4fef5f55c992a8527435afff8533759d2372f7d314fde4e97f9ba16568e2a1612f51ef5d04283e6f20afe4d25e29cdc300a7d88ee17881b109be80d5edf88df2cfd5f29dd452b7897c49718d8c54827c85e0bf9717c5ab996d93453fac05bf8a150652b7dec77b8feea4e8bda2fbd5351239c6028e1405e9b6a80d63578e9607da0e35e6be2305c638d6d0afc8764493ed1adb27c30e5e2b5fb18dfe436daffefd3c39ebd3991f012582c320c520d2be6a84c89b1f1c20ba749d194efbbace46efc42233b7424f7fcc6cf9b84cf56891ac9b2b5c91ae906536aa52b6df294fc1b4f8c6a18c776b554922753fb1ed13e5e65fdab02cb766811b85817d99c6cb1f1d61f5d285bf5bcc70291cef2f5b92880e7784bdd61602299a6d082570752741c95e3d8b8b3ece92c0ef488fc824b9d23309de15f6ea7bbaffa3a00e133da57c3b2bd9ae6b5f90be5173eb6cdefe5ad1f4a82fd1e84882958c6a90fbacd7cc9d556a2bec56eb7e3522cc6a574666688e7b48b44a78fd5a4110be497f919a7c451faa5b359dcc7042683cc4ac719e55cffe674c606982e2e793359bdf68193423b09d378adef607b61e95165b9774985eaf9ee773ac4ff35f2b060de476cd34b54f0ec7f4d65afc311d89b7bd5abb80dd69290a238f098eba7803c3282c47d9c856aec7c131f7ffb995b55a8054b4b314e76e3ca6f48ec71736262f72c2cfc520aa64419930f6f79de00767cbdbec9b651434e44c484eab61ed03d690c629bbe4537571150bd8aa8457cc067f796c45dbf36951ad37ad2b1201f336da77c9d302dbba513b0f280a2f9229e74e9c51702d7170f2196ef6a42c6fbdc909f1f15ea9c154fdf863909bf6ca3b6a152f2175ef0f4c3d3fe93bd4fdd1c432d33ae8c898df6ba5b972b66c7af1f491a8a85f5e7decf7383cad1f7d7900e911b1a4ff9124a4f10420b3210b5f3104c22734eb95ba036f344e4f898f744a64d5c26057fead650256c63b27dfe20313c3b0df4c0247ef15115509db44b2da2bec0f4bf0c35bec9f10c94795d0c69048b38c9e71dbc6e232d68bd090225f6a22b39dee04b2b15020591040138fec9af947f593948e30a472ff61b550b16b3bfa556286aa338b2936689b8e97cd78cee6bc23862eba68807fd103c49b3de12eaa82e5a8c82dfad3ba0add24a20274347732e8c78baeba61b66a7ef376aa25b413a6801568718d8f664378d8c9c315558cadf86483796c214511d40f66ba3664d361db8b57623f4e4dd8c97eb7cd95ec1953faf8f3bafba2be809ba3ee716c1d9102a4e64edb99a8c5a6a39c3eddcfedeb56efb0ffd185cdd3c2ec6936b698cac2006eff0088ea252f5b8a3acdbeb241b4bb1c29c9e67af5194ccec39668efa14d93554a5c9122f14a4baf21791eadee9ed85eada1bfc1c238007a4b2a7c63fc2c281ca5d3948b6319bcb482d84741f4817d4b12866262503894055f3473bbf2a7ddbec2c74add3e6b66d5bbb182cff4f2b8b01e07879cb5335af8a41c52457b910fe86b5ff61117474003fac354d396892bd7995cdc14680f61fe6bebb9399b64e9f4b78dab581ea3509b75ea148b2c1cdf816db0cd85c273b28bc6842bb1192c1c73222068cde1935b1cacb9ea12026a52da47d13256a89ffb0f76a9c9cf8823f3cbc4ccf696b5f3f990c4ad1d049504df9ff6567c4c0a9bde149a406b4d8cb7f448e00fa992d9cbcb267d042d81d435d72f8f75f09837626f45c60fca90777387f605f161c6e59ad3bf85301059e332f63cb4a9d97e1a2a86f8ce9ef31e97ff507d5d3ec664b3c759b39c5689ae67be545d073a8e98fb97680b3e114d91a5ca44dea21034c765a6fed02d3f1677cfb558bd0ac50f39f34fc070b100645cfae00203a0e162743bc5fca18d74e3e38e2e1dae5a4625d843edd311931d22bff649271adb4c0d2c35c220a112fbd85432e3597c8945bd50cb1d0405eb26554f85827f662ca03cf7bc2a0e412394fcf997d550a3a1dd89e84cb3961fb8ea9a18bc8550fba375cb0511b27c1fb1791efe46ba0bbb577286584d2071ec076ed2d1183b85f50767e40bb34d13b6dd5d55c1d939af59cc5a7bcad7eaa0da8c383b915536106387f2b43ee5102bedfd93a4b7a9cb6e7feabfed0384663676adf79c2debe6d7dc8a90438143c0ce2237ab6de10aedee007c2fc4933776b4c3ea52ef5470672d545d8f25b3c85722a3d9fdc48e4661e66da7898a2ae1b174c166962eb7c4620ba2199be700833efee2eacfad52fad33eafa560a325ad3b4047cb0ad7df10b74ac381efd289f2ffa255e9db5e1640749439a13eae5d65cac880d685b6cafc10a11c44d323fcbc32f3c0b76df64a423e329d6db43df12a1622b35d76da788ba7bebb0297eea1308db691e20dbe31a2e85de9577f8a341573b1e80b6bb2b96230afc34903cba4fb9dbbe7d71bf9ffeef8bdf3a6d5eda67e65d9da3a090e6eedf6acd27a34275d5e33074c94774a3dfca7115734b9495ddde01fa296c7632cda9d97324ce056a3f77df7fa23cafb3132ca85cd3206dd4d1d22d46863a2f9fa98fe35cf1025c19e5f039d32c718d4c3894897bdc94e285d15379de8b2a38d3c01ce57eb5f084f70c5b470faf176f012eaba9ebf4cf21a012b0a36cd80ddee45524a509cee6bc457ed06efdc9e54b83f9e641452fd0f87ce215b0be06736", 0x1000, 0x7fffffff}, {&(0x7f0000001b00)="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", 0x1000, 0x9}, {&(0x7f00000001c0)="a9bd67209627d9880516216708479e04ecd792603411f056f50ca900139093e042f9930c9d70e78697f3a969f619f70051332800f520e94e3bf10f5d806df123a955f7bfe8f29ef709781f107742bed194bd", 0x52}, {&(0x7f0000000280)="6b801375c64caeb146a878aa6ba3a42c7143916f849a58aa23e9ee41d4120917cda098c832b8915cd14150ce2e833376715481398ec9fa50d5d90c4e18ca0090d2245db94b7f4e84606554fcebf0ae404f9f44", 0x53, 0x2}, {&(0x7f0000000300)="93c476f4617b229cf42fb0ea415196e7dbd41348ee211212c9668afb2b42342820c270a98cca295857221c117c438280fc967ee29b9f44c7a6740196269b5b22643755aba6ed84c5dc9621e978c6fca620d4154121e58764abe74012bf09de4cbd5439565bf93d4256308086e9e01bcc7bb6af88d266d3839ce462553ac9e24992db9efa76d2d9b93aab4f9e1ecfb55c3f6085160d8c9a2b564091a75a89c75f9f6a527821d133f7a7a6a0875cbe5863d2fd7db9e2c2", 0xb6, 0x200}], 0x0, &(0x7f0000001500)={[{@noauto_da_alloc='noauto_da_alloc'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@data_ordered='data=ordered'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@journal_async_commit='journal_async_commit'}, {@nombcache='nombcache'}, {@acl='acl'}, {@bsddf='bsddf'}], [{@context={'context', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, './cgroup.net/syz1\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@euid_lt={'euid<', r4}}, {@uid_eq={'uid', 0x3d, r6}}]}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 363.928116] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 363.946894] Unknown ioctl -993503981 [ 363.949666] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 364.030300] dccp_invalid_packet: P.Data Offset(0) too small 04:44:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000005c0)={0x80, 0x5, 0x3, 0x5, 0x0, "26411bf465cb0d23c4e03a5598a72903c75cdc", 0xb2, 0x9}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @remote, @multicast1, 0x4}}}, {{@arp={@multicast1, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'tunl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev, @empty, @dev, 0x5}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000004c0)=0x8) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000600)={0x1, "6ec6c6234f11bbfea983d0406c13cd580f255ead94045e91e1001b1641f27ef7842ad30f9ee856aaf1d3e698770db25681db2d8e1719d49ec3e83b5363771e3c", {0x6, 0x8}}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r5, 0x8000, 0x8, 0xe0000000}, &(0x7f0000000540)=0x10) 04:44:33 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:44:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000140)={{0x8, 0x6, 0x2fc, 0x1f, 'syz1\x00', 0x10001}, 0x0, [0x7, 0x10000, 0x14b, 0x8, 0x5, 0xec3, 0x0, 0x400, 0x6, 0x5, 0xce8, 0x6, 0x1, 0x3f, 0xcc08, 0x5, 0x7f, 0x101, 0x4, 0x7, 0x0, 0x9, 0x3, 0x961e, 0x4c, 0x4, 0x9d20, 0x0, 0x8, 0x1, 0x3, 0xa26, 0xe, 0x4, 0x40b000000000, 0x8, 0x18, 0xff, 0x10000, 0xfffffffffffffff8, 0x2, 0x100000000, 0x6, 0x81, 0x0, 0xf5, 0xfffffffffffffff7, 0x3ff, 0x7fffffff, 0x3f, 0x0, 0x80, 0xe0, 0x0, 0x200, 0xfffffffffffffffc, 0x8000, 0xffffffff, 0x2, 0xec6c, 0x6, 0x5, 0x3, 0x7, 0x8, 0x5, 0x6, 0xe69, 0x6, 0x5, 0x80000000, 0x8, 0x0, 0x8, 0x2, 0x4, 0x3, 0xfff, 0xff, 0x401, 0x9, 0xcfa, 0x8, 0x80000000, 0xa74f, 0x2, 0x4, 0x4, 0x7, 0x1, 0x3f, 0x92, 0x3, 0x8, 0x9, 0x7fff, 0x1ff, 0x0, 0x3, 0x6, 0x6bf6, 0xb8, 0x1ff, 0xfffffffffffffffa, 0xffffffff, 0xdcd, 0x80000000, 0xfffffffffffffff7, 0x6, 0x5, 0xecda, 0x0, 0x800, 0x4, 0x200, 0x0, 0x9, 0x1, 0x9, 0x5731, 0x8, 0x1, 0x45cb, 0x401, 0x7ff, 0x7fffffff, 0x8, 0x6]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 364.120312] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 04:44:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10007, 0x0) clock_gettime(0x3, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x8, 0xa, 0x4, 0x1000, 0x8, {r2, r3/1000+30000}, {0x1, 0xc, 0x8, 0x2, 0xee, 0x9, '\x00\r\x00'}, 0x8, 0x2, @userptr=0x538310aa, 0x10000, 0x0, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24000810) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 364.201196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.249673] Unknown ioctl -993503981 04:44:33 executing program 1 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 364.345135] arp_tables: arptables: counters copy to user failed while replacing table [ 364.373299] FAULT_INJECTION: forcing a failure. [ 364.373299] name failslab, interval 1, probability 0, space 0, times 0 [ 364.389018] CPU: 1 PID: 24218 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 364.397020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.406729] Call Trace: [ 364.409333] dump_stack+0x13e/0x194 [ 364.413091] should_fail.cold+0x10a/0x14b [ 364.417367] should_failslab+0xd6/0x130 [ 364.421374] kmem_cache_alloc_node+0x288/0x7a0 [ 364.425969] ? find_held_lock+0x2d/0x110 [ 364.430036] ? get_pid_task+0x91/0x130 [ 364.433952] copy_process.part.0+0x17d5/0x6a70 [ 364.438546] ? get_pid_task+0xb8/0x130 [ 364.442437] ? proc_fail_nth_write+0x7b/0x180 [ 364.447001] ? save_trace+0x290/0x290 [ 364.450806] ? __lock_is_held+0xad/0x140 [ 364.454877] ? find_held_lock+0x2d/0x110 [ 364.458957] ? __cleanup_sighand+0x40/0x40 [ 364.463203] ? lock_downgrade+0x6e0/0x6e0 [ 364.467371] _do_fork+0x180/0xc80 [ 364.471016] ? fork_idle+0x270/0x270 [ 364.474745] ? fput+0xb/0x140 [ 364.477858] ? SyS_write+0x14d/0x210 [ 364.481577] ? SyS_read+0x210/0x210 [ 364.485199] ? SyS_clock_settime+0x1a0/0x1a0 [ 364.489614] ? do_syscall_64+0x4c/0x640 [ 364.493626] ? sys_vfork+0x20/0x20 [ 364.497156] do_syscall_64+0x1d5/0x640 [ 364.501037] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.506210] RIP: 0033:0x45c4a9 [ 364.509394] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 364.517084] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 364.524481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 364.531771] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 364.539032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 364.546289] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000000 [ 364.559236] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:33 executing program 1 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:33 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r7, 0x800000c004500a, &(0x7f0000000300)) splice(r6, 0x0, r7, 0x0, 0x10003, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x1, 0x70, 0x6, 0x2, 0xff, 0x3, 0x0, 0x5, 0x442c0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff8}, 0x10, 0x5, 0x7cabf64f, 0x9, 0x10001, 0x9, 0x81}) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000018007f5300fe01b2a4a280930a600000ffa84308", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 04:44:33 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000440)={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0x1, [@dev={0xac, 0x14, 0x14, 0xa}]}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r7) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x188, 0x13, 0x100, 0x70bd26, 0x25dfdbfc, {0x26, 0x8, 0x1, 0x81, {0x4e24, 0x4e23, [0x3, 0x1, 0x20, 0x9], [0x1, 0x3, 0xca, 0x5], r7, [0x81]}, 0x4, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "6d89fe84b49224d6d560d24eefe28eae9cd9d4f7af54ca9a931311b1abf6d8fdcbc192c466802f29a3baee5c309a37e5e6b0973098b0026919a4fe28b377560cc1ca62536cb8eec7d562838f8be14006ab91433f295453cbd7a11c5bb903ad06db8e41db85ed7a78e9a9f458f4b2de363da6dd3386f6a399533f7d6e7835b5b235360a9861edad04b4fddf409059f19cbd732514"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "079459ce4095f443cd3211884687e3d8e624d0e31645a289f4d915ffb461936c5bc77d7a86b5d096d82d1e9f374c52624e1a1d72001362beee685f134d4458f5d6d63d6d46ea4c7767229561c7fd884f1fcce722df545bb6097287a62d53"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "20e2811bd4b195b82615bab07c95c0f69eb7b581a6fd2fdaeed51964a0f7031fd3a992f0a0da9adfaab10beb0e9f6e9f2905e41f0c795eb5a55e37bd"}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, 0x12001}, [@IFLA_PROTO_DOWN={0x5, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 364.849714] FAULT_INJECTION: forcing a failure. [ 364.849714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.857622] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.870395] CPU: 0 PID: 24230 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 364.878306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.887672] Call Trace: [ 364.890296] dump_stack+0x13e/0x194 [ 364.893939] should_fail.cold+0x10a/0x14b 04:44:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 364.898109] __alloc_pages_nodemask+0x1bf/0x700 [ 364.903226] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 364.908247] ? copy_process.part.0+0x17d5/0x6a70 [ 364.913007] ? rcu_read_lock_sched_held+0x10a/0x130 [ 364.918045] copy_process.part.0+0x26a/0x6a70 [ 364.922580] ? get_pid_task+0xb8/0x130 [ 364.926504] ? proc_fail_nth_write+0x7b/0x180 [ 364.931004] ? save_trace+0x290/0x290 [ 364.934812] ? __lock_is_held+0xad/0x140 [ 364.938388] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.938879] ? find_held_lock+0x2d/0x110 [ 364.938897] ? __cleanup_sighand+0x40/0x40 [ 364.938909] ? lock_downgrade+0x6e0/0x6e0 [ 364.938924] _do_fork+0x180/0xc80 [ 364.938937] ? fork_idle+0x270/0x270 [ 364.957974] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.959368] ? fput+0xb/0x140 [ 364.959379] ? SyS_write+0x14d/0x210 [ 364.959388] ? SyS_read+0x210/0x210 [ 364.959399] ? SyS_clock_settime+0x1a0/0x1a0 [ 364.959409] ? do_syscall_64+0x4c/0x640 [ 364.959423] ? sys_vfork+0x20/0x20 [ 364.968194] IPv6: NLM_F_REPLACE set, but no existing node found! [ 364.975254] do_syscall_64+0x1d5/0x640 [ 364.975273] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 364.975282] RIP: 0033:0x45c4a9 [ 364.975288] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 364.975299] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 364.975304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 364.975308] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:44:33 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:33 executing program 1 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:34 executing program 3: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="fb000000", @ANYBLOB="000000000000000000000f000000360002000800010000000000040004000800020000000000080002000000000008000100000000002c00070008000200000000000c000400000000000000000008000100000000000c00040009"], 0x2}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302", 0x11}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) getsockopt$inet6_buf(r4, 0x29, 0xcc, &(0x7f0000000200)=""/181, &(0x7f0000000040)=0xb5) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 364.975312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 364.975316] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000001 [ 365.115426] FAULT_INJECTION: forcing a failure. [ 365.115426] name failslab, interval 1, probability 0, space 0, times 0 [ 365.118214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.132314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.140702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.156603] CPU: 0 PID: 24248 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 365.167547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.167978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.176903] Call Trace: [ 365.176928] dump_stack+0x13e/0x194 [ 365.176947] should_fail.cold+0x10a/0x14b [ 365.176962] should_failslab+0xd6/0x130 [ 365.176972] kmem_cache_alloc+0x2b5/0x770 [ 365.176982] ? selinux_is_enabled+0x5/0x50 [ 365.176992] ? creds_are_invalid+0x44/0x100 [ 365.177003] ? __validate_process_creds+0x19e/0x1f0 [ 365.177015] prepare_creds+0x37/0x380 [ 365.177027] copy_creds+0x72/0x4d0 [ 365.190436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.191678] copy_process.part.0+0x868/0x6a70 [ 365.191696] ? get_pid_task+0xb8/0x130 [ 365.196292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.199448] ? proc_fail_nth_write+0x7b/0x180 04:44:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_getattr(r0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x10) rmdir(&(0x7f0000000000)='./file0\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r3, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x10007, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x2, 0x3, 0x4, 0xff22, r6}) 04:44:34 executing program 1 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 365.199460] ? save_trace+0x290/0x290 [ 365.199470] ? __lock_is_held+0xad/0x140 [ 365.199481] ? find_held_lock+0x2d/0x110 [ 365.206530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.207590] ? __cleanup_sighand+0x40/0x40 [ 365.207603] ? lock_downgrade+0x6e0/0x6e0 [ 365.207618] _do_fork+0x180/0xc80 [ 365.213738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.216153] ? fork_idle+0x270/0x270 [ 365.216165] ? fput+0xb/0x140 [ 365.216175] ? SyS_write+0x14d/0x210 [ 365.222517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.224970] ? SyS_read+0x210/0x210 [ 365.224982] ? SyS_clock_settime+0x1a0/0x1a0 [ 365.224992] ? do_syscall_64+0x4c/0x640 [ 365.225003] ? sys_vfork+0x20/0x20 [ 365.229395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.240710] do_syscall_64+0x1d5/0x640 [ 365.240728] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.240737] RIP: 0033:0x45c4a9 [ 365.240742] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 365.240752] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 365.240756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 365.240760] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.240765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 365.240769] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000002 [ 365.318656] FAULT_INJECTION: forcing a failure. [ 365.318656] name failslab, interval 1, probability 0, space 0, times 0 [ 365.417713] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.423241] CPU: 0 PID: 24256 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 365.448953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.458399] Call Trace: [ 365.460998] dump_stack+0x13e/0x194 [ 365.464724] should_fail.cold+0x10a/0x14b [ 365.469054] should_failslab+0xd6/0x130 [ 365.473045] __kmalloc_track_caller+0x2e1/0x7b0 [ 365.475937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=24238 comm=syz-executor.0 [ 365.477716] ? selinux_cred_prepare+0x44/0xa0 [ 365.477731] ? prepare_creds+0x37/0x380 [ 365.477744] kmemdup+0x23/0x50 [ 365.477755] selinux_cred_prepare+0x44/0xa0 [ 365.477766] security_prepare_creds+0x76/0xb0 [ 365.477777] prepare_creds+0x2cc/0x380 [ 365.514169] copy_creds+0x72/0x4d0 [ 365.517716] copy_process.part.0+0x868/0x6a70 [ 365.522226] ? get_pid_task+0xb8/0x130 [ 365.526122] ? proc_fail_nth_write+0x7b/0x180 [ 365.530622] ? save_trace+0x290/0x290 [ 365.534420] ? __lock_is_held+0xad/0x140 [ 365.538499] ? find_held_lock+0x2d/0x110 [ 365.542429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.542570] ? __cleanup_sighand+0x40/0x40 [ 365.554778] ? lock_downgrade+0x6e0/0x6e0 [ 365.559056] _do_fork+0x180/0xc80 [ 365.562518] ? fork_idle+0x270/0x270 [ 365.566236] ? fput+0xb/0x140 [ 365.569348] ? SyS_write+0x14d/0x210 [ 365.573069] ? SyS_read+0x210/0x210 [ 365.576697] ? SyS_clock_settime+0x1a0/0x1a0 [ 365.581125] ? do_syscall_64+0x4c/0x640 [ 365.585101] ? sys_vfork+0x20/0x20 [ 365.588645] do_syscall_64+0x1d5/0x640 [ 365.592702] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.597894] RIP: 0033:0x45c4a9 [ 365.601085] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 365.608804] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 365.616083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 365.623359] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.630662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 365.637944] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000003 04:44:34 executing program 1 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:34 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r0, 0x1000}, 0x8) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x8, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x7439, 0x6, 0x0, 0x1}, r1, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) mknodat(0xffffffffffffffff, 0x0, 0x400, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000300)={0xffff, 0x3, 0x0, &(0x7f00000002c0)}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$inet_group_source_req(r4, 0x0, 0x29, &(0x7f0000000340)={0x3ff, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) r5 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000640)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 365.835522] FAULT_INJECTION: forcing a failure. [ 365.835522] name failslab, interval 1, probability 0, space 0, times 0 [ 365.855057] CPU: 0 PID: 24287 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 365.863120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.872554] Call Trace: [ 365.875156] dump_stack+0x13e/0x194 [ 365.879251] should_fail.cold+0x10a/0x14b [ 365.883421] should_failslab+0xd6/0x130 [ 365.887509] kmem_cache_alloc+0x2b5/0x770 [ 365.891669] ? selinux_is_enabled+0x5/0x50 [ 365.895911] ? creds_are_invalid+0x44/0x100 [ 365.900239] ? selinux_is_enabled+0x5/0x50 [ 365.904480] ? creds_are_invalid+0x44/0x100 [ 365.908811] __delayacct_tsk_init+0x1b/0x80 [ 365.913139] copy_process.part.0+0x1a6c/0x6a70 [ 365.917733] ? get_pid_task+0xb8/0x130 [ 365.921626] ? proc_fail_nth_write+0x7b/0x180 [ 365.926124] ? save_trace+0x290/0x290 [ 365.929923] ? __lock_is_held+0xad/0x140 04:44:34 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 365.933999] ? __cleanup_sighand+0x40/0x40 [ 365.938236] ? lock_downgrade+0x6e0/0x6e0 [ 365.942391] _do_fork+0x180/0xc80 [ 365.945851] ? fork_idle+0x270/0x270 [ 365.949567] ? fput+0xb/0x140 [ 365.952692] ? SyS_write+0x14d/0x210 [ 365.956412] ? SyS_read+0x210/0x210 [ 365.960041] ? SyS_clock_settime+0x1a0/0x1a0 [ 365.964452] ? do_syscall_64+0x4c/0x640 [ 365.968427] ? sys_vfork+0x20/0x20 [ 365.971981] do_syscall_64+0x1d5/0x640 [ 365.975878] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 365.981065] RIP: 0033:0x45c4a9 04:44:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f27aa03e82dd8f4b536c5cbd461eda", 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10007, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r1}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) r4 = accept$alg(r0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000300)) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) dup2(r5, r6) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x17) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x10007, 0x9) setsockopt$sock_void(r7, 0x1, 0x1b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x6d, @empty, 0x4000}, 0x1c) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x1a1d42, 0x0) ioctl$int_in(r9, 0x800000c004500a, &(0x7f0000000300)) fcntl$dupfd(r0, 0x0, r9) [ 365.984252] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 365.992390] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 365.999660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 366.006956] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.014222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 366.021626] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000004 [ 366.161254] syz-executor.4 (24281) used greatest stack depth: 23968 bytes left 04:44:35 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:35 executing program 1 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 366.591186] FAULT_INJECTION: forcing a failure. [ 366.591186] name failslab, interval 1, probability 0, space 0, times 0 [ 366.602745] CPU: 0 PID: 24315 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 366.610648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.620014] Call Trace: [ 366.622617] dump_stack+0x13e/0x194 [ 366.626276] should_fail.cold+0x10a/0x14b [ 366.630446] should_failslab+0xd6/0x130 [ 366.634416] kmem_cache_alloc+0x2b5/0x770 [ 366.638579] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 366.643686] dup_fd+0x81/0xa40 [ 366.646904] ? perf_event_init_task+0xfa/0x790 [ 366.651480] ? audit_alloc+0x86/0x640 [ 366.655279] copy_process.part.0+0x1b5a/0x6a70 [ 366.659871] ? get_pid_task+0xb8/0x130 [ 366.663757] ? proc_fail_nth_write+0x7b/0x180 [ 366.668254] ? save_trace+0x290/0x290 [ 366.672214] ? __lock_is_held+0xad/0x140 [ 366.676284] ? __cleanup_sighand+0x40/0x40 [ 366.680510] ? lock_downgrade+0x6e0/0x6e0 [ 366.684658] _do_fork+0x180/0xc80 [ 366.688126] ? fork_idle+0x270/0x270 [ 366.691858] ? fput+0xb/0x140 [ 366.694974] ? SyS_write+0x14d/0x210 [ 366.698684] ? SyS_read+0x210/0x210 [ 366.702303] ? SyS_clock_settime+0x1a0/0x1a0 [ 366.706700] ? do_syscall_64+0x4c/0x640 [ 366.710672] ? sys_vfork+0x20/0x20 [ 366.714210] do_syscall_64+0x1d5/0x640 [ 366.718096] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 366.723277] RIP: 0033:0x45c4a9 [ 366.726453] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 366.734158] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:35 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 366.741413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 366.748676] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.755946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 366.763224] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000005 04:44:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) 04:44:35 executing program 1 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:35 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 367.031657] FAULT_INJECTION: forcing a failure. [ 367.031657] name failslab, interval 1, probability 0, space 0, times 0 04:44:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000100)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0xd2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0)="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", 0x1000}, 0x68) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10007, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0)) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2000000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x309}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}}, 0x8000) tkill(r1, 0x9) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r6, 0x0) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe00000000000000, 0x0, 0xffffffffffffffc2) [ 367.096325] CPU: 0 PID: 24332 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 367.104283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.113647] Call Trace: [ 367.116249] dump_stack+0x13e/0x194 [ 367.119890] should_fail.cold+0x10a/0x14b [ 367.124050] should_failslab+0xd6/0x130 [ 367.128058] kmem_cache_alloc_trace+0x2db/0x7b0 [ 367.132741] ? lock_downgrade+0x6e0/0x6e0 [ 367.136903] alloc_fdtable+0x78/0x270 [ 367.140830] dup_fd+0x683/0xa40 04:44:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 367.144124] copy_process.part.0+0x1b5a/0x6a70 [ 367.148717] ? get_pid_task+0xb8/0x130 [ 367.152607] ? proc_fail_nth_write+0x7b/0x180 [ 367.157106] ? save_trace+0x290/0x290 [ 367.160913] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 367.165859] ? __cleanup_sighand+0x40/0x40 [ 367.170104] ? lock_downgrade+0x6e0/0x6e0 [ 367.174270] _do_fork+0x180/0xc80 [ 367.178790] ? fork_idle+0x270/0x270 [ 367.182510] ? fput+0xb/0x140 [ 367.185623] ? SyS_write+0x14d/0x210 [ 367.189344] ? SyS_read+0x210/0x210 [ 367.192991] ? SyS_clock_settime+0x1a0/0x1a0 [ 367.197406] ? do_syscall_64+0x4c/0x640 [ 367.201387] ? sys_vfork+0x20/0x20 [ 367.204937] do_syscall_64+0x1d5/0x640 [ 367.208838] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 367.214031] RIP: 0033:0x45c4a9 [ 367.217380] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 367.225102] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 367.232382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 367.239661] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.246941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 367.254221] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000006 04:44:36 executing program 1 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) 04:44:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 367.419487] FAULT_INJECTION: forcing a failure. [ 367.419487] name failslab, interval 1, probability 0, space 0, times 0 [ 367.489890] CPU: 1 PID: 24353 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 367.497824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.507188] Call Trace: [ 367.509793] dump_stack+0x13e/0x194 [ 367.513446] should_fail.cold+0x10a/0x14b [ 367.517610] should_failslab+0xd6/0x130 [ 367.521597] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 367.526719] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 367.532178] ? alloc_fdtable+0x78/0x270 [ 367.536160] ? rcu_read_lock_sched_held+0x10a/0x130 [ 367.541186] __kmalloc_node+0x38/0x70 [ 367.544996] kvmalloc_node+0x46/0xd0 [ 367.548716] alloc_fdtable+0xc7/0x270 [ 367.552531] dup_fd+0x683/0xa40 [ 367.555828] copy_process.part.0+0x1b5a/0x6a70 [ 367.560429] ? get_pid_task+0xb8/0x130 [ 367.564327] ? proc_fail_nth_write+0x7b/0x180 [ 367.569006] ? save_trace+0x290/0x290 [ 367.572820] ? __lock_is_held+0xad/0x140 [ 367.576911] ? __cleanup_sighand+0x40/0x40 [ 367.581154] ? lock_downgrade+0x6e0/0x6e0 [ 367.585317] _do_fork+0x180/0xc80 [ 367.588784] ? fork_idle+0x270/0x270 [ 367.592512] ? fput+0xb/0x140 [ 367.595619] ? SyS_write+0x14d/0x210 [ 367.599336] ? SyS_read+0x210/0x210 [ 367.604529] ? SyS_clock_settime+0x1a0/0x1a0 [ 367.609052] ? do_syscall_64+0x4c/0x640 [ 367.613035] ? sys_vfork+0x20/0x20 [ 367.616571] do_syscall_64+0x1d5/0x640 [ 367.620476] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 367.625671] RIP: 0033:0x45c4a9 [ 367.628856] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 04:44:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 367.636552] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 367.643808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 367.651075] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.658333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 367.665597] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000007 04:44:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x18216}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) open(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') 04:44:36 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x18216}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) open(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') 04:44:37 executing program 1 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) unshare(0x8000400) r0 = mq_open(&(0x7f0000000100)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0xd2a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0)="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", 0x1000}, 0x68) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10007, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0)) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2000000000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x309}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}}, 0x8000) tkill(r1, 0x9) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000005, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r6, 0x0) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe00000000000000, 0x0, 0xffffffffffffffc2) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 368.304024] FAULT_INJECTION: forcing a failure. [ 368.304024] name failslab, interval 1, probability 0, space 0, times 0 [ 368.350556] CPU: 1 PID: 24402 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 368.358670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.368033] Call Trace: [ 368.370629] dump_stack+0x13e/0x194 [ 368.374277] should_fail.cold+0x10a/0x14b [ 368.378597] should_failslab+0xd6/0x130 [ 368.382594] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 368.387712] ? kasan_kmalloc+0xbf/0xe0 [ 368.391618] __kmalloc_node+0x38/0x70 [ 368.395426] kvmalloc_node+0x46/0xd0 [ 368.399153] alloc_fdtable+0x133/0x270 [ 368.403047] dup_fd+0x683/0xa40 [ 368.406341] copy_process.part.0+0x1b5a/0x6a70 [ 368.410947] ? get_pid_task+0xb8/0x130 [ 368.414841] ? proc_fail_nth_write+0x7b/0x180 [ 368.419344] ? save_trace+0x290/0x290 [ 368.423158] ? __lock_is_held+0xad/0x140 [ 368.427234] ? __cleanup_sighand+0x40/0x40 [ 368.431472] ? lock_downgrade+0x6e0/0x6e0 [ 368.435630] _do_fork+0x180/0xc80 [ 368.439123] ? fork_idle+0x270/0x270 [ 368.442841] ? fput+0xb/0x140 [ 368.445949] ? SyS_write+0x14d/0x210 [ 368.449655] ? SyS_read+0x210/0x210 [ 368.453284] ? SyS_clock_settime+0x1a0/0x1a0 [ 368.457873] ? do_syscall_64+0x4c/0x640 [ 368.461859] ? sys_vfork+0x20/0x20 [ 368.465411] do_syscall_64+0x1d5/0x640 [ 368.469309] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 368.474502] RIP: 0033:0x45c4a9 [ 368.477698] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 368.485411] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 368.492687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) [ 368.499966] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 368.507407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 368.514683] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000008 04:44:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:37 executing program 1 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:37 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 369.063088] FAULT_INJECTION: forcing a failure. [ 369.063088] name failslab, interval 1, probability 0, space 0, times 0 [ 369.075079] CPU: 1 PID: 24443 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 369.076666] net_ratelimit: 15 callbacks suppressed [ 369.076670] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.082979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.082983] Call Trace: [ 369.083004] dump_stack+0x13e/0x194 [ 369.083021] should_fail.cold+0x10a/0x14b [ 369.083036] should_failslab+0xd6/0x130 [ 369.083046] kmem_cache_alloc+0x2b5/0x770 [ 369.083058] ? dup_fd+0x516/0xa40 [ 369.083075] copy_fs_struct+0x43/0x2d0 [ 369.083087] copy_process.part.0+0x3974/0x6a70 [ 369.083103] ? get_pid_task+0xb8/0x130 [ 369.083114] ? proc_fail_nth_write+0x7b/0x180 [ 369.083122] ? save_trace+0x290/0x290 [ 369.083132] ? __lock_is_held+0xad/0x140 [ 369.083151] ? __cleanup_sighand+0x40/0x40 [ 369.083161] ? lock_downgrade+0x6e0/0x6e0 [ 369.083177] _do_fork+0x180/0xc80 [ 369.083200] ? fork_idle+0x270/0x270 [ 369.083212] ? fput+0xb/0x140 [ 369.083220] ? SyS_write+0x14d/0x210 [ 369.083231] ? SyS_read+0x210/0x210 [ 369.177844] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.182246] ? do_syscall_64+0x4c/0x640 [ 369.186312] ? sys_vfork+0x20/0x20 [ 369.189878] do_syscall_64+0x1d5/0x640 [ 369.193758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.198943] RIP: 0033:0x45c4a9 [ 369.202123] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.209818] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 369.217076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 369.224335] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.231605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 369.238883] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000009 04:44:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) lchown(&(0x7f0000000040)='./file0\x00', r2, 0x0) splice(r0, 0x0, r1, 0x0, 0x10007, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10007, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/157}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r8 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4000000000000000, 0x0, 0x8, 0x1, 0x0, r8, 0x0}]) r10 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82c00) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000007826}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xffff, 0x103400) r13 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0xa5, 0x450601) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r14, &(0x7f00000017c0), 0x3da, 0x0) r15 = creat(&(0x7f0000000480)='./file0\x00', 0xc0) r16 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r17 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r17, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r17, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10500, 0x0, 0x102, 0x8000003}, 0x20) r18 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r17, r18, &(0x7f0000000240)=0x202, 0x4000000000dc) r19 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r18, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14080000", @ANYRES16=r19, @ANYBLOB="050c2700feff010088e353127300b63b9ad5e7e0"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r16, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="40150000", @ANYRES16=r19, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NBD_CMD_CONNECT(r15, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6800015e7e553dfa7a1bde077fb87700", @ANYRES16=r19, @ANYBLOB="080026bd7000fddbdf25010000000c000800ffffffff000000000c00060002000000000000000c00030004000000000000000c00040004000000000000000c00030005000000000000000c00050000010000000000000c000200000000000000000093be8c245ed70abcfbe1dcda8810ec8b496e71cc8d90a26f44fbfbe14dedd7d83ca5bd05ed7bdade06107107ca70b0346ee736da7e677a9cfeec5d10a1"], 0x68}, 0x1, 0x0, 0x0, 0x24000}, 0x41) r20 = dup(r11) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000280)={0xf000000, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa00902, 0x2, [], @value=0x7fffffff}}) r22 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r22, &(0x7f00000017c0), 0x3da, 0x0) socketpair(0x6, 0x4, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) r24 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r24, &(0x7f00000017c0), 0x3da, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r14, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r19, @ANYBLOB="20002bbd7000fedbdf25030000002c00078008000100", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100a482177ec3ede9ccf8078124326c27de694335686b86e8ac308542f34c1e3c46570d9888f468f3f41f34a80ad9968b070994a6bdbe0e52110cebdbd9ae6b7570", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060000000000000000000c00030004000000000000002400078008000100", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="040007800c0002000800000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="20ff0000", @ANYRES16=r19, @ANYBLOB="20002abd7000fddbdf25010000000c0005000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004c40}, 0x40040) r25 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x74, r19, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r25}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) sendmsg$NBD_CMD_STATUS(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r19, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x20}}, 0x0) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:38 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:38 executing program 1 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 369.453674] FAULT_INJECTION: forcing a failure. [ 369.453674] name failslab, interval 1, probability 0, space 0, times 0 [ 369.473334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.489001] CPU: 0 PID: 24454 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 369.496942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.506310] Call Trace: [ 369.508920] dump_stack+0x13e/0x194 [ 369.512568] should_fail.cold+0x10a/0x14b [ 369.516735] should_failslab+0xd6/0x130 [ 369.520725] kmem_cache_alloc+0x2b5/0x770 [ 369.524892] ? do_raw_spin_unlock+0x164/0x250 [ 369.529402] ? _raw_spin_unlock+0x29/0x40 [ 369.533574] copy_process.part.0+0x39d7/0x6a70 [ 369.538260] ? get_pid_task+0xb8/0x130 [ 369.542165] ? proc_fail_nth_write+0x7b/0x180 [ 369.546660] ? save_trace+0x290/0x290 [ 369.550470] ? __lock_is_held+0xad/0x140 [ 369.554549] ? __cleanup_sighand+0x40/0x40 [ 369.558791] ? lock_downgrade+0x6e0/0x6e0 [ 369.562973] _do_fork+0x180/0xc80 [ 369.566422] ? fork_idle+0x270/0x270 [ 369.570167] ? fput+0xb/0x140 [ 369.573262] ? SyS_write+0x14d/0x210 [ 369.576962] ? SyS_read+0x210/0x210 [ 369.580576] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.584977] ? do_syscall_64+0x4c/0x640 [ 369.588941] ? sys_vfork+0x20/0x20 [ 369.592558] do_syscall_64+0x1d5/0x640 [ 369.596444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.601991] RIP: 0033:0x45c4a9 [ 369.610214] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.617997] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 369.625271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 369.632529] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.639814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:38 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 369.647433] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000a 04:44:38 executing program 1 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) 04:44:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x10007, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082abd7000fbdbdf250900000011000700ca74b2adab806c502345ee880a00000011000700e08507d06c4ea336f105ac5fb90000008f89df5d510d6cf8cd4583c15dde3707f720aed8806efd4d405c8a718d247fed968721e99a9cc5877dcda7ac3e2340075976c668aa9a19f89afcd1983b657174073aac31da2572ef89216a"], 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) rmdir(&(0x7f0000000000)='./file0\x00') [ 369.811530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.815871] FAULT_INJECTION: forcing a failure. [ 369.815871] name failslab, interval 1, probability 0, space 0, times 0 [ 369.840398] CPU: 0 PID: 24477 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 369.848332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.857698] Call Trace: [ 369.860302] dump_stack+0x13e/0x194 [ 369.863956] should_fail.cold+0x10a/0x14b [ 369.868123] should_failslab+0xd6/0x130 [ 369.872109] kmem_cache_alloc+0x2b5/0x770 [ 369.876276] ? lock_downgrade+0x6e0/0x6e0 [ 369.880598] ? _raw_spin_unlock_irq+0x24/0x80 [ 369.885098] copy_process.part.0+0x1cd5/0x6a70 [ 369.889681] ? get_pid_task+0xb8/0x130 [ 369.893584] ? proc_fail_nth_write+0x7b/0x180 [ 369.898077] ? save_trace+0x290/0x290 [ 369.901879] ? __lock_is_held+0xad/0x140 [ 369.906065] ? __cleanup_sighand+0x40/0x40 [ 369.910305] ? lock_downgrade+0x6e0/0x6e0 [ 369.914487] _do_fork+0x180/0xc80 [ 369.917966] ? fork_idle+0x270/0x270 [ 369.921676] ? fput+0xb/0x140 [ 369.924772] ? SyS_write+0x14d/0x210 [ 369.928475] ? SyS_read+0x210/0x210 [ 369.932091] ? SyS_clock_settime+0x1a0/0x1a0 [ 369.936514] ? do_syscall_64+0x4c/0x640 [ 369.940823] ? sys_vfork+0x20/0x20 [ 369.944465] do_syscall_64+0x1d5/0x640 [ 369.948369] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 369.953563] RIP: 0033:0x45c4a9 04:44:38 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 369.956841] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.964537] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 369.971795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 369.979077] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 369.986354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 369.993755] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000b 04:44:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) 04:44:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:39 executing program 1 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r7, 0xffffffffffffffff, 0x0, 0xedc0) [ 370.095765] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:39 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 370.221164] FAULT_INJECTION: forcing a failure. [ 370.221164] name failslab, interval 1, probability 0, space 0, times 0 [ 370.253122] CPU: 1 PID: 24505 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 370.261093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.270490] Call Trace: [ 370.273094] dump_stack+0x13e/0x194 [ 370.276744] should_fail.cold+0x10a/0x14b [ 370.280912] should_failslab+0xd6/0x130 [ 370.285514] kmem_cache_alloc+0x2b5/0x770 [ 370.286304] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.289814] ? find_held_lock+0x2d/0x110 [ 370.289829] ? copy_namespaces+0x112/0x310 [ 370.289845] ? cap_capable+0x1c4/0x230 [ 370.310525] create_new_namespaces+0x30/0x730 [ 370.315042] ? security_capable+0x88/0xb0 [ 370.319210] copy_namespaces+0x27b/0x310 [ 370.323287] copy_process.part.0+0x2603/0x6a70 [ 370.327897] ? get_pid_task+0xb8/0x130 [ 370.331797] ? save_trace+0x290/0x290 [ 370.335632] ? __lock_is_held+0xad/0x140 [ 370.339716] ? __cleanup_sighand+0x40/0x40 [ 370.343961] ? lock_downgrade+0x6e0/0x6e0 [ 370.349170] _do_fork+0x180/0xc80 [ 370.352641] ? fork_idle+0x270/0x270 [ 370.356364] ? fput+0xb/0x140 [ 370.359570] ? SyS_write+0x14d/0x210 [ 370.363291] ? SyS_read+0x210/0x210 [ 370.366921] ? SyS_clock_settime+0x1a0/0x1a0 [ 370.372290] ? do_syscall_64+0x4c/0x640 [ 370.377319] ? sys_vfork+0x20/0x20 [ 370.380868] do_syscall_64+0x1d5/0x640 [ 370.384758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.389956] RIP: 0033:0x45c4a9 [ 370.393154] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 370.400861] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 370.408138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:39 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 370.415409] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.422693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 370.429954] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000c 04:44:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:39 executing program 1 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) [ 370.539879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 370.569919] FAULT_INJECTION: forcing a failure. [ 370.569919] name failslab, interval 1, probability 0, space 0, times 0 [ 370.611000] CPU: 0 PID: 24528 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 370.618964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.628319] Call Trace: [ 370.631000] dump_stack+0x13e/0x194 [ 370.634634] should_fail.cold+0x10a/0x14b [ 370.638783] should_failslab+0xd6/0x130 [ 370.642749] kmem_cache_alloc_trace+0x2db/0x7b0 [ 370.647412] ? retire_userns_sysctls+0x80/0x80 [ 370.652724] alloc_mnt_ns+0xd4/0x440 [ 370.656427] copy_mnt_ns+0x8e/0x8a0 [ 370.660051] ? find_held_lock+0x2d/0x110 [ 370.664119] ? copy_namespaces+0x112/0x310 [ 370.668343] ? cap_capable+0x1c4/0x230 [ 370.672232] create_new_namespaces+0xc9/0x730 [ 370.676719] ? security_capable+0x88/0xb0 [ 370.680861] copy_namespaces+0x27b/0x310 [ 370.684915] copy_process.part.0+0x2603/0x6a70 [ 370.689489] ? get_pid_task+0xb8/0x130 [ 370.693382] ? save_trace+0x290/0x290 [ 370.697189] ? __lock_is_held+0xad/0x140 [ 370.701272] ? __cleanup_sighand+0x40/0x40 [ 370.705496] ? lock_downgrade+0x6e0/0x6e0 [ 370.709638] _do_fork+0x180/0xc80 [ 370.713097] ? fork_idle+0x270/0x270 [ 370.716803] ? fput+0xb/0x140 [ 370.719898] ? SyS_write+0x14d/0x210 [ 370.723613] ? SyS_read+0x210/0x210 [ 370.727249] ? SyS_clock_settime+0x1a0/0x1a0 [ 370.731655] ? do_syscall_64+0x4c/0x640 [ 370.735617] ? sys_vfork+0x20/0x20 [ 370.739148] do_syscall_64+0x1d5/0x640 [ 370.743034] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 370.748222] RIP: 0033:0x45c4a9 [ 370.751398] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 370.759095] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 370.766355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 370.773630] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 370.780903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 370.788174] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000d 04:44:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:39 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:39 executing program 1 (fault-call:1 fault-nth:14): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:39 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:39 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0xedc0) 04:44:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x10007, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3d000001", @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf2504000000050013001f00000008001900ac1414bb050014000000000005001300090000000500120035000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80502, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f00000003c0)=0x4) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x10007, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xb0, 0x1403, 0x2, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000000}, 0x220008c0) [ 371.092912] FAULT_INJECTION: forcing a failure. [ 371.092912] name failslab, interval 1, probability 0, space 0, times 0 [ 371.116291] CPU: 0 PID: 24543 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 371.124245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.133619] Call Trace: [ 371.136241] dump_stack+0x13e/0x194 [ 371.139887] should_fail.cold+0x10a/0x14b [ 371.144990] should_failslab+0xd6/0x130 [ 371.148966] kmem_cache_alloc+0x2b5/0x770 [ 371.153107] ? lock_acquire+0x170/0x3f0 [ 371.157088] ? lock_downgrade+0x6e0/0x6e0 [ 371.161230] alloc_vfsmnt+0x23/0x7c0 [ 371.165544] clone_mnt+0x6c/0xf20 [ 371.168985] ? ida_simple_get+0x112/0x190 [ 371.173141] copy_tree+0xd3/0x860 [ 371.176590] copy_mnt_ns+0x112/0x8a0 [ 371.180299] ? copy_namespaces+0x112/0x310 [ 371.184542] ? cap_capable+0x1c4/0x230 [ 371.188429] create_new_namespaces+0xc9/0x730 [ 371.192933] ? security_capable+0x88/0xb0 [ 371.197703] copy_namespaces+0x27b/0x310 [ 371.201765] copy_process.part.0+0x2603/0x6a70 [ 371.206488] ? get_pid_task+0xb8/0x130 [ 371.210393] ? save_trace+0x290/0x290 [ 371.214189] ? __lock_is_held+0xad/0x140 [ 371.218389] ? __cleanup_sighand+0x40/0x40 [ 371.222625] ? lock_downgrade+0x6e0/0x6e0 [ 371.226792] _do_fork+0x180/0xc80 [ 371.230245] ? fork_idle+0x270/0x270 [ 371.233975] ? fput+0xb/0x140 [ 371.237168] ? SyS_write+0x14d/0x210 [ 371.240888] ? SyS_read+0x210/0x210 [ 371.244524] ? SyS_clock_settime+0x1a0/0x1a0 [ 371.249044] ? do_syscall_64+0x4c/0x640 [ 371.253042] ? sys_vfork+0x20/0x20 [ 371.256602] do_syscall_64+0x1d5/0x640 [ 371.260514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.265837] RIP: 0033:0x45c4a9 [ 371.269023] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 371.276726] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 371.283988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 371.291250] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.298522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 371.306215] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000e 04:44:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:40 executing program 1 (fault-call:1 fault-nth:15): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 371.343547] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:40 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000), 0x4) 04:44:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0xedc0) [ 371.504498] FAULT_INJECTION: forcing a failure. [ 371.504498] name failslab, interval 1, probability 0, space 0, times 0 [ 371.525348] CPU: 0 PID: 24568 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 371.533280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.542817] Call Trace: [ 371.545420] dump_stack+0x13e/0x194 [ 371.548017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.549057] should_fail.cold+0x10a/0x14b [ 371.561223] should_failslab+0xd6/0x130 [ 371.565204] kmem_cache_alloc+0x2b5/0x770 [ 371.569351] ? lock_downgrade+0x6e0/0x6e0 [ 371.573517] alloc_vfsmnt+0x23/0x7c0 [ 371.577231] clone_mnt+0x6c/0xf20 [ 371.580700] ? is_subdir+0x223/0x38a [ 371.584423] copy_tree+0x33a/0x860 [ 371.587961] copy_mnt_ns+0x112/0x8a0 [ 371.591670] ? copy_namespaces+0x112/0x310 [ 371.595896] ? cap_capable+0x1c4/0x230 [ 371.599777] create_new_namespaces+0xc9/0x730 [ 371.604265] ? security_capable+0x88/0xb0 [ 371.608515] copy_namespaces+0x27b/0x310 [ 371.612692] copy_process.part.0+0x2603/0x6a70 [ 371.617307] ? get_pid_task+0xb8/0x130 [ 371.621230] ? save_trace+0x290/0x290 [ 371.625053] ? __lock_is_held+0xad/0x140 [ 371.629120] ? __cleanup_sighand+0x40/0x40 [ 371.633872] ? lock_downgrade+0x6e0/0x6e0 [ 371.638042] _do_fork+0x180/0xc80 [ 371.641514] ? fork_idle+0x270/0x270 [ 371.645241] ? fput+0xb/0x140 [ 371.648345] ? SyS_write+0x14d/0x210 [ 371.652045] ? SyS_read+0x210/0x210 [ 371.655662] ? SyS_clock_settime+0x1a0/0x1a0 [ 371.660066] ? do_syscall_64+0x4c/0x640 [ 371.664030] ? sys_vfork+0x20/0x20 [ 371.667601] do_syscall_64+0x1d5/0x640 [ 371.671615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 371.676808] RIP: 0033:0x45c4a9 [ 371.679989] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 371.687695] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 371.694987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 371.702268] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.709542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 371.716811] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000000f 04:44:40 executing program 1 (fault-call:1 fault-nth:16): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:40 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000000), 0x4) 04:44:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0xedc0) [ 371.885861] FAULT_INJECTION: forcing a failure. [ 371.885861] name failslab, interval 1, probability 0, space 0, times 0 [ 371.907222] CPU: 1 PID: 24590 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 371.915148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.924669] Call Trace: [ 371.927287] dump_stack+0x13e/0x194 [ 371.930919] should_fail.cold+0x10a/0x14b [ 371.935064] should_failslab+0xd6/0x130 [ 371.939037] kmem_cache_alloc+0x2b5/0x770 [ 371.943280] ? lock_downgrade+0x6e0/0x6e0 [ 371.947536] alloc_vfsmnt+0x23/0x7c0 [ 371.951252] clone_mnt+0x6c/0xf20 [ 371.954698] ? is_subdir+0x223/0x38a [ 371.958402] copy_tree+0x33a/0x860 [ 371.962052] copy_mnt_ns+0x112/0x8a0 [ 371.965762] ? copy_namespaces+0x112/0x310 [ 371.969986] ? cap_capable+0x1c4/0x230 [ 371.973959] create_new_namespaces+0xc9/0x730 [ 371.978613] ? security_capable+0x88/0xb0 [ 371.982756] copy_namespaces+0x27b/0x310 [ 371.986818] copy_process.part.0+0x2603/0x6a70 [ 371.991396] ? get_pid_task+0xb8/0x130 [ 371.995352] ? save_trace+0x290/0x290 [ 371.999265] ? __lock_is_held+0xad/0x140 [ 372.003340] ? __cleanup_sighand+0x40/0x40 [ 372.007588] ? lock_downgrade+0x6e0/0x6e0 [ 372.011756] _do_fork+0x180/0xc80 [ 372.015214] ? fork_idle+0x270/0x270 [ 372.018927] ? fput+0xb/0x140 [ 372.022122] ? SyS_write+0x14d/0x210 [ 372.025842] ? SyS_read+0x210/0x210 [ 372.029463] ? SyS_clock_settime+0x1a0/0x1a0 [ 372.033933] ? do_syscall_64+0x4c/0x640 [ 372.037917] ? sys_vfork+0x20/0x20 [ 372.041533] do_syscall_64+0x1d5/0x640 [ 372.045446] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.050645] RIP: 0033:0x45c4a9 [ 372.053826] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 372.061618] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 372.069237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 372.076928] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:44:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000000), 0x4) [ 372.084194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 372.091451] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000010 04:44:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:41 executing program 1 (fault-call:1 fault-nth:17): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) 04:44:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x509800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000180)={r1, 0x3}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = semget$private(0x0, 0x2, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4400, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x0, 0x330, 0x0, 0x0, 0xf8, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0xee44f1444fb0b147, 0xd0, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @remote}, [0xff000000, 0x0, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'ip6_vti0\x00', {}, {0xd007c5bf97ea04fc}, 0x0, 0x1, 0x5, 0x60}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}, 0x11, 0x18, 0x7}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}, @common=@mh={{0x28, 'mh\x00'}, {"bd9c"}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@loopback, 0xb, 0x1c, 0x7fff}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, [0xffffffff, 0xff], [0x0, 0xffffff00, 0xff, 0xff000000], 'batadv0\x00', 'wg0\x00', {0xff}, {0xff}, 0x16, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x1c1) rmdir(&(0x7f0000000000)='./file0\x00') [ 372.218660] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x0, &(0x7f0000000000), 0x4) 04:44:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 372.339917] FAULT_INJECTION: forcing a failure. [ 372.339917] name failslab, interval 1, probability 0, space 0, times 0 [ 372.368674] CPU: 1 PID: 24617 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 372.375565] ip6_tables: ip6tables: counters copy to user failed while replacing table 04:44:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, 0x0, 0x0) [ 372.376708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.376713] Call Trace: [ 372.376733] dump_stack+0x13e/0x194 [ 372.376751] should_fail.cold+0x10a/0x14b [ 372.376766] should_failslab+0xd6/0x130 [ 372.409666] kmem_cache_alloc+0x2b5/0x770 [ 372.413829] ? find_held_lock+0x2d/0x110 [ 372.417905] ? copy_tree+0x4a0/0x860 [ 372.421631] alloc_vfsmnt+0x23/0x7c0 [ 372.425358] clone_mnt+0x6c/0xf20 [ 372.428823] copy_tree+0x33a/0x860 [ 372.432380] copy_mnt_ns+0x112/0x8a0 [ 372.436117] ? copy_namespaces+0x112/0x310 04:44:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, 0x0, 0x0) [ 372.440450] ? cap_capable+0x1c4/0x230 [ 372.444350] create_new_namespaces+0xc9/0x730 [ 372.450068] ? security_capable+0x88/0xb0 [ 372.454227] copy_namespaces+0x27b/0x310 [ 372.458301] copy_process.part.0+0x2603/0x6a70 [ 372.462896] ? get_pid_task+0xb8/0x130 [ 372.466790] ? save_trace+0x290/0x290 [ 372.470595] ? __lock_is_held+0xad/0x140 [ 372.474673] ? __cleanup_sighand+0x40/0x40 [ 372.478911] ? lock_downgrade+0x6e0/0x6e0 [ 372.483093] _do_fork+0x180/0xc80 [ 372.486557] ? fork_idle+0x270/0x270 04:44:41 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000c80400002803000028030000280300000801000008010000f8030000f8030000f8030000f8030000f80300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80008010000000000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80120020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000026272696467655f736c6176655f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000600000000000000000000000ffff0000ffff000000000000000000000000000028004e46515545554500000000020000000000000000000000000000000000020000a2ff00000000fe8000000000000000000000000000bb00000000000000000000000000000000ffffff00ff000000ff0000ffffffffff000000007fffff7fffffff00000001ff76657468315f746f5f7465616d0000006873723000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000110002021800000000000000a800d000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x1, 0x0, 0x0) [ 372.490285] ? fput+0xb/0x140 [ 372.493394] ? SyS_write+0x14d/0x210 [ 372.497114] ? SyS_read+0x210/0x210 [ 372.500750] ? SyS_clock_settime+0x1a0/0x1a0 [ 372.505164] ? do_syscall_64+0x4c/0x640 [ 372.509141] ? sys_vfork+0x20/0x20 [ 372.512791] do_syscall_64+0x1d5/0x640 [ 372.516696] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.521891] RIP: 0033:0x45c4a9 [ 372.525081] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 372.532796] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 372.540073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 372.547377] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.554653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 372.561932] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000011 04:44:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) 04:44:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:41 executing program 1 (fault-call:1 fault-nth:18): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x18800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x1, 0x5, 0x1, @random="3fb42eee8ab0", 'veth1\x00'}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 372.711970] FAULT_INJECTION: forcing a failure. [ 372.711970] name failslab, interval 1, probability 0, space 0, times 0 [ 372.770764] CPU: 1 PID: 24641 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 372.778670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.788032] Call Trace: [ 372.790638] dump_stack+0x13e/0x194 [ 372.794284] should_fail.cold+0x10a/0x14b [ 372.798451] should_failslab+0xd6/0x130 [ 372.802444] __kmalloc_track_caller+0x2e1/0x7b0 [ 372.807122] ? kstrdup_const+0x35/0x60 [ 372.811011] ? lock_acquire+0x170/0x3f0 [ 372.814990] ? lock_downgrade+0x6e0/0x6e0 [ 372.819129] kstrdup+0x36/0x70 [ 372.822326] kstrdup_const+0x35/0x60 [ 372.826030] alloc_vfsmnt+0xe0/0x7c0 [ 372.829730] clone_mnt+0x6c/0xf20 [ 372.833201] copy_tree+0x33a/0x860 [ 372.836755] copy_mnt_ns+0x112/0x8a0 [ 372.840466] ? copy_namespaces+0x112/0x310 [ 372.844699] ? cap_capable+0x1c4/0x230 [ 372.848697] create_new_namespaces+0xc9/0x730 [ 372.853209] ? security_capable+0x88/0xb0 [ 372.857377] copy_namespaces+0x27b/0x310 [ 372.861450] copy_process.part.0+0x2603/0x6a70 [ 372.866031] ? get_pid_task+0xb8/0x130 [ 372.870070] ? save_trace+0x290/0x290 [ 372.873897] ? __lock_is_held+0xad/0x140 [ 372.877974] ? __cleanup_sighand+0x40/0x40 [ 372.882203] ? lock_downgrade+0x6e0/0x6e0 [ 372.886351] _do_fork+0x180/0xc80 [ 372.889799] ? fork_idle+0x270/0x270 [ 372.893517] ? fput+0xb/0x140 [ 372.896611] ? SyS_write+0x14d/0x210 [ 372.900313] ? SyS_read+0x210/0x210 [ 372.903924] ? SyS_clock_settime+0x1a0/0x1a0 [ 372.908324] ? do_syscall_64+0x4c/0x640 [ 372.912287] ? sys_vfork+0x20/0x20 [ 372.915833] do_syscall_64+0x1d5/0x640 [ 372.919736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 372.924916] RIP: 0033:0x45c4a9 [ 372.928092] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 372.935788] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 372.943054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 372.950310] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 372.957571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 372.964868] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000012 04:44:41 executing program 1 (fault-call:1 fault-nth:19): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:41 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)="3f2c56aa678114ea274675115ed3cae03d557ff90be3d7f917063d60c61792c4a28f49a7dd3e41d1220a5105f0842bf513ea3b211c5ebabd09853748d38a14df9a9324649c68f62015b9f6c1b8a1e04ffdd27fae4ff24fbcf0348ad23e8ac57c5777a0ed5991b176de84ac765b1fc920362bc362309a1282a0621d6a3c9ed1268e685f9193e787b3767e32f841717d81a4538e9319cfcd2f7facfd4d4a3afdb135e6bddacf791ae170534f838315eea94e010ffdae66be39b873686510bb48e48902c1e946e4878eaa61d212d1614572", 0xd0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x40800, 0x0) r1 = dup(r0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2c2662646576766290786e6574300076905c44b73d3aea55b7fea2cfb7ac9a2da6477bd4b6"], &(0x7f00000000c0)='&md5sum\x00', 0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:41 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) 04:44:41 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 373.176119] FAULT_INJECTION: forcing a failure. [ 373.176119] name failslab, interval 1, probability 0, space 0, times 0 [ 373.220653] CPU: 1 PID: 24672 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 373.228596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.237959] Call Trace: [ 373.240580] dump_stack+0x13e/0x194 [ 373.244231] should_fail.cold+0x10a/0x14b [ 373.248491] should_failslab+0xd6/0x130 [ 373.252465] kmem_cache_alloc+0x2b5/0x770 [ 373.256605] ? find_held_lock+0x2d/0x110 [ 373.260654] ? copy_tree+0x4a0/0x860 [ 373.264357] alloc_vfsmnt+0x23/0x7c0 [ 373.268058] clone_mnt+0x6c/0xf20 [ 373.271506] copy_tree+0x33a/0x860 [ 373.275039] copy_mnt_ns+0x112/0x8a0 [ 373.278753] create_new_namespaces+0xc9/0x730 [ 373.283242] ? security_capable+0x88/0xb0 [ 373.287395] copy_namespaces+0x27b/0x310 [ 373.291449] copy_process.part.0+0x2603/0x6a70 [ 373.296021] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 373.301029] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 373.305788] ? save_trace+0x290/0x290 [ 373.309577] ? retint_kernel+0x2d/0x2d [ 373.313464] ? __cleanup_sighand+0x40/0x40 [ 373.317685] ? lock_downgrade+0x6e0/0x6e0 [ 373.321839] _do_fork+0x180/0xc80 [ 373.325481] ? fork_idle+0x270/0x270 [ 373.329188] ? fput+0xb/0x140 [ 373.332295] ? SyS_write+0x14d/0x210 [ 373.336009] ? SyS_read+0x210/0x210 [ 373.339649] ? SyS_clock_settime+0x1a0/0x1a0 [ 373.344057] ? do_syscall_64+0x4c/0x640 [ 373.348027] ? sys_vfork+0x20/0x20 [ 373.351631] do_syscall_64+0x1d5/0x640 [ 373.355540] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.360747] RIP: 0033:0x45c4a9 04:44:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 373.363939] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 373.371725] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 373.378996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 373.386256] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.393515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 373.400777] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000013 04:44:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:42 executing program 1 (fault-call:1 fault-nth:20): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r6, r7, 0x0, 0xedc0) 04:44:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 04:44:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 373.567585] FAULT_INJECTION: forcing a failure. [ 373.567585] name failslab, interval 1, probability 0, space 0, times 0 [ 373.611856] CPU: 1 PID: 24692 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 373.619769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.629479] Call Trace: [ 373.632113] dump_stack+0x13e/0x194 [ 373.635760] should_fail.cold+0x10a/0x14b [ 373.639925] should_failslab+0xd6/0x130 [ 373.643916] __kmalloc_track_caller+0x2e1/0x7b0 [ 373.648590] ? kstrdup_const+0x35/0x60 [ 373.652481] ? lock_acquire+0x170/0x3f0 [ 373.656442] ? lock_downgrade+0x6e0/0x6e0 [ 373.660581] kstrdup+0x36/0x70 [ 373.663763] kstrdup_const+0x35/0x60 [ 373.667468] alloc_vfsmnt+0xe0/0x7c0 [ 373.671170] clone_mnt+0x6c/0xf20 [ 373.674613] copy_tree+0x33a/0x860 [ 373.678171] copy_mnt_ns+0x112/0x8a0 [ 373.681872] ? copy_namespaces+0x112/0x310 [ 373.686105] ? cap_capable+0x1c4/0x230 [ 373.689980] create_new_namespaces+0xc9/0x730 [ 373.694502] ? security_capable+0x88/0xb0 [ 373.698643] copy_namespaces+0x27b/0x310 [ 373.702694] copy_process.part.0+0x2603/0x6a70 [ 373.707269] ? get_pid_task+0xb8/0x130 [ 373.711145] ? save_trace+0x290/0x290 [ 373.714933] ? __lock_is_held+0xad/0x140 [ 373.719002] ? __cleanup_sighand+0x40/0x40 [ 373.723237] ? lock_downgrade+0x6e0/0x6e0 [ 373.727384] _do_fork+0x180/0xc80 [ 373.730835] ? fork_idle+0x270/0x270 [ 373.734535] ? fput+0xb/0x140 [ 373.737627] ? SyS_write+0x14d/0x210 [ 373.741336] ? SyS_read+0x210/0x210 [ 373.744954] ? SyS_clock_settime+0x1a0/0x1a0 [ 373.749358] ? do_syscall_64+0x4c/0x640 [ 373.753325] ? sys_vfork+0x20/0x20 [ 373.756859] do_syscall_64+0x1d5/0x640 [ 373.760896] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.766102] RIP: 0033:0x45c4a9 [ 373.769285] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 373.776998] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 373.784257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 373.791547] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.798812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:42 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 373.806208] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000014 04:44:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) 04:44:42 executing program 1 (fault-call:1 fault-nth:21): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:42 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') [ 373.973517] FAULT_INJECTION: forcing a failure. [ 373.973517] name failslab, interval 1, probability 0, space 0, times 0 [ 373.986648] CPU: 1 PID: 24711 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 373.994555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.003912] Call Trace: [ 374.006509] dump_stack+0x13e/0x194 [ 374.010150] should_fail.cold+0x10a/0x14b [ 374.014300] should_failslab+0xd6/0x130 [ 374.018392] kmem_cache_alloc+0x2b5/0x770 [ 374.022565] ? find_held_lock+0x2d/0x110 [ 374.026625] ? copy_tree+0x4a0/0x860 [ 374.030370] alloc_vfsmnt+0x23/0x7c0 [ 374.034082] clone_mnt+0x6c/0xf20 [ 374.037549] copy_tree+0x33a/0x860 [ 374.041097] copy_mnt_ns+0x112/0x8a0 [ 374.044804] ? copy_namespaces+0x112/0x310 [ 374.049039] ? cap_capable+0x1c4/0x230 [ 374.052915] create_new_namespaces+0xc9/0x730 [ 374.057414] ? security_capable+0x88/0xb0 [ 374.061554] copy_namespaces+0x27b/0x310 [ 374.065609] copy_process.part.0+0x2603/0x6a70 [ 374.070186] ? get_pid_task+0xb8/0x130 [ 374.074075] ? save_trace+0x290/0x290 [ 374.077872] ? __lock_is_held+0xad/0x140 [ 374.081933] ? __cleanup_sighand+0x40/0x40 [ 374.086154] ? lock_downgrade+0x6e0/0x6e0 [ 374.090297] _do_fork+0x180/0xc80 [ 374.093745] ? fork_idle+0x270/0x270 [ 374.097451] ? fput+0xb/0x140 [ 374.100545] ? SyS_write+0x14d/0x210 [ 374.104243] ? SyS_read+0x210/0x210 [ 374.107855] ? SyS_clock_settime+0x1a0/0x1a0 [ 374.112253] ? do_syscall_64+0x4c/0x640 [ 374.116214] ? sys_vfork+0x20/0x20 [ 374.119743] do_syscall_64+0x1d5/0x640 [ 374.123627] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.128802] RIP: 0033:0x45c4a9 [ 374.131980] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 374.139690] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 374.146966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 374.154246] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.161506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) [ 374.168777] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000015 04:44:43 executing program 1 (fault-call:1 fault-nth:22): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 04:44:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 374.436693] FAULT_INJECTION: forcing a failure. [ 374.436693] name failslab, interval 1, probability 0, space 0, times 0 [ 374.472056] CPU: 0 PID: 24736 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 374.480112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.489471] Call Trace: [ 374.492074] dump_stack+0x13e/0x194 [ 374.495714] should_fail.cold+0x10a/0x14b [ 374.499873] should_failslab+0xd6/0x130 [ 374.503843] __kmalloc_track_caller+0x2e1/0x7b0 [ 374.508501] ? kstrdup_const+0x35/0x60 [ 374.512393] ? lock_acquire+0x170/0x3f0 [ 374.516360] ? lock_downgrade+0x6e0/0x6e0 [ 374.520509] kstrdup+0x36/0x70 [ 374.523709] kstrdup_const+0x35/0x60 [ 374.527531] alloc_vfsmnt+0xe0/0x7c0 [ 374.531249] clone_mnt+0x6c/0xf20 [ 374.534709] copy_tree+0x33a/0x860 [ 374.538258] copy_mnt_ns+0x112/0x8a0 [ 374.541980] ? copy_namespaces+0x112/0x310 [ 374.546226] ? cap_capable+0x1c4/0x230 [ 374.550117] create_new_namespaces+0xc9/0x730 [ 374.554609] ? security_capable+0x88/0xb0 [ 374.558759] copy_namespaces+0x27b/0x310 [ 374.562824] copy_process.part.0+0x2603/0x6a70 [ 374.567397] ? get_pid_task+0xb8/0x130 [ 374.571280] ? save_trace+0x290/0x290 [ 374.575074] ? __lock_is_held+0xad/0x140 [ 374.579131] ? __cleanup_sighand+0x40/0x40 [ 374.583373] ? lock_downgrade+0x6e0/0x6e0 [ 374.587531] _do_fork+0x180/0xc80 [ 374.591001] ? fork_idle+0x270/0x270 [ 374.594716] ? fput+0xb/0x140 [ 374.597827] ? SyS_write+0x14d/0x210 [ 374.601553] ? SyS_read+0x210/0x210 [ 374.605179] ? SyS_clock_settime+0x1a0/0x1a0 [ 374.609577] ? do_syscall_64+0x4c/0x640 [ 374.613541] ? sys_vfork+0x20/0x20 [ 374.617077] do_syscall_64+0x1d5/0x640 [ 374.620966] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.626167] RIP: 0033:0x45c4a9 [ 374.629352] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 04:44:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 374.637052] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 374.644316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 374.651604] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 374.658880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 374.666141] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000016 04:44:43 executing program 1 (fault-call:1 fault-nth:23): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:43 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 04:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) [ 374.867606] FAULT_INJECTION: forcing a failure. [ 374.867606] name failslab, interval 1, probability 0, space 0, times 0 [ 374.927150] CPU: 0 PID: 24765 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 374.935126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.944492] Call Trace: [ 374.947118] dump_stack+0x13e/0x194 [ 374.950856] should_fail.cold+0x10a/0x14b [ 374.955026] should_failslab+0xd6/0x130 [ 374.959016] kmem_cache_alloc+0x2b5/0x770 [ 374.963530] ? find_held_lock+0x2d/0x110 [ 374.967606] ? copy_tree+0x4a0/0x860 [ 374.971333] alloc_vfsmnt+0x23/0x7c0 [ 374.975058] clone_mnt+0x6c/0xf20 [ 374.978534] copy_tree+0x33a/0x860 [ 374.982102] copy_mnt_ns+0x112/0x8a0 [ 374.985829] ? copy_namespaces+0x112/0x310 [ 374.990072] ? cap_capable+0x1c4/0x230 [ 374.993969] create_new_namespaces+0xc9/0x730 [ 374.998474] ? security_capable+0x88/0xb0 [ 375.002637] copy_namespaces+0x27b/0x310 [ 375.006711] copy_process.part.0+0x2603/0x6a70 [ 375.011316] ? get_pid_task+0xb8/0x130 [ 375.015215] ? save_trace+0x290/0x290 [ 375.019019] ? __lock_is_held+0xad/0x140 [ 375.023100] ? __cleanup_sighand+0x40/0x40 [ 375.027349] ? lock_downgrade+0x6e0/0x6e0 [ 375.031514] _do_fork+0x180/0xc80 [ 375.034984] ? fork_idle+0x270/0x270 [ 375.038714] ? fput+0xb/0x140 [ 375.041827] ? SyS_write+0x14d/0x210 [ 375.045546] ? SyS_read+0x210/0x210 [ 375.049183] ? SyS_clock_settime+0x1a0/0x1a0 [ 375.053622] ? do_syscall_64+0x4c/0x640 [ 375.057605] ? sys_vfork+0x20/0x20 [ 375.061160] do_syscall_64+0x1d5/0x640 [ 375.065062] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.070258] RIP: 0033:0x45c4a9 04:44:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 375.073459] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 375.081262] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 375.088541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 375.095827] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 375.103105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 375.110391] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000017 04:44:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 04:44:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:44 executing program 1 (fault-call:1 fault-nth:24): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 04:44:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) [ 375.441244] FAULT_INJECTION: forcing a failure. [ 375.441244] name failslab, interval 1, probability 0, space 0, times 0 [ 375.489138] CPU: 0 PID: 24806 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 375.497207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.506691] Call Trace: [ 375.509293] dump_stack+0x13e/0x194 [ 375.512944] should_fail.cold+0x10a/0x14b [ 375.517110] should_failslab+0xd6/0x130 [ 375.521171] __kmalloc_track_caller+0x2e1/0x7b0 [ 375.526043] ? kstrdup_const+0x35/0x60 [ 375.529941] ? lock_acquire+0x170/0x3f0 [ 375.533919] ? lock_downgrade+0x6e0/0x6e0 [ 375.538075] kstrdup+0x36/0x70 [ 375.541275] kstrdup_const+0x35/0x60 [ 375.545083] alloc_vfsmnt+0xe0/0x7c0 [ 375.548802] clone_mnt+0x6c/0xf20 [ 375.552269] copy_tree+0x33a/0x860 [ 375.555825] copy_mnt_ns+0x112/0x8a0 [ 375.559546] ? copy_namespaces+0x112/0x310 [ 375.563786] ? cap_capable+0x1c4/0x230 [ 375.567690] create_new_namespaces+0xc9/0x730 [ 375.572280] ? security_capable+0x88/0xb0 [ 375.576438] copy_namespaces+0x27b/0x310 [ 375.580512] copy_process.part.0+0x2603/0x6a70 [ 375.585113] ? get_pid_task+0xb8/0x130 04:44:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) [ 375.589014] ? save_trace+0x290/0x290 [ 375.592821] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 375.597856] ? __cleanup_sighand+0x40/0x40 [ 375.602130] ? lock_downgrade+0x6e0/0x6e0 [ 375.606302] _do_fork+0x180/0xc80 [ 375.609847] ? fork_idle+0x270/0x270 [ 375.613594] ? fput+0xb/0x140 [ 375.616692] ? SyS_write+0x14d/0x210 [ 375.620395] ? SyS_read+0x210/0x210 [ 375.624020] ? SyS_clock_settime+0x1a0/0x1a0 [ 375.628415] ? do_syscall_64+0x4c/0x640 [ 375.632395] ? sys_vfork+0x20/0x20 [ 375.635934] do_syscall_64+0x1d5/0x640 [ 375.639836] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 375.645019] RIP: 0033:0x45c4a9 [ 375.648198] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 375.656078] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 375.663344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 375.670616] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 375.677875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 375.685248] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000018 04:44:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 04:44:44 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 1 (fault-call:1 fault-nth:25): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r5, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) [ 375.989786] FAULT_INJECTION: forcing a failure. [ 375.989786] name failslab, interval 1, probability 0, space 0, times 0 [ 376.001586] CPU: 0 PID: 24842 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 376.009486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.018847] Call Trace: [ 376.021446] dump_stack+0x13e/0x194 [ 376.025088] should_fail.cold+0x10a/0x14b [ 376.029329] should_failslab+0xd6/0x130 [ 376.033314] __kmalloc_track_caller+0x2e1/0x7b0 [ 376.037977] ? kstrdup_const+0x35/0x60 [ 376.041952] ? lock_acquire+0x170/0x3f0 [ 376.045916] ? lock_downgrade+0x6e0/0x6e0 [ 376.050075] kstrdup+0x36/0x70 [ 376.053257] kstrdup_const+0x35/0x60 [ 376.056958] alloc_vfsmnt+0xe0/0x7c0 [ 376.060661] clone_mnt+0x6c/0xf20 [ 376.064110] copy_tree+0x33a/0x860 [ 376.067662] copy_mnt_ns+0x112/0x8a0 [ 376.071367] ? copy_namespaces+0x112/0x310 [ 376.075594] ? cap_capable+0x1c4/0x230 [ 376.079469] create_new_namespaces+0xc9/0x730 [ 376.083951] ? security_capable+0x88/0xb0 [ 376.088096] copy_namespaces+0x27b/0x310 [ 376.092235] copy_process.part.0+0x2603/0x6a70 [ 376.096811] ? get_pid_task+0xb8/0x130 [ 376.100690] ? save_trace+0x290/0x290 [ 376.104481] ? __lock_is_held+0xad/0x140 [ 376.108546] ? __cleanup_sighand+0x40/0x40 [ 376.112784] ? lock_downgrade+0x6e0/0x6e0 [ 376.116938] _do_fork+0x180/0xc80 [ 376.120386] ? fork_idle+0x270/0x270 [ 376.124093] ? fput+0xb/0x140 [ 376.127183] ? SyS_write+0x14d/0x210 [ 376.130883] ? SyS_read+0x210/0x210 [ 376.134500] ? SyS_clock_settime+0x1a0/0x1a0 [ 376.138913] ? do_syscall_64+0x4c/0x640 [ 376.142873] ? sys_vfork+0x20/0x20 [ 376.146401] do_syscall_64+0x1d5/0x640 [ 376.150373] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.155559] RIP: 0033:0x45c4a9 [ 376.158744] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 376.166443] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 376.173747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 376.181032] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:44:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) [ 376.188314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 376.195579] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000019 [ 376.218274] NOHZ: local_softirq_pending 08 04:44:45 executing program 1 (fault-call:1 fault-nth:26): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) [ 376.397515] FAULT_INJECTION: forcing a failure. [ 376.397515] name failslab, interval 1, probability 0, space 0, times 0 [ 376.451764] CPU: 1 PID: 24857 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 376.459716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.469083] Call Trace: [ 376.471689] dump_stack+0x13e/0x194 [ 376.475319] should_fail.cold+0x10a/0x14b [ 376.479491] should_failslab+0xd6/0x130 [ 376.483470] kmem_cache_alloc+0x2b5/0x770 [ 376.487799] ? find_held_lock+0x2d/0x110 [ 376.491858] ? copy_tree+0x4a0/0x860 [ 376.495574] alloc_vfsmnt+0x23/0x7c0 [ 376.499276] clone_mnt+0x6c/0xf20 [ 376.502725] copy_tree+0x33a/0x860 [ 376.506270] copy_mnt_ns+0x112/0x8a0 [ 376.509970] ? copy_namespaces+0x112/0x310 [ 376.514204] ? cap_capable+0x1c4/0x230 [ 376.518090] create_new_namespaces+0xc9/0x730 [ 376.522572] ? security_capable+0x88/0xb0 [ 376.526729] copy_namespaces+0x27b/0x310 [ 376.530787] copy_process.part.0+0x2603/0x6a70 [ 376.535364] ? get_pid_task+0xb8/0x130 [ 376.539241] ? save_trace+0x290/0x290 [ 376.543045] ? __lock_is_held+0xad/0x140 [ 376.547117] ? __cleanup_sighand+0x40/0x40 [ 376.551488] ? lock_downgrade+0x6e0/0x6e0 [ 376.555707] _do_fork+0x180/0xc80 [ 376.559163] ? fork_idle+0x270/0x270 [ 376.562866] ? fput+0xb/0x140 [ 376.566210] ? SyS_write+0x14d/0x210 [ 376.569933] ? SyS_read+0x210/0x210 [ 376.573562] ? SyS_clock_settime+0x1a0/0x1a0 [ 376.577976] ? do_syscall_64+0x4c/0x640 [ 376.582158] ? sys_vfork+0x20/0x20 [ 376.585699] do_syscall_64+0x1d5/0x640 [ 376.589889] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 376.595164] RIP: 0033:0x45c4a9 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 376.598364] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 376.606056] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 376.613384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 376.620651] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 376.627915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 376.635311] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001a 04:44:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:45 executing program 1 (fault-call:1 fault-nth:27): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) [ 376.873212] FAULT_INJECTION: forcing a failure. [ 376.873212] name failslab, interval 1, probability 0, space 0, times 0 [ 376.895526] CPU: 1 PID: 24897 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 376.903496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.913515] Call Trace: [ 376.916123] dump_stack+0x13e/0x194 [ 376.919771] should_fail.cold+0x10a/0x14b [ 376.923935] should_failslab+0xd6/0x130 [ 376.927920] __kmalloc_track_caller+0x2e1/0x7b0 [ 376.932598] ? kstrdup_const+0x35/0x60 [ 376.936497] ? lock_acquire+0x170/0x3f0 [ 376.940491] ? lock_downgrade+0x6e0/0x6e0 [ 376.944648] kstrdup+0x36/0x70 [ 376.947851] kstrdup_const+0x35/0x60 [ 376.951575] alloc_vfsmnt+0xe0/0x7c0 [ 376.955298] clone_mnt+0x6c/0xf20 [ 376.958752] copy_tree+0x33a/0x860 [ 376.962297] copy_mnt_ns+0x112/0x8a0 [ 376.966019] ? copy_namespaces+0x112/0x310 [ 376.970253] ? cap_capable+0x1c4/0x230 [ 376.974146] create_new_namespaces+0xc9/0x730 [ 376.978646] ? security_capable+0x88/0xb0 [ 376.982835] copy_namespaces+0x27b/0x310 [ 376.986911] copy_process.part.0+0x2603/0x6a70 [ 376.991593] ? get_pid_task+0xb8/0x130 [ 376.995498] ? save_trace+0x290/0x290 [ 376.999605] ? __lock_is_held+0xad/0x140 [ 377.003805] ? __cleanup_sighand+0x40/0x40 [ 377.008056] ? lock_downgrade+0x6e0/0x6e0 [ 377.012221] _do_fork+0x180/0xc80 [ 377.015689] ? fork_idle+0x270/0x270 [ 377.019411] ? fput+0xb/0x140 [ 377.022749] ? SyS_write+0x14d/0x210 [ 377.026475] ? SyS_read+0x210/0x210 [ 377.030144] ? SyS_clock_settime+0x1a0/0x1a0 [ 377.034572] ? do_syscall_64+0x4c/0x640 [ 377.038597] ? sys_vfork+0x20/0x20 [ 377.042160] do_syscall_64+0x1d5/0x640 [ 377.046071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.051294] RIP: 0033:0x45c4a9 [ 377.054512] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 377.062313] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) [ 377.069593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 377.076869] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.084144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 377.091417] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001b 04:44:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0xedc0) 04:44:46 executing program 1 (fault-call:1 fault-nth:28): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 377.336122] FAULT_INJECTION: forcing a failure. [ 377.336122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.348159] CPU: 1 PID: 24930 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 377.356584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.365948] Call Trace: [ 377.368724] dump_stack+0x13e/0x194 [ 377.372408] should_fail.cold+0x10a/0x14b [ 377.376740] __alloc_pages_nodemask+0x1bf/0x700 [ 377.381417] ? save_trace+0x290/0x290 [ 377.385231] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 377.390267] cache_grow_begin+0x7b/0x410 [ 377.394326] kmem_cache_alloc+0x695/0x770 [ 377.398676] ? find_held_lock+0x2d/0x110 [ 377.402758] ? copy_tree+0x4a0/0x860 [ 377.406831] alloc_vfsmnt+0x23/0x7c0 [ 377.410558] clone_mnt+0x6c/0xf20 [ 377.414035] copy_tree+0x33a/0x860 [ 377.417599] copy_mnt_ns+0x112/0x8a0 [ 377.421331] ? copy_namespaces+0x112/0x310 [ 377.425574] ? cap_capable+0x1c4/0x230 [ 377.429485] create_new_namespaces+0xc9/0x730 [ 377.433980] ? security_capable+0x88/0xb0 [ 377.438132] copy_namespaces+0x27b/0x310 [ 377.443239] copy_process.part.0+0x2603/0x6a70 [ 377.447927] ? get_pid_task+0xb8/0x130 [ 377.452176] ? save_trace+0x290/0x290 [ 377.456476] ? __lock_is_held+0xad/0x140 [ 377.460653] ? __cleanup_sighand+0x40/0x40 [ 377.465082] ? lock_downgrade+0x6e0/0x6e0 [ 377.469238] _do_fork+0x180/0xc80 [ 377.472739] ? fork_idle+0x270/0x270 [ 377.476491] ? fput+0xb/0x140 [ 377.479593] ? SyS_write+0x14d/0x210 [ 377.483316] ? SyS_read+0x210/0x210 [ 377.486937] ? SyS_clock_settime+0x1a0/0x1a0 [ 377.491335] ? do_syscall_64+0x4c/0x640 [ 377.495412] ? sys_vfork+0x20/0x20 [ 377.498971] do_syscall_64+0x1d5/0x640 [ 377.502857] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.508126] RIP: 0033:0x45c4a9 [ 377.511353] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 377.519067] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 377.526353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0xedc0) [ 377.533627] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 377.540893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 377.548200] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001c 04:44:46 executing program 1 (fault-call:1 fault-nth:29): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 04:44:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 377.739116] FAULT_INJECTION: forcing a failure. [ 377.739116] name failslab, interval 1, probability 0, space 0, times 0 [ 377.750832] CPU: 1 PID: 24958 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 377.758732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.768102] Call Trace: [ 377.770703] dump_stack+0x13e/0x194 [ 377.774343] should_fail.cold+0x10a/0x14b [ 377.778517] should_failslab+0xd6/0x130 [ 377.782543] __kmalloc_track_caller+0x2e1/0x7b0 [ 377.787240] ? kstrdup_const+0x35/0x60 [ 377.791138] ? lock_acquire+0x170/0x3f0 [ 377.795124] ? lock_downgrade+0x6e0/0x6e0 [ 377.799281] kstrdup+0x36/0x70 [ 377.802474] kstrdup_const+0x35/0x60 [ 377.806178] alloc_vfsmnt+0xe0/0x7c0 [ 377.809875] clone_mnt+0x6c/0xf20 [ 377.813314] copy_tree+0x33a/0x860 [ 377.816841] copy_mnt_ns+0x112/0x8a0 [ 377.820548] ? copy_namespaces+0x112/0x310 [ 377.824788] ? cap_capable+0x1c4/0x230 [ 377.828811] create_new_namespaces+0xc9/0x730 [ 377.833301] ? security_capable+0x88/0xb0 [ 377.837514] copy_namespaces+0x27b/0x310 [ 377.841565] copy_process.part.0+0x2603/0x6a70 [ 377.846144] ? get_pid_task+0xb8/0x130 [ 377.850034] ? save_trace+0x290/0x290 [ 377.853982] ? __lock_is_held+0xad/0x140 [ 377.858033] ? __cleanup_sighand+0x40/0x40 [ 377.862257] ? lock_downgrade+0x6e0/0x6e0 [ 377.866546] _do_fork+0x180/0xc80 [ 377.870003] ? fork_idle+0x270/0x270 [ 377.873726] ? fput+0xb/0x140 [ 377.877016] ? SyS_write+0x14d/0x210 [ 377.880737] ? SyS_read+0x210/0x210 [ 377.884483] ? SyS_clock_settime+0x1a0/0x1a0 [ 377.888885] ? do_syscall_64+0x4c/0x640 [ 377.892853] ? sys_vfork+0x20/0x20 [ 377.896392] do_syscall_64+0x1d5/0x640 [ 377.900277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 377.905479] RIP: 0033:0x45c4a9 [ 377.908669] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 377.916395] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 377.923655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 377.930919] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:44:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0xedc0) 04:44:46 executing program 1 (fault-call:1 fault-nth:30): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 377.938199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 377.945593] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001d 04:44:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 04:44:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) [ 378.123490] FAULT_INJECTION: forcing a failure. [ 378.123490] name failslab, interval 1, probability 0, space 0, times 0 [ 378.187722] CPU: 0 PID: 24986 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 378.195654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.205010] Call Trace: [ 378.207604] dump_stack+0x13e/0x194 [ 378.211232] should_fail.cold+0x10a/0x14b [ 378.215379] should_failslab+0xd6/0x130 [ 378.219344] kmem_cache_alloc+0x2b5/0x770 [ 378.223485] ? find_held_lock+0x2d/0x110 [ 378.227539] ? copy_tree+0x4a0/0x860 [ 378.231243] alloc_vfsmnt+0x23/0x7c0 [ 378.235081] clone_mnt+0x6c/0xf20 [ 378.238542] copy_tree+0x33a/0x860 [ 378.242087] copy_mnt_ns+0x112/0x8a0 [ 378.245798] ? copy_namespaces+0x112/0x310 [ 378.250044] ? cap_capable+0x1c4/0x230 [ 378.253932] create_new_namespaces+0xc9/0x730 [ 378.258783] ? security_capable+0x88/0xb0 [ 378.262932] copy_namespaces+0x27b/0x310 [ 378.266989] copy_process.part.0+0x2603/0x6a70 [ 378.271565] ? get_pid_task+0xb8/0x130 [ 378.275453] ? save_trace+0x290/0x290 [ 378.280372] ? __lock_is_held+0xad/0x140 [ 378.284430] ? __cleanup_sighand+0x40/0x40 [ 378.288653] ? lock_downgrade+0x6e0/0x6e0 [ 378.292799] _do_fork+0x180/0xc80 [ 378.296243] ? fork_idle+0x270/0x270 [ 378.299944] ? fput+0xb/0x140 [ 378.303040] ? SyS_write+0x14d/0x210 [ 378.306738] ? SyS_read+0x210/0x210 [ 378.310352] ? SyS_clock_settime+0x1a0/0x1a0 [ 378.315022] ? do_syscall_64+0x4c/0x640 [ 378.319002] ? sys_vfork+0x20/0x20 [ 378.322727] do_syscall_64+0x1d5/0x640 [ 378.326624] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.331829] RIP: 0033:0x45c4a9 04:44:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 378.336140] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 378.343852] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 378.351111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 378.358368] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.365622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 378.372878] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001e 04:44:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r5, r6, 0x0, 0xedc0) 04:44:47 executing program 1 (fault-call:1 fault-nth:31): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x21, 0x2, 0x3) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) 04:44:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 378.595734] FAULT_INJECTION: forcing a failure. [ 378.595734] name failslab, interval 1, probability 0, space 0, times 0 [ 378.624599] CPU: 0 PID: 25018 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 378.632662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.642028] Call Trace: [ 378.644632] dump_stack+0x13e/0x194 [ 378.648274] should_fail.cold+0x10a/0x14b [ 378.652463] should_failslab+0xd6/0x130 [ 378.656477] __kmalloc_track_caller+0x2e1/0x7b0 [ 378.661162] ? kstrdup_const+0x35/0x60 [ 378.665070] ? lock_acquire+0x170/0x3f0 [ 378.669057] ? lock_downgrade+0x6e0/0x6e0 [ 378.673212] kstrdup+0x36/0x70 [ 378.676419] kstrdup_const+0x35/0x60 [ 378.680141] alloc_vfsmnt+0xe0/0x7c0 [ 378.683864] clone_mnt+0x6c/0xf20 [ 378.687333] copy_tree+0x33a/0x860 [ 378.690895] copy_mnt_ns+0x112/0x8a0 [ 378.694614] ? copy_namespaces+0x112/0x310 [ 378.698853] ? cap_capable+0x1c4/0x230 [ 378.702748] create_new_namespaces+0xc9/0x730 [ 378.707381] ? security_capable+0x88/0xb0 [ 378.711546] copy_namespaces+0x27b/0x310 [ 378.715618] copy_process.part.0+0x2603/0x6a70 [ 378.720214] ? get_pid_task+0xb8/0x130 [ 378.724120] ? save_trace+0x290/0x290 [ 378.727931] ? __lock_is_held+0xad/0x140 [ 378.732118] ? __cleanup_sighand+0x40/0x40 [ 378.736363] ? lock_downgrade+0x6e0/0x6e0 [ 378.741570] _do_fork+0x180/0xc80 [ 378.745042] ? fork_idle+0x270/0x270 [ 378.748857] ? fput+0xb/0x140 [ 378.751967] ? SyS_write+0x14d/0x210 [ 378.755681] ? SyS_read+0x210/0x210 [ 378.759313] ? SyS_clock_settime+0x1a0/0x1a0 [ 378.763723] ? do_syscall_64+0x4c/0x640 [ 378.767696] ? sys_vfork+0x20/0x20 [ 378.771239] do_syscall_64+0x1d5/0x640 [ 378.775134] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 378.780323] RIP: 0033:0x45c4a9 [ 378.783516] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 04:44:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 378.791227] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 378.798502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 378.805780] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 378.813052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 378.820324] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000001f 04:44:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 04:44:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket(0x21, 0x2, 0x3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:47 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:47 executing program 1 (fault-call:1 fault-nth:32): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) [ 379.068398] FAULT_INJECTION: forcing a failure. [ 379.068398] name failslab, interval 1, probability 0, space 0, times 0 04:44:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 379.109376] CPU: 1 PID: 25050 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 379.117311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.126674] Call Trace: [ 379.129439] dump_stack+0x13e/0x194 [ 379.133094] should_fail.cold+0x10a/0x14b [ 379.137257] should_failslab+0xd6/0x130 [ 379.141244] __kmalloc_track_caller+0x2e1/0x7b0 [ 379.145916] ? kstrdup_const+0x35/0x60 [ 379.149796] ? lock_acquire+0x170/0x3f0 [ 379.153772] ? lock_downgrade+0x6e0/0x6e0 [ 379.157913] kstrdup+0x36/0x70 [ 379.161100] kstrdup_const+0x35/0x60 [ 379.164803] alloc_vfsmnt+0xe0/0x7c0 [ 379.168509] clone_mnt+0x6c/0xf20 [ 379.171975] copy_tree+0x33a/0x860 [ 379.175542] copy_mnt_ns+0x112/0x8a0 [ 379.179249] ? copy_namespaces+0x112/0x310 [ 379.183491] ? cap_capable+0x1c4/0x230 [ 379.187396] create_new_namespaces+0xc9/0x730 [ 379.191897] ? security_capable+0x88/0xb0 [ 379.196055] copy_namespaces+0x27b/0x310 [ 379.200110] copy_process.part.0+0x2603/0x6a70 [ 379.204693] ? get_pid_task+0xb8/0x130 [ 379.208568] ? save_trace+0x290/0x290 [ 379.212356] ? __lock_is_held+0xad/0x140 [ 379.216414] ? __cleanup_sighand+0x40/0x40 [ 379.220633] ? lock_downgrade+0x6e0/0x6e0 [ 379.224796] _do_fork+0x180/0xc80 [ 379.228239] ? fork_idle+0x270/0x270 [ 379.231944] ? fput+0xb/0x140 [ 379.235037] ? SyS_write+0x14d/0x210 [ 379.238744] ? SyS_read+0x210/0x210 [ 379.242359] ? SyS_clock_settime+0x1a0/0x1a0 [ 379.246786] ? do_syscall_64+0x4c/0x640 [ 379.250758] ? sys_vfork+0x20/0x20 [ 379.254385] do_syscall_64+0x1d5/0x640 [ 379.258287] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 379.263467] RIP: 0033:0x45c4a9 [ 379.266642] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 379.274366] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 379.281645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 379.288902] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 379.296166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 379.303443] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000020 04:44:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 04:44:48 executing program 1 (fault-call:1 fault-nth:33): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 379.487202] FAULT_INJECTION: forcing a failure. [ 379.487202] name failslab, interval 1, probability 0, space 0, times 0 [ 379.498849] CPU: 1 PID: 25069 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 379.506884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.516227] Call Trace: [ 379.518951] dump_stack+0x13e/0x194 [ 379.522689] should_fail.cold+0x10a/0x14b [ 379.526830] should_failslab+0xd6/0x130 [ 379.530788] kmem_cache_alloc+0x2b5/0x770 [ 379.534926] ? find_held_lock+0x2d/0x110 [ 379.538971] ? copy_tree+0x4a0/0x860 [ 379.542677] alloc_vfsmnt+0x23/0x7c0 [ 379.546389] clone_mnt+0x6c/0xf20 [ 379.549832] copy_tree+0x33a/0x860 [ 379.553463] copy_mnt_ns+0x112/0x8a0 [ 379.557187] ? copy_namespaces+0x112/0x310 [ 379.561458] ? cap_capable+0x1c4/0x230 [ 379.565389] create_new_namespaces+0xc9/0x730 [ 379.569873] ? security_capable+0x88/0xb0 [ 379.574018] copy_namespaces+0x27b/0x310 [ 379.578073] copy_process.part.0+0x2603/0x6a70 [ 379.582650] ? get_pid_task+0xb8/0x130 [ 379.586553] ? save_trace+0x290/0x290 [ 379.590338] ? __lock_is_held+0xad/0x140 [ 379.594393] ? __cleanup_sighand+0x40/0x40 [ 379.598640] ? lock_downgrade+0x6e0/0x6e0 [ 379.602824] _do_fork+0x180/0xc80 [ 379.606296] ? fork_idle+0x270/0x270 [ 379.610003] ? fput+0xb/0x140 [ 379.613112] ? SyS_write+0x14d/0x210 [ 379.616923] ? SyS_read+0x210/0x210 [ 379.620541] ? SyS_clock_settime+0x1a0/0x1a0 [ 379.625001] ? do_syscall_64+0x4c/0x640 [ 379.629032] ? sys_vfork+0x20/0x20 [ 379.632740] do_syscall_64+0x1d5/0x640 [ 379.636628] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 379.641802] RIP: 0033:0x45c4a9 [ 379.644978] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 379.652712] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 379.660061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 379.667316] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 379.674567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 379.681830] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000021 04:44:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 04:44:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:48 executing program 1 (fault-call:1 fault-nth:34): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:48 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 379.897379] FAULT_INJECTION: forcing a failure. [ 379.897379] name failslab, interval 1, probability 0, space 0, times 0 [ 379.984952] CPU: 0 PID: 25086 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 379.992909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.002270] Call Trace: [ 380.004871] dump_stack+0x13e/0x194 [ 380.008519] should_fail.cold+0x10a/0x14b [ 380.012697] should_failslab+0xd6/0x130 [ 380.016682] __kmalloc_track_caller+0x2e1/0x7b0 [ 380.021358] ? kstrdup_const+0x35/0x60 [ 380.025264] ? lock_acquire+0x170/0x3f0 [ 380.029247] ? lock_downgrade+0x6e0/0x6e0 04:44:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r4, r5, 0x0, 0xedc0) 04:44:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) [ 380.033407] kstrdup+0x36/0x70 [ 380.036603] kstrdup_const+0x35/0x60 [ 380.040322] alloc_vfsmnt+0xe0/0x7c0 [ 380.044039] clone_mnt+0x6c/0xf20 [ 380.047497] copy_tree+0x33a/0x860 [ 380.051047] copy_mnt_ns+0x112/0x8a0 [ 380.054766] ? copy_namespaces+0x112/0x310 [ 380.059014] ? cap_capable+0x1c4/0x230 [ 380.062904] create_new_namespaces+0xc9/0x730 [ 380.067401] ? security_capable+0x88/0xb0 [ 380.071559] copy_namespaces+0x27b/0x310 [ 380.075631] copy_process.part.0+0x2603/0x6a70 [ 380.080224] ? get_pid_task+0xb8/0x130 [ 380.084122] ? save_trace+0x290/0x290 [ 380.087918] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 380.092837] ? __cleanup_sighand+0x40/0x40 [ 380.097054] ? lock_downgrade+0x6e0/0x6e0 [ 380.101214] _do_fork+0x180/0xc80 [ 380.104662] ? fork_idle+0x270/0x270 [ 380.108369] ? fput+0xb/0x140 [ 380.111467] ? SyS_write+0x14d/0x210 [ 380.115172] ? SyS_read+0x210/0x210 [ 380.118795] ? SyS_clock_settime+0x1a0/0x1a0 [ 380.123197] ? do_syscall_64+0x4c/0x640 [ 380.127166] ? sys_vfork+0x20/0x20 [ 380.130786] do_syscall_64+0x1d5/0x640 [ 380.134671] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 380.139846] RIP: 0033:0x45c4a9 [ 380.143021] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 380.150730] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 380.157990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 380.165255] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 380.172527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 380.179797] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000022 04:44:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 1 (fault-call:1 fault-nth:35): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept(0xffffffffffffffff, &(0x7f00000004c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0x80) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 380.431355] FAULT_INJECTION: forcing a failure. [ 380.431355] name failslab, interval 1, probability 0, space 0, times 0 [ 380.488787] CPU: 1 PID: 25127 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 380.496811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.506170] Call Trace: [ 380.508778] dump_stack+0x13e/0x194 [ 380.512428] should_fail.cold+0x10a/0x14b [ 380.516596] should_failslab+0xd6/0x130 [ 380.520589] __kmalloc_track_caller+0x2e1/0x7b0 [ 380.525524] ? kstrdup_const+0x35/0x60 [ 380.529435] ? lock_acquire+0x170/0x3f0 [ 380.533423] ? lock_downgrade+0x6e0/0x6e0 [ 380.537582] kstrdup+0x36/0x70 [ 380.540778] kstrdup_const+0x35/0x60 [ 380.544501] alloc_vfsmnt+0xe0/0x7c0 [ 380.548228] clone_mnt+0x6c/0xf20 [ 380.551695] copy_tree+0x33a/0x860 [ 380.555256] copy_mnt_ns+0x112/0x8a0 [ 380.559065] ? copy_namespaces+0x112/0x310 [ 380.563306] ? cap_capable+0x1c4/0x230 [ 380.567208] create_new_namespaces+0xc9/0x730 [ 380.571709] ? security_capable+0x88/0xb0 [ 380.575871] copy_namespaces+0x27b/0x310 [ 380.580222] copy_process.part.0+0x2603/0x6a70 [ 380.584817] ? get_pid_task+0xb8/0x130 [ 380.588731] ? save_trace+0x290/0x290 [ 380.592541] ? __lock_is_held+0xad/0x140 [ 380.597234] ? __cleanup_sighand+0x40/0x40 [ 380.601488] ? lock_downgrade+0x6e0/0x6e0 [ 380.606010] _do_fork+0x180/0xc80 [ 380.609487] ? fork_idle+0x270/0x270 [ 380.613211] ? fput+0xb/0x140 [ 380.616321] ? SyS_write+0x14d/0x210 [ 380.620187] ? SyS_read+0x210/0x210 [ 380.623853] ? SyS_clock_settime+0x1a0/0x1a0 [ 380.628272] ? do_syscall_64+0x4c/0x640 [ 380.632253] ? sys_vfork+0x20/0x20 [ 380.635800] do_syscall_64+0x1d5/0x640 [ 380.639713] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 380.644929] RIP: 0033:0x45c4a9 [ 380.648323] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 380.656047] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 380.663333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 380.670614] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 380.677899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 380.685185] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000023 04:44:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 04:44:49 executing program 1 (fault-call:1 fault-nth:36): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) [ 380.922524] FAULT_INJECTION: forcing a failure. [ 380.922524] name failslab, interval 1, probability 0, space 0, times 0 04:44:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:49 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 381.030140] CPU: 1 PID: 25167 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 381.038088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.047538] Call Trace: [ 381.050140] dump_stack+0x13e/0x194 [ 381.053789] should_fail.cold+0x10a/0x14b [ 381.057946] should_failslab+0xd6/0x130 [ 381.061923] __kmalloc_track_caller+0x2e1/0x7b0 [ 381.066850] ? kstrdup_const+0x35/0x60 [ 381.070825] ? lock_acquire+0x170/0x3f0 [ 381.074787] ? lock_downgrade+0x6e0/0x6e0 [ 381.078924] kstrdup+0x36/0x70 [ 381.082140] kstrdup_const+0x35/0x60 [ 381.085886] alloc_vfsmnt+0xe0/0x7c0 [ 381.089594] clone_mnt+0x6c/0xf20 [ 381.093067] copy_tree+0x33a/0x860 [ 381.096623] copy_mnt_ns+0x112/0x8a0 [ 381.100338] ? copy_namespaces+0x112/0x310 [ 381.104564] ? cap_capable+0x1c4/0x230 [ 381.108443] create_new_namespaces+0xc9/0x730 [ 381.112926] ? security_capable+0x88/0xb0 [ 381.117173] copy_namespaces+0x27b/0x310 [ 381.121228] copy_process.part.0+0x2603/0x6a70 [ 381.125817] ? get_pid_task+0xb8/0x130 [ 381.129696] ? save_trace+0x290/0x290 [ 381.133570] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 381.138498] ? __cleanup_sighand+0x40/0x40 [ 381.142744] ? lock_downgrade+0x6e0/0x6e0 [ 381.146887] _do_fork+0x180/0xc80 [ 381.150514] ? fork_idle+0x270/0x270 [ 381.154578] ? fput+0xb/0x140 [ 381.157672] ? SyS_write+0x14d/0x210 [ 381.161376] ? SyS_read+0x210/0x210 [ 381.164991] ? SyS_clock_settime+0x1a0/0x1a0 [ 381.169399] ? do_syscall_64+0x4c/0x640 [ 381.173362] ? sys_vfork+0x20/0x20 [ 381.176894] do_syscall_64+0x1d5/0x640 [ 381.180893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 381.186093] RIP: 0033:0x45c4a9 [ 381.189270] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 381.196992] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 381.204254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 381.211656] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 381.218931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 381.226187] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000024 04:44:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 04:44:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:50 executing program 1 (fault-call:1 fault-nth:37): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 381.492658] FAULT_INJECTION: forcing a failure. [ 381.492658] name failslab, interval 1, probability 0, space 0, times 0 04:44:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 381.549358] CPU: 0 PID: 25201 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 381.557296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.566661] Call Trace: [ 381.569262] dump_stack+0x13e/0x194 [ 381.572905] should_fail.cold+0x10a/0x14b [ 381.577084] should_failslab+0xd6/0x130 [ 381.581588] kmem_cache_alloc+0x2b5/0x770 [ 381.585752] ? find_held_lock+0x2d/0x110 [ 381.589820] ? copy_tree+0x4a0/0x860 [ 381.593543] alloc_vfsmnt+0x23/0x7c0 04:44:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 381.597285] clone_mnt+0x6c/0xf20 [ 381.600746] copy_tree+0x33a/0x860 [ 381.604297] copy_mnt_ns+0x112/0x8a0 [ 381.608015] ? copy_namespaces+0x112/0x310 [ 381.612258] ? cap_capable+0x1c4/0x230 [ 381.616188] create_new_namespaces+0xc9/0x730 [ 381.620695] ? security_capable+0x88/0xb0 [ 381.624848] copy_namespaces+0x27b/0x310 [ 381.628917] copy_process.part.0+0x2603/0x6a70 [ 381.633515] ? get_pid_task+0xb8/0x130 [ 381.637445] ? save_trace+0x290/0x290 [ 381.641254] ? __lock_is_held+0xad/0x140 [ 381.645351] ? __cleanup_sighand+0x40/0x40 [ 381.649591] ? lock_downgrade+0x6e0/0x6e0 [ 381.653780] _do_fork+0x180/0xc80 [ 381.657243] ? fork_idle+0x270/0x270 [ 381.660954] ? fput+0xb/0x140 [ 381.664100] ? SyS_write+0x14d/0x210 [ 381.667858] ? SyS_read+0x210/0x210 [ 381.671491] ? SyS_clock_settime+0x1a0/0x1a0 [ 381.675894] ? do_syscall_64+0x4c/0x640 [ 381.679876] ? sys_vfork+0x20/0x20 [ 381.683422] do_syscall_64+0x1d5/0x640 [ 381.687452] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 381.692638] RIP: 0033:0x45c4a9 04:44:50 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0xe5, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) [ 381.695821] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 381.703611] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 381.710872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 381.718160] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 381.725426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 381.732711] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000025 04:44:50 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:50 executing program 1 (fault-call:1 fault-nth:38): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, 0x0, 0xedc0) 04:44:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 381.961451] FAULT_INJECTION: forcing a failure. [ 381.961451] name failslab, interval 1, probability 0, space 0, times 0 [ 381.982330] CPU: 0 PID: 25235 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 381.990297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.000997] Call Trace: [ 382.003631] dump_stack+0x13e/0x194 [ 382.008454] should_fail.cold+0x10a/0x14b [ 382.012622] should_failslab+0xd6/0x130 [ 382.016643] __kmalloc_track_caller+0x2e1/0x7b0 [ 382.021327] ? kstrdup_const+0x35/0x60 [ 382.025311] ? lock_acquire+0x170/0x3f0 [ 382.029297] ? lock_downgrade+0x6e0/0x6e0 [ 382.033477] kstrdup+0x36/0x70 [ 382.036687] kstrdup_const+0x35/0x60 [ 382.040408] alloc_vfsmnt+0xe0/0x7c0 [ 382.044154] clone_mnt+0x6c/0xf20 [ 382.047623] copy_tree+0x33a/0x860 [ 382.051333] copy_mnt_ns+0x112/0x8a0 [ 382.055058] ? copy_namespaces+0x112/0x310 04:44:50 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 382.059297] ? cap_capable+0x1c4/0x230 [ 382.063191] create_new_namespaces+0xc9/0x730 [ 382.067690] ? security_capable+0x88/0xb0 [ 382.071846] copy_namespaces+0x27b/0x310 [ 382.075918] copy_process.part.0+0x2603/0x6a70 [ 382.080517] ? get_pid_task+0xb8/0x130 [ 382.084405] ? save_trace+0x290/0x290 [ 382.088216] ? __lock_is_held+0xad/0x140 [ 382.092288] ? __cleanup_sighand+0x40/0x40 [ 382.096539] ? lock_downgrade+0x6e0/0x6e0 [ 382.100788] _do_fork+0x180/0xc80 [ 382.104265] ? fork_idle+0x270/0x270 [ 382.107985] ? fput+0xb/0x140 [ 382.111093] ? SyS_write+0x14d/0x210 [ 382.114899] ? SyS_read+0x210/0x210 [ 382.118535] ? SyS_clock_settime+0x1a0/0x1a0 [ 382.122948] ? do_syscall_64+0x4c/0x640 [ 382.126923] ? sys_vfork+0x20/0x20 [ 382.130478] do_syscall_64+0x1d5/0x640 [ 382.134379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 382.139570] RIP: 0033:0x45c4a9 [ 382.142763] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 382.150566] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) [ 382.158151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 382.165434] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 382.172717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 382.180000] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000026 04:44:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 04:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 1 (fault-call:1 fault-nth:39): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 04:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 04:44:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 382.561127] FAULT_INJECTION: forcing a failure. [ 382.561127] name failslab, interval 1, probability 0, space 0, times 0 [ 382.609671] CPU: 1 PID: 25276 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 382.617607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.626978] Call Trace: [ 382.629583] dump_stack+0x13e/0x194 [ 382.633226] should_fail.cold+0x10a/0x14b [ 382.637412] should_failslab+0xd6/0x130 [ 382.641398] kmem_cache_alloc+0x2b5/0x770 [ 382.645792] ? find_held_lock+0x2d/0x110 [ 382.649857] ? copy_tree+0x4a0/0x860 [ 382.653577] alloc_vfsmnt+0x23/0x7c0 [ 382.657474] clone_mnt+0x6c/0xf20 [ 382.660940] copy_tree+0x33a/0x860 [ 382.664493] copy_mnt_ns+0x112/0x8a0 [ 382.668219] ? copy_namespaces+0x112/0x310 [ 382.672496] ? cap_capable+0x1c4/0x230 [ 382.676386] create_new_namespaces+0xc9/0x730 [ 382.680872] ? security_capable+0x88/0xb0 [ 382.685031] copy_namespaces+0x27b/0x310 [ 382.689261] copy_process.part.0+0x2603/0x6a70 [ 382.693850] ? get_pid_task+0xb8/0x130 [ 382.697731] ? save_trace+0x290/0x290 [ 382.702490] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 382.707414] ? __cleanup_sighand+0x40/0x40 [ 382.711644] ? lock_downgrade+0x6e0/0x6e0 [ 382.715804] _do_fork+0x180/0xc80 [ 382.719253] ? fork_idle+0x270/0x270 [ 382.722974] ? fput+0xb/0x140 [ 382.726070] ? SyS_write+0x14d/0x210 [ 382.729878] ? SyS_read+0x210/0x210 [ 382.733495] ? SyS_clock_settime+0x1a0/0x1a0 [ 382.737910] ? do_syscall_64+0x4c/0x640 [ 382.742023] ? sys_vfork+0x20/0x20 [ 382.745599] do_syscall_64+0x1d5/0x640 [ 382.749780] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 382.754961] RIP: 0033:0x45c4a9 04:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 382.758434] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 382.766264] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 382.773686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 382.781100] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 382.788382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 382.795650] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000027 04:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) socket(0x10, 0x803, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 04:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 1 (fault-call:1 fault-nth:40): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r2, r3, 0x0, 0xedc0) 04:44:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 383.045839] FAULT_INJECTION: forcing a failure. [ 383.045839] name failslab, interval 1, probability 0, space 0, times 0 [ 383.089215] CPU: 1 PID: 25313 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 383.097154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.106519] Call Trace: [ 383.109121] dump_stack+0x13e/0x194 [ 383.112783] should_fail.cold+0x10a/0x14b [ 383.116953] should_failslab+0xd6/0x130 [ 383.120950] __kmalloc_track_caller+0x2e1/0x7b0 [ 383.125627] ? kstrdup_const+0x35/0x60 [ 383.129524] ? lock_acquire+0x170/0x3f0 [ 383.133488] ? lock_downgrade+0x6e0/0x6e0 [ 383.137631] kstrdup+0x36/0x70 [ 383.140814] kstrdup_const+0x35/0x60 [ 383.144529] alloc_vfsmnt+0xe0/0x7c0 [ 383.148231] clone_mnt+0x6c/0xf20 [ 383.152026] copy_tree+0x33a/0x860 [ 383.155560] copy_mnt_ns+0x112/0x8a0 [ 383.159283] ? copy_namespaces+0x112/0x310 [ 383.163528] ? cap_capable+0x1c4/0x230 [ 383.167419] create_new_namespaces+0xc9/0x730 [ 383.171916] ? security_capable+0x88/0xb0 [ 383.176093] copy_namespaces+0x27b/0x310 [ 383.180162] copy_process.part.0+0x2603/0x6a70 [ 383.184750] ? get_pid_task+0xb8/0x130 [ 383.188772] ? save_trace+0x290/0x290 [ 383.192588] ? __lock_is_held+0xad/0x140 [ 383.197102] ? __cleanup_sighand+0x40/0x40 [ 383.201399] ? lock_downgrade+0x6e0/0x6e0 [ 383.205673] _do_fork+0x180/0xc80 [ 383.209128] ? fork_idle+0x270/0x270 [ 383.212855] ? fput+0xb/0x140 [ 383.215950] ? SyS_write+0x14d/0x210 [ 383.219670] ? SyS_read+0x210/0x210 [ 383.223319] ? SyS_clock_settime+0x1a0/0x1a0 [ 383.227734] ? do_syscall_64+0x4c/0x640 [ 383.231729] ? sys_vfork+0x20/0x20 [ 383.235291] do_syscall_64+0x1d5/0x640 [ 383.239197] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 383.244383] RIP: 0033:0x45c4a9 [ 383.247576] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 383.255299] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 383.262733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 383.270258] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 383.277634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}}, 0x8040) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) [ 383.284891] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000028 04:44:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:52 executing program 1 (fault-call:1 fault-nth:41): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 04:44:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 383.574354] FAULT_INJECTION: forcing a failure. [ 383.574354] name failslab, interval 1, probability 0, space 0, times 0 [ 383.587317] CPU: 0 PID: 25348 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 383.595253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.604613] Call Trace: [ 383.607213] dump_stack+0x13e/0x194 [ 383.610855] should_fail.cold+0x10a/0x14b [ 383.615050] should_failslab+0xd6/0x130 [ 383.619045] __kmalloc_track_caller+0x2e1/0x7b0 04:44:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) [ 383.623718] ? kstrdup_const+0x35/0x60 [ 383.627615] ? lock_acquire+0x170/0x3f0 [ 383.631603] ? lock_downgrade+0x6e0/0x6e0 [ 383.637760] kstrdup+0x36/0x70 [ 383.640960] kstrdup_const+0x35/0x60 [ 383.644732] alloc_vfsmnt+0xe0/0x7c0 [ 383.648451] clone_mnt+0x6c/0xf20 [ 383.651918] copy_tree+0x33a/0x860 [ 383.655475] copy_mnt_ns+0x112/0x8a0 [ 383.659202] ? copy_namespaces+0x112/0x310 [ 383.663542] ? cap_capable+0x1c4/0x230 [ 383.667639] create_new_namespaces+0xc9/0x730 [ 383.672141] ? security_capable+0x88/0xb0 [ 383.676303] copy_namespaces+0x27b/0x310 [ 383.680385] copy_process.part.0+0x2603/0x6a70 [ 383.684979] ? get_pid_task+0xb8/0x130 [ 383.688876] ? save_trace+0x290/0x290 [ 383.692687] ? __lock_is_held+0xad/0x140 [ 383.696794] ? __cleanup_sighand+0x40/0x40 [ 383.701036] ? lock_downgrade+0x6e0/0x6e0 [ 383.705200] _do_fork+0x180/0xc80 [ 383.708665] ? fork_idle+0x270/0x270 [ 383.712407] ? fput+0xb/0x140 [ 383.715516] ? SyS_write+0x14d/0x210 [ 383.719229] ? SyS_read+0x210/0x210 [ 383.722858] ? SyS_clock_settime+0x1a0/0x1a0 [ 383.727366] ? do_syscall_64+0x4c/0x640 [ 383.731382] ? sys_vfork+0x20/0x20 [ 383.734911] do_syscall_64+0x1d5/0x640 [ 383.738797] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 383.743991] RIP: 0033:0x45c4a9 [ 383.747197] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 383.755016] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 383.762539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 383.769810] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 383.777166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 383.784457] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000029 04:44:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:52 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 04:44:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:52 executing program 1 (fault-call:1 fault-nth:42): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 384.007320] FAULT_INJECTION: forcing a failure. [ 384.007320] name failslab, interval 1, probability 0, space 0, times 0 [ 384.054804] CPU: 0 PID: 25384 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 384.062745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.072233] Call Trace: [ 384.074899] dump_stack+0x13e/0x194 [ 384.078711] should_fail.cold+0x10a/0x14b [ 384.082899] should_failslab+0xd6/0x130 [ 384.087107] kmem_cache_alloc+0x2b5/0x770 [ 384.091364] ? find_held_lock+0x2d/0x110 [ 384.095429] ? copy_tree+0x4a0/0x860 [ 384.099336] alloc_vfsmnt+0x23/0x7c0 [ 384.103055] clone_mnt+0x6c/0xf20 [ 384.106730] copy_tree+0x33a/0x860 [ 384.110273] copy_mnt_ns+0x112/0x8a0 [ 384.113992] ? copy_namespaces+0x112/0x310 [ 384.118229] ? cap_capable+0x1c4/0x230 [ 384.122263] create_new_namespaces+0xc9/0x730 [ 384.127200] ? security_capable+0x88/0xb0 [ 384.131466] copy_namespaces+0x27b/0x310 [ 384.135543] copy_process.part.0+0x2603/0x6a70 [ 384.140125] ? get_pid_task+0xb8/0x130 [ 384.144124] ? save_trace+0x290/0x290 [ 384.148106] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 384.153062] ? __cleanup_sighand+0x40/0x40 [ 384.157295] ? lock_downgrade+0x6e0/0x6e0 [ 384.161463] _do_fork+0x180/0xc80 [ 384.164917] ? fork_idle+0x270/0x270 [ 384.168623] ? fput+0xb/0x140 [ 384.171896] ? SyS_write+0x14d/0x210 [ 384.175704] ? SyS_read+0x210/0x210 [ 384.179599] ? SyS_clock_settime+0x1a0/0x1a0 [ 384.184098] ? do_syscall_64+0x4c/0x640 [ 384.188446] ? sys_vfork+0x20/0x20 [ 384.191980] do_syscall_64+0x1d5/0x640 [ 384.196144] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 384.201652] RIP: 0033:0x45c4a9 04:44:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) [ 384.204840] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 384.212545] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 384.219813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 384.227105] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 384.234430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 384.241699] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002a 04:44:53 executing program 1 (fault-call:1 fault-nth:43): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) [ 384.458304] FAULT_INJECTION: forcing a failure. [ 384.458304] name failslab, interval 1, probability 0, space 0, times 0 [ 384.505017] CPU: 0 PID: 25409 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 384.512957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.522407] Call Trace: [ 384.525009] dump_stack+0x13e/0x194 [ 384.528654] should_fail.cold+0x10a/0x14b [ 384.532951] should_failslab+0xd6/0x130 [ 384.536962] __kmalloc_track_caller+0x2e1/0x7b0 [ 384.541641] ? kstrdup_const+0x35/0x60 [ 384.545662] ? lock_acquire+0x170/0x3f0 [ 384.549642] ? lock_downgrade+0x6e0/0x6e0 [ 384.553797] kstrdup+0x36/0x70 [ 384.557083] kstrdup_const+0x35/0x60 [ 384.560917] alloc_vfsmnt+0xe0/0x7c0 [ 384.564635] clone_mnt+0x6c/0xf20 [ 384.568099] copy_tree+0x33a/0x860 [ 384.571654] copy_mnt_ns+0x112/0x8a0 [ 384.575463] ? copy_namespaces+0x112/0x310 [ 384.579701] ? cap_capable+0x1c4/0x230 [ 384.583601] create_new_namespaces+0xc9/0x730 [ 384.588134] ? security_capable+0x88/0xb0 [ 384.592283] copy_namespaces+0x27b/0x310 [ 384.596501] copy_process.part.0+0x2603/0x6a70 [ 384.601079] ? get_pid_task+0xb8/0x130 [ 384.604958] ? save_trace+0x290/0x290 [ 384.608867] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 384.614247] ? __cleanup_sighand+0x40/0x40 [ 384.618591] ? lock_downgrade+0x6e0/0x6e0 [ 384.622839] _do_fork+0x180/0xc80 [ 384.626304] ? fork_idle+0x270/0x270 [ 384.630051] ? fput+0xb/0x140 [ 384.633165] ? SyS_write+0x14d/0x210 [ 384.636886] ? SyS_read+0x210/0x210 [ 384.640518] ? SyS_clock_settime+0x1a0/0x1a0 [ 384.644955] ? do_syscall_64+0x4c/0x640 [ 384.649079] ? sys_vfork+0x20/0x20 [ 384.652617] do_syscall_64+0x1d5/0x640 [ 384.656652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 384.661834] RIP: 0033:0x45c4a9 [ 384.665028] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 384.672846] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 384.680116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 384.687385] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 384.694675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 384.702192] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002b 04:44:53 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:53 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:53 executing program 1 (fault-call:1 fault-nth:44): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) [ 384.907127] FAULT_INJECTION: forcing a failure. [ 384.907127] name failslab, interval 1, probability 0, space 0, times 0 [ 384.935320] CPU: 0 PID: 25449 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 384.943262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.952622] Call Trace: [ 384.955215] dump_stack+0x13e/0x194 [ 384.958887] should_fail.cold+0x10a/0x14b [ 384.963049] should_failslab+0xd6/0x130 [ 384.967156] kmem_cache_alloc+0x2b5/0x770 [ 384.971311] ? find_held_lock+0x2d/0x110 [ 384.975368] ? copy_tree+0x4a0/0x860 [ 384.979095] alloc_vfsmnt+0x23/0x7c0 [ 384.982927] clone_mnt+0x6c/0xf20 [ 384.986387] copy_tree+0x33a/0x860 [ 384.989932] copy_mnt_ns+0x112/0x8a0 [ 384.993640] ? copy_namespaces+0x112/0x310 [ 384.997866] ? cap_capable+0x1c4/0x230 [ 385.001746] create_new_namespaces+0xc9/0x730 [ 385.006232] ? security_capable+0x88/0xb0 [ 385.010383] copy_namespaces+0x27b/0x310 [ 385.014437] copy_process.part.0+0x2603/0x6a70 [ 385.019011] ? get_pid_task+0xb8/0x130 [ 385.022903] ? save_trace+0x290/0x290 [ 385.026691] ? __lock_is_held+0xad/0x140 [ 385.030750] ? __cleanup_sighand+0x40/0x40 [ 385.034992] ? lock_downgrade+0x6e0/0x6e0 [ 385.039158] _do_fork+0x180/0xc80 [ 385.042605] ? fork_idle+0x270/0x270 [ 385.046308] ? fput+0xb/0x140 [ 385.049413] ? SyS_write+0x14d/0x210 [ 385.053130] ? SyS_read+0x210/0x210 [ 385.056758] ? SyS_clock_settime+0x1a0/0x1a0 [ 385.061179] ? do_syscall_64+0x4c/0x640 [ 385.065163] ? sys_vfork+0x20/0x20 [ 385.068730] do_syscall_64+0x1d5/0x640 [ 385.072625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.077825] RIP: 0033:0x45c4a9 [ 385.081008] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 385.088790] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 385.096577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 385.103861] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.111304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 385.118561] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002c 04:44:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 1 (fault-call:1 fault-nth:45): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 04:44:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 385.309258] FAULT_INJECTION: forcing a failure. [ 385.309258] name failslab, interval 1, probability 0, space 0, times 0 [ 385.344246] CPU: 0 PID: 25476 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 385.352205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.361573] Call Trace: [ 385.364172] dump_stack+0x13e/0x194 [ 385.367911] should_fail.cold+0x10a/0x14b [ 385.372080] should_failslab+0xd6/0x130 [ 385.376083] __kmalloc_track_caller+0x2e1/0x7b0 [ 385.380846] ? kstrdup_const+0x35/0x60 [ 385.384751] ? lock_acquire+0x170/0x3f0 [ 385.388864] ? lock_downgrade+0x6e0/0x6e0 [ 385.393032] kstrdup+0x36/0x70 [ 385.396239] kstrdup_const+0x35/0x60 [ 385.400049] alloc_vfsmnt+0xe0/0x7c0 [ 385.403800] clone_mnt+0x6c/0xf20 [ 385.407265] copy_tree+0x33a/0x860 [ 385.410821] copy_mnt_ns+0x112/0x8a0 [ 385.414548] ? copy_namespaces+0x112/0x310 [ 385.418793] ? cap_capable+0x1c4/0x230 [ 385.422695] create_new_namespaces+0xc9/0x730 [ 385.427217] ? security_capable+0x88/0xb0 [ 385.431384] copy_namespaces+0x27b/0x310 [ 385.435615] copy_process.part.0+0x2603/0x6a70 [ 385.440218] ? get_pid_task+0xb8/0x130 [ 385.444121] ? save_trace+0x290/0x290 [ 385.447929] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 385.452877] ? __cleanup_sighand+0x40/0x40 [ 385.457125] ? lock_downgrade+0x6e0/0x6e0 [ 385.461378] _do_fork+0x180/0xc80 [ 385.464862] ? fork_idle+0x270/0x270 [ 385.469449] ? fput+0xb/0x140 [ 385.472558] ? SyS_write+0x14d/0x210 [ 385.476275] ? SyS_read+0x210/0x210 [ 385.479907] ? SyS_clock_settime+0x1a0/0x1a0 [ 385.484322] ? do_syscall_64+0x4c/0x640 [ 385.488304] ? sys_vfork+0x20/0x20 [ 385.491853] do_syscall_64+0x1d5/0x640 [ 385.495751] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 385.500943] RIP: 0033:0x45c4a9 04:44:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) [ 385.504130] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 385.511840] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 385.519732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 385.527004] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 385.534276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 385.542005] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002d 04:44:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) 04:44:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 1 (fault-call:1 fault-nth:46): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 04:44:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 385.848787] FAULT_INJECTION: forcing a failure. [ 385.848787] name failslab, interval 1, probability 0, space 0, times 0 [ 385.914379] CPU: 0 PID: 25522 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 385.922488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.931850] Call Trace: [ 385.934447] dump_stack+0x13e/0x194 [ 385.938190] should_fail.cold+0x10a/0x14b [ 385.942340] should_failslab+0xd6/0x130 [ 385.946798] kmem_cache_alloc+0x2b5/0x770 [ 385.951039] ? retire_userns_sysctls+0x80/0x80 [ 385.955618] copy_pid_ns+0x1b2/0xa70 [ 385.959323] ? copy_ipcs+0x2c4/0x3e0 [ 385.963234] create_new_namespaces+0x25f/0x730 [ 385.967825] copy_namespaces+0x27b/0x310 [ 385.972030] copy_process.part.0+0x2603/0x6a70 [ 385.977182] ? get_pid_task+0xb8/0x130 [ 385.981259] ? save_trace+0x290/0x290 [ 385.985056] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 385.990096] ? __cleanup_sighand+0x40/0x40 [ 385.994334] ? lock_downgrade+0x6e0/0x6e0 [ 385.998664] _do_fork+0x180/0xc80 [ 386.002378] ? fork_idle+0x270/0x270 [ 386.006100] ? fput+0xb/0x140 [ 386.009232] ? SyS_write+0x14d/0x210 [ 386.012951] ? SyS_read+0x210/0x210 [ 386.016573] ? SyS_clock_settime+0x1a0/0x1a0 [ 386.021008] ? do_syscall_64+0x4c/0x640 [ 386.025787] ? sys_vfork+0x20/0x20 [ 386.029414] do_syscall_64+0x1d5/0x640 [ 386.033616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.038825] RIP: 0033:0x45c4a9 [ 386.042182] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 386.051024] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) [ 386.058370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 386.065917] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.073697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 386.081235] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002e 04:44:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 04:44:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 1 (fault-call:1 fault-nth:47): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 04:44:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 04:44:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 386.355364] FAULT_INJECTION: forcing a failure. [ 386.355364] name failslab, interval 1, probability 0, space 0, times 0 [ 386.401107] CPU: 0 PID: 25553 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 386.409228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.418591] Call Trace: [ 386.421323] dump_stack+0x13e/0x194 [ 386.424969] should_fail.cold+0x10a/0x14b [ 386.429140] should_failslab+0xd6/0x130 [ 386.433124] kmem_cache_alloc_trace+0x2db/0x7b0 [ 386.437803] ? kmem_cache_alloc+0x604/0x770 [ 386.442130] ? retire_userns_sysctls+0x80/0x80 [ 386.446882] copy_pid_ns+0x1f8/0xa70 [ 386.450665] ? copy_ipcs+0x2c4/0x3e0 [ 386.454476] create_new_namespaces+0x25f/0x730 [ 386.459077] copy_namespaces+0x27b/0x310 [ 386.463276] copy_process.part.0+0x2603/0x6a70 [ 386.467878] ? get_pid_task+0xb8/0x130 [ 386.471777] ? save_trace+0x290/0x290 [ 386.475594] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 386.480624] ? __cleanup_sighand+0x40/0x40 [ 386.484855] ? lock_downgrade+0x6e0/0x6e0 [ 386.488998] _do_fork+0x180/0xc80 [ 386.492449] ? fork_idle+0x270/0x270 [ 386.496153] ? fput+0xb/0x140 [ 386.499247] ? SyS_write+0x14d/0x210 [ 386.502949] ? SyS_read+0x210/0x210 [ 386.506561] ? SyS_clock_settime+0x1a0/0x1a0 [ 386.510955] ? do_syscall_64+0x4c/0x640 [ 386.514933] ? sys_vfork+0x20/0x20 [ 386.518459] do_syscall_64+0x1d5/0x640 [ 386.522347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.527527] RIP: 0033:0x45c4a9 [ 386.530699] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 386.538394] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:55 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 386.545648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 386.552907] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.561290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 386.568545] R13: 0000000000000074 R14: 00000000004c2d52 R15: 000000000000002f 04:44:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 04:44:55 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 04:44:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:55 executing program 1 (fault-call:1 fault-nth:48): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 386.805789] FAULT_INJECTION: forcing a failure. [ 386.805789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.817636] CPU: 1 PID: 25583 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 386.825524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.835018] Call Trace: [ 386.837621] dump_stack+0x13e/0x194 [ 386.841417] should_fail.cold+0x10a/0x14b [ 386.845577] ? save_trace+0x290/0x290 [ 386.849392] __alloc_pages_nodemask+0x1bf/0x700 04:44:55 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 386.854077] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 386.859099] ? find_held_lock+0x2d/0x110 [ 386.863299] cache_grow_begin+0x7b/0x410 [ 386.867374] kmem_cache_alloc_trace+0x6cf/0x7b0 [ 386.872056] ? retire_userns_sysctls+0x80/0x80 [ 386.876658] copy_pid_ns+0x1f8/0xa70 [ 386.880378] ? copy_ipcs+0x2c4/0x3e0 [ 386.884120] create_new_namespaces+0x25f/0x730 [ 386.888718] copy_namespaces+0x27b/0x310 [ 386.892794] copy_process.part.0+0x2603/0x6a70 [ 386.897504] ? get_pid_task+0xb8/0x130 [ 386.901656] ? save_trace+0x290/0x290 04:44:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 386.905467] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 386.910530] ? __cleanup_sighand+0x40/0x40 [ 386.914771] ? lock_downgrade+0x6e0/0x6e0 [ 386.919129] _do_fork+0x180/0xc80 [ 386.922591] ? fork_idle+0x270/0x270 [ 386.926309] ? fput+0xb/0x140 [ 386.929559] ? SyS_write+0x14d/0x210 [ 386.933278] ? SyS_read+0x210/0x210 [ 386.936918] ? SyS_clock_settime+0x1a0/0x1a0 [ 386.941341] ? do_syscall_64+0x4c/0x640 [ 386.945326] ? sys_vfork+0x20/0x20 [ 386.948873] do_syscall_64+0x1d5/0x640 04:44:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:55 executing program 1 (fault-call:1 fault-nth:49): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 386.952772] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 386.957965] RIP: 0033:0x45c4a9 [ 386.961158] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 386.968876] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 386.976151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 386.983428] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 386.990704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 386.997979] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000030 04:44:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) 04:44:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) 04:44:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 387.168456] FAULT_INJECTION: forcing a failure. [ 387.168456] name failslab, interval 1, probability 0, space 0, times 0 [ 387.186822] CPU: 0 PID: 25607 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 387.195109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.204753] Call Trace: [ 387.207354] dump_stack+0x13e/0x194 [ 387.211007] should_fail.cold+0x10a/0x14b [ 387.215163] should_failslab+0xd6/0x130 [ 387.219166] kmem_cache_alloc+0x2b5/0x770 [ 387.223336] ? __lockdep_init_map+0x100/0x560 [ 387.227833] ? copy_pid_ns+0x4c/0xa70 [ 387.231670] alloc_pid+0x5a/0xc40 [ 387.235129] ? create_new_namespaces+0x3ab/0x730 [ 387.239893] ? memcpy+0x35/0x50 [ 387.243161] ? copy_thread_tls+0x3c2/0x7a0 [ 387.247384] copy_process.part.0+0x272f/0x6a70 [ 387.251972] ? get_pid_task+0xb8/0x130 [ 387.255843] ? save_trace+0x290/0x290 [ 387.259626] ? __lock_is_held+0xad/0x140 [ 387.263682] ? __cleanup_sighand+0x40/0x40 [ 387.267907] ? lock_downgrade+0x6e0/0x6e0 [ 387.272044] _do_fork+0x180/0xc80 [ 387.275498] ? fork_idle+0x270/0x270 [ 387.279207] ? fput+0xb/0x140 [ 387.282303] ? SyS_write+0x14d/0x210 [ 387.286013] ? SyS_read+0x210/0x210 [ 387.289622] ? SyS_clock_settime+0x1a0/0x1a0 [ 387.294024] ? do_syscall_64+0x4c/0x640 [ 387.297995] ? sys_vfork+0x20/0x20 [ 387.301520] do_syscall_64+0x1d5/0x640 [ 387.305397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.310579] RIP: 0033:0x45c4a9 04:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 387.313752] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.321442] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 387.328827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 387.336310] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 387.343587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 387.350846] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000031 04:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) 04:44:56 executing program 1 (fault-call:1 fault-nth:50): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0xedc0) [ 387.576402] FAULT_INJECTION: forcing a failure. [ 387.576402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.595673] CPU: 1 PID: 25637 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 387.603597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.612952] Call Trace: [ 387.615551] dump_stack+0x13e/0x194 [ 387.619202] should_fail.cold+0x10a/0x14b 04:44:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 387.623359] __alloc_pages_nodemask+0x1bf/0x700 [ 387.628047] ? rcu_read_lock_sched_held+0x10a/0x130 [ 387.633078] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 387.638111] alloc_pages_current+0xe7/0x1e0 [ 387.642440] ? __lockdep_init_map+0x100/0x560 [ 387.646945] __get_free_pages+0xb/0x40 [ 387.650836] mount_fs+0x1c7/0x2a0 [ 387.654306] vfs_kern_mount.part.0+0x5b/0x3c0 [ 387.658802] ? kmem_cache_alloc+0x604/0x770 [ 387.663129] kern_mount_data+0x51/0xb0 [ 387.667028] pid_ns_prepare_proc+0x1a/0x80 [ 387.671273] alloc_pid+0x9be/0xc40 [ 387.674832] copy_process.part.0+0x272f/0x6a70 [ 387.679425] ? get_pid_task+0xb8/0x130 [ 387.683318] ? save_trace+0x290/0x290 [ 387.687119] ? __lock_is_held+0xad/0x140 [ 387.691174] ? __cleanup_sighand+0x40/0x40 [ 387.695395] ? lock_downgrade+0x6e0/0x6e0 [ 387.699531] _do_fork+0x180/0xc80 [ 387.703082] ? fork_idle+0x270/0x270 [ 387.706792] ? fput+0xb/0x140 [ 387.709957] ? SyS_write+0x14d/0x210 [ 387.713671] ? SyS_read+0x210/0x210 [ 387.717301] ? SyS_clock_settime+0x1a0/0x1a0 [ 387.721705] ? do_syscall_64+0x4c/0x640 [ 387.725827] ? sys_vfork+0x20/0x20 [ 387.729364] do_syscall_64+0x1d5/0x640 [ 387.733247] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 387.738445] RIP: 0033:0x45c4a9 [ 387.741627] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 387.749322] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 387.756588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 387.763851] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 04:44:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 387.771119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 387.778591] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000032 04:44:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, 0x1c) 04:44:56 executing program 1 (fault-call:1 fault-nth:51): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 388.012307] FAULT_INJECTION: forcing a failure. [ 388.012307] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.083878] CPU: 0 PID: 25667 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 388.091825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.101449] Call Trace: [ 388.104049] dump_stack+0x13e/0x194 [ 388.107692] should_fail.cold+0x10a/0x14b [ 388.111837] __alloc_pages_nodemask+0x1bf/0x700 [ 388.116516] ? rcu_read_lock_sched_held+0x10a/0x130 [ 388.121533] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 388.126575] alloc_pages_current+0xe7/0x1e0 [ 388.130902] ? __lockdep_init_map+0x100/0x560 [ 388.135398] __get_free_pages+0xb/0x40 [ 388.139304] mount_fs+0x1c7/0x2a0 [ 388.142769] vfs_kern_mount.part.0+0x5b/0x3c0 [ 388.147252] ? kmem_cache_alloc+0x604/0x770 [ 388.151577] kern_mount_data+0x51/0xb0 [ 388.155460] pid_ns_prepare_proc+0x1a/0x80 [ 388.159692] alloc_pid+0x9be/0xc40 [ 388.163330] copy_process.part.0+0x272f/0x6a70 [ 388.167942] ? get_pid_task+0xb8/0x130 [ 388.171833] ? save_trace+0x290/0x290 [ 388.175625] ? __lock_is_held+0xad/0x140 [ 388.179690] ? __cleanup_sighand+0x40/0x40 [ 388.184044] ? lock_downgrade+0x6e0/0x6e0 [ 388.188297] _do_fork+0x180/0xc80 [ 388.191748] ? fork_idle+0x270/0x270 [ 388.195543] ? fput+0xb/0x140 [ 388.198669] ? SyS_write+0x14d/0x210 [ 388.202410] ? SyS_read+0x210/0x210 [ 388.206035] ? SyS_clock_settime+0x1a0/0x1a0 [ 388.210452] ? do_syscall_64+0x4c/0x640 [ 388.214431] ? sys_vfork+0x20/0x20 [ 388.218087] do_syscall_64+0x1d5/0x640 [ 388.221975] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.227277] RIP: 0033:0x45c4a9 [ 388.230461] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 388.238167] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 388.245441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 388.252729] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.260016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 388.267294] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000033 04:44:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 04:44:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:57 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:57 executing program 1 (fault-call:1 fault-nth:52): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 04:44:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 388.532854] FAULT_INJECTION: forcing a failure. [ 388.532854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:44:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 388.655593] CPU: 1 PID: 25703 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 388.663811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.673173] Call Trace: [ 388.675777] dump_stack+0x13e/0x194 [ 388.679418] should_fail.cold+0x10a/0x14b [ 388.684009] __alloc_pages_nodemask+0x1bf/0x700 [ 388.688677] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 388.693686] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 388.699144] ? __alloc_pages_nodemask+0x5e0/0x700 [ 388.703991] alloc_pages_current+0xe7/0x1e0 [ 388.708304] __get_free_pages+0xb/0x40 [ 388.712180] selinux_sb_copy_data+0x28/0x380 [ 388.716579] security_sb_copy_data+0x6e/0xa0 [ 388.720976] mount_fs+0x1e7/0x2a0 [ 388.724420] vfs_kern_mount.part.0+0x5b/0x3c0 [ 388.728898] ? kmem_cache_alloc+0x604/0x770 [ 388.733207] kern_mount_data+0x51/0xb0 [ 388.737082] pid_ns_prepare_proc+0x1a/0x80 [ 388.741304] alloc_pid+0x9be/0xc40 [ 388.744845] copy_process.part.0+0x272f/0x6a70 [ 388.749430] ? get_pid_task+0xb8/0x130 [ 388.753318] ? save_trace+0x290/0x290 [ 388.757107] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 388.762037] ? __cleanup_sighand+0x40/0x40 [ 388.766259] ? lock_downgrade+0x6e0/0x6e0 [ 388.770403] _do_fork+0x180/0xc80 [ 388.773873] ? fork_idle+0x270/0x270 [ 388.777575] ? fput+0xb/0x140 [ 388.780698] ? SyS_write+0x14d/0x210 [ 388.784413] ? SyS_read+0x210/0x210 [ 388.788025] ? SyS_clock_settime+0x1a0/0x1a0 [ 388.792433] ? do_syscall_64+0x4c/0x640 [ 388.796531] ? sys_vfork+0x20/0x20 [ 388.800206] do_syscall_64+0x1d5/0x640 04:44:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 388.804101] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 388.809293] RIP: 0033:0x45c4a9 [ 388.812480] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 388.820202] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 388.827462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 388.834723] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 388.841981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 388.849239] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000034 04:44:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:57 executing program 1 (fault-call:1 fault-nth:53): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) [ 389.013697] FAULT_INJECTION: forcing a failure. [ 389.013697] name failslab, interval 1, probability 0, space 0, times 0 [ 389.043963] CPU: 1 PID: 25735 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 389.051905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.061272] Call Trace: [ 389.064046] dump_stack+0x13e/0x194 [ 389.067690] should_fail.cold+0x10a/0x14b [ 389.071850] ? proc_get_inode+0x620/0x620 [ 389.076005] should_failslab+0xd6/0x130 [ 389.079989] kmem_cache_alloc_trace+0x2db/0x7b0 [ 389.084664] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 389.090117] ? sget_userns+0x102/0xc30 [ 389.093999] ? rcu_read_lock_sched_held+0x10a/0x130 [ 389.099017] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 389.103849] ? proc_get_inode+0x620/0x620 [ 389.107997] selinux_sb_alloc_security+0x41/0x210 [ 389.112826] security_sb_alloc+0x66/0xa0 [ 389.116887] sget_userns+0x194/0xc30 [ 389.120588] ? get_empty_filp.cold+0x47/0x47 [ 389.124992] ? set_anon_super+0x20/0x20 [ 389.128963] ? proc_get_inode+0x620/0x620 [ 389.133094] mount_ns+0x65/0x180 [ 389.136451] mount_fs+0x92/0x2a0 [ 389.139806] vfs_kern_mount.part.0+0x5b/0x3c0 [ 389.144293] ? kmem_cache_alloc+0x604/0x770 [ 389.148601] kern_mount_data+0x51/0xb0 [ 389.152536] pid_ns_prepare_proc+0x1a/0x80 [ 389.156757] alloc_pid+0x9be/0xc40 [ 389.160295] copy_process.part.0+0x272f/0x6a70 [ 389.164869] ? get_pid_task+0xb8/0x130 [ 389.168746] ? save_trace+0x290/0x290 [ 389.172535] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 389.177459] ? __cleanup_sighand+0x40/0x40 [ 389.181679] ? lock_downgrade+0x6e0/0x6e0 [ 389.185837] _do_fork+0x180/0xc80 [ 389.189289] ? fork_idle+0x270/0x270 [ 389.192990] ? fput+0xb/0x140 [ 389.196099] ? SyS_write+0x14d/0x210 [ 389.199807] ? SyS_read+0x210/0x210 [ 389.203443] ? SyS_clock_settime+0x1a0/0x1a0 [ 389.207861] ? do_syscall_64+0x4c/0x640 [ 389.211838] ? sys_vfork+0x20/0x20 [ 389.215492] do_syscall_64+0x1d5/0x640 [ 389.219395] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.224596] RIP: 0033:0x45c4a9 [ 389.227788] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 389.235493] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 389.242759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 389.250041] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.257315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 04:44:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0xedc0) 04:44:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 389.264572] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000035 04:44:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:58 executing program 1 (fault-call:1 fault-nth:54): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) [ 389.600367] FAULT_INJECTION: forcing a failure. [ 389.600367] name failslab, interval 1, probability 0, space 0, times 0 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0xedc0) [ 389.664670] CPU: 1 PID: 25770 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 389.672604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.681963] Call Trace: [ 389.684652] dump_stack+0x13e/0x194 [ 389.688302] should_fail.cold+0x10a/0x14b [ 389.692473] should_failslab+0xd6/0x130 [ 389.696459] __kmalloc+0x2e9/0x7c0 [ 389.700008] ? __list_lru_init+0x56/0x650 [ 389.704281] ? __list_lru_init+0x67/0x650 [ 389.708536] __list_lru_init+0x67/0x650 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) [ 389.712525] sget_userns+0x4e4/0xc30 [ 389.716243] ? get_empty_filp.cold+0x47/0x47 [ 389.720666] ? set_anon_super+0x20/0x20 [ 389.724651] ? proc_get_inode+0x620/0x620 [ 389.728808] mount_ns+0x65/0x180 [ 389.732186] mount_fs+0x92/0x2a0 [ 389.735561] vfs_kern_mount.part.0+0x5b/0x3c0 [ 389.740059] ? kmem_cache_alloc+0x604/0x770 [ 389.744393] kern_mount_data+0x51/0xb0 [ 389.748292] pid_ns_prepare_proc+0x1a/0x80 [ 389.752535] alloc_pid+0x9be/0xc40 [ 389.756101] copy_process.part.0+0x272f/0x6a70 [ 389.760695] ? get_pid_task+0xb8/0x130 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) [ 389.764592] ? save_trace+0x290/0x290 [ 389.768399] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 389.773349] ? __cleanup_sighand+0x40/0x40 [ 389.777602] ? lock_downgrade+0x6e0/0x6e0 [ 389.781767] _do_fork+0x180/0xc80 [ 389.785228] ? fork_idle+0x270/0x270 [ 389.788944] ? fput+0xb/0x140 [ 389.792061] ? SyS_write+0x14d/0x210 [ 389.795775] ? SyS_read+0x210/0x210 [ 389.799411] ? SyS_clock_settime+0x1a0/0x1a0 [ 389.803826] ? do_syscall_64+0x4c/0x640 [ 389.807811] ? sys_vfork+0x20/0x20 [ 389.811361] do_syscall_64+0x1d5/0x640 [ 389.815259] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 389.820452] RIP: 0033:0x45c4a9 [ 389.823639] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 389.831696] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 389.838972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 389.846242] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 389.853529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 389.860801] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000036 04:44:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:44:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x0) 04:44:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:58 executing program 1 (fault-call:1 fault-nth:55): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) [ 390.015251] FAULT_INJECTION: forcing a failure. [ 390.015251] name failslab, interval 1, probability 0, space 0, times 0 [ 390.031887] CPU: 1 PID: 25804 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 390.039817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.049179] Call Trace: [ 390.051779] dump_stack+0x13e/0x194 [ 390.055420] should_fail.cold+0x10a/0x14b [ 390.059580] should_failslab+0xd6/0x130 [ 390.063564] __kmalloc+0x2e9/0x7c0 [ 390.067194] ? __list_lru_init+0x56/0x650 [ 390.071336] ? __list_lru_init+0x67/0x650 [ 390.075475] __list_lru_init+0x67/0x650 [ 390.079438] sget_userns+0x504/0xc30 [ 390.083299] ? get_empty_filp.cold+0x47/0x47 [ 390.087739] ? set_anon_super+0x20/0x20 [ 390.091708] ? proc_get_inode+0x620/0x620 [ 390.095890] mount_ns+0x65/0x180 [ 390.099265] mount_fs+0x92/0x2a0 [ 390.102639] vfs_kern_mount.part.0+0x5b/0x3c0 [ 390.107177] ? kmem_cache_alloc+0x604/0x770 [ 390.111498] kern_mount_data+0x51/0xb0 [ 390.115374] pid_ns_prepare_proc+0x1a/0x80 [ 390.119676] alloc_pid+0x9be/0xc40 [ 390.123254] copy_process.part.0+0x272f/0x6a70 [ 390.127828] ? get_pid_task+0xb8/0x130 [ 390.131700] ? save_trace+0x290/0x290 [ 390.135485] ? __lock_is_held+0xad/0x140 [ 390.139543] ? __cleanup_sighand+0x40/0x40 [ 390.143767] ? lock_downgrade+0x6e0/0x6e0 [ 390.148045] _do_fork+0x180/0xc80 [ 390.151507] ? fork_idle+0x270/0x270 [ 390.155214] ? fput+0xb/0x140 [ 390.158309] ? SyS_write+0x14d/0x210 [ 390.162024] ? SyS_read+0x210/0x210 [ 390.165640] ? SyS_clock_settime+0x1a0/0x1a0 [ 390.170065] ? do_syscall_64+0x4c/0x640 [ 390.174025] ? sys_vfork+0x20/0x20 [ 390.177554] do_syscall_64+0x1d5/0x640 [ 390.181448] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.186717] RIP: 0033:0x45c4a9 [ 390.189907] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 390.197613] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 390.204871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 04:44:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) 04:44:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 390.212126] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.219386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 390.226646] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000037 04:44:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 04:44:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:59 executing program 1 (fault-call:1 fault-nth:56): perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20268100, 0x0, 0x0, 0x0, 0x0) 04:44:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) [ 390.436271] FAULT_INJECTION: forcing a failure. [ 390.436271] name failslab, interval 1, probability 0, space 0, times 0 [ 390.459655] CPU: 1 PID: 25830 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 390.467678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.477027] Call Trace: [ 390.479620] dump_stack+0x13e/0x194 [ 390.483245] should_fail.cold+0x10a/0x14b [ 390.487399] should_failslab+0xd6/0x130 [ 390.491379] __kmalloc+0x2e9/0x7c0 [ 390.494913] ? register_shrinker+0xb8/0x210 [ 390.499521] ? lock_downgrade+0x6e0/0x6e0 [ 390.503676] register_shrinker+0xb8/0x210 [ 390.507824] sget_userns+0x9c5/0xc30 [ 390.511585] ? get_empty_filp.cold+0x47/0x47 [ 390.515998] ? set_anon_super+0x20/0x20 [ 390.519966] ? proc_get_inode+0x620/0x620 [ 390.524108] mount_ns+0x65/0x180 [ 390.527481] mount_fs+0x92/0x2a0 [ 390.530847] vfs_kern_mount.part.0+0x5b/0x3c0 [ 390.535351] ? kmem_cache_alloc+0x604/0x770 [ 390.539677] kern_mount_data+0x51/0xb0 [ 390.543569] pid_ns_prepare_proc+0x1a/0x80 [ 390.547797] alloc_pid+0x9be/0xc40 [ 390.551342] copy_process.part.0+0x272f/0x6a70 [ 390.556129] ? get_pid_task+0xb8/0x130 [ 390.560265] ? save_trace+0x290/0x290 [ 390.564081] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 390.569011] ? __cleanup_sighand+0x40/0x40 [ 390.573250] ? lock_downgrade+0x6e0/0x6e0 [ 390.577406] _do_fork+0x180/0xc80 [ 390.580852] ? fork_idle+0x270/0x270 [ 390.584554] ? fput+0xb/0x140 [ 390.587784] ? SyS_write+0x14d/0x210 [ 390.591496] ? SyS_read+0x210/0x210 [ 390.595116] ? SyS_clock_settime+0x1a0/0x1a0 [ 390.599668] ? do_syscall_64+0x4c/0x640 [ 390.603640] ? sys_vfork+0x20/0x20 [ 390.607179] do_syscall_64+0x1d5/0x640 [ 390.611068] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.616250] RIP: 0033:0x45c4a9 [ 390.619436] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 390.627127] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 04:44:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) [ 390.634384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 390.641768] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.649024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 390.656282] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000038 [ 390.714848] ================================================================== [ 390.722491] BUG: KASAN: use-after-free in put_pid_ns+0x75/0x80 [ 390.728469] Read of size 8 at addr ffff88805aee52d0 by task syz-executor.1/25830 [ 390.736006] [ 390.737642] CPU: 1 PID: 25830 Comm: syz-executor.1 Not tainted 4.14.172-syzkaller #0 [ 390.745522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.754866] Call Trace: [ 390.757446] dump_stack+0x13e/0x194 [ 390.761070] ? put_pid_ns+0x75/0x80 [ 390.764733] print_address_description.cold+0x7c/0x1e2 [ 390.770024] ? put_pid_ns+0x75/0x80 [ 390.773659] kasan_report.cold+0xa9/0x2ae [ 390.777827] put_pid_ns+0x75/0x80 [ 390.781416] free_nsproxy+0xf7/0x1f0 [ 390.785121] switch_task_namespaces+0x8f/0xb0 [ 390.789608] copy_process.part.0+0x3c67/0x6a70 [ 390.794292] ? get_pid_task+0xb8/0x130 [ 390.798182] ? save_trace+0x290/0x290 [ 390.802002] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 390.806939] ? __cleanup_sighand+0x40/0x40 [ 390.811181] ? lock_downgrade+0x6e0/0x6e0 [ 390.815341] _do_fork+0x180/0xc80 [ 390.818797] ? fork_idle+0x270/0x270 [ 390.822527] ? fput+0xb/0x140 [ 390.825624] ? SyS_write+0x14d/0x210 [ 390.829331] ? SyS_read+0x210/0x210 [ 390.832947] ? SyS_clock_settime+0x1a0/0x1a0 [ 390.837345] ? do_syscall_64+0x4c/0x640 [ 390.841426] ? sys_vfork+0x20/0x20 [ 390.844958] do_syscall_64+0x1d5/0x640 [ 390.848843] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.854043] RIP: 0033:0x45c4a9 [ 390.857246] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 390.864961] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 390.872224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 390.879944] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 390.887327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 390.894587] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000038 [ 390.901882] [ 390.903509] Allocated by task 25830: [ 390.907219] save_stack+0x32/0xa0 [ 390.910666] kasan_kmalloc+0xbf/0xe0 [ 390.914379] kmem_cache_alloc+0x127/0x770 [ 390.918537] copy_pid_ns+0x1b2/0xa70 [ 390.922259] create_new_namespaces+0x25f/0x730 [ 390.926841] copy_namespaces+0x27b/0x310 [ 390.930905] copy_process.part.0+0x2603/0x6a70 [ 390.935476] _do_fork+0x180/0xc80 [ 390.938935] do_syscall_64+0x1d5/0x640 [ 390.942843] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 390.948019] [ 390.949644] Freed by task 17: [ 390.952741] save_stack+0x32/0xa0 [ 390.956199] kasan_slab_free+0x75/0xc0 [ 390.960222] kmem_cache_free+0x7c/0x2b0 [ 390.964289] rcu_process_callbacks+0x792/0x1190 [ 390.968963] __do_softirq+0x254/0x9bf [ 390.972831] [ 390.974548] The buggy address belongs to the object at ffff88805aee4a98 [ 390.974548] which belongs to the cache pid_namespace of size 2264 [ 390.987466] The buggy address is located 2104 bytes inside of [ 390.987466] 2264-byte region [ffff88805aee4a98, ffff88805aee5370) [ 390.999515] The buggy address belongs to the page: [ 391.004436] page:ffffea00016bb900 count:1 mapcount:0 mapping:ffff88805aee4140 index:0x0 compound_mapcount: 0 [ 391.014412] flags: 0xfffe0000008100(slab|head) [ 391.019004] raw: 00fffe0000008100 ffff88805aee4140 0000000000000000 0000000100000003 [ 391.026890] raw: ffffea00016db8a0 ffffea0000fb91a0 ffff8880a6fa7b40 0000000000000000 [ 391.034766] page dumped because: kasan: bad access detected [ 391.040484] [ 391.042104] Memory state around the buggy address: [ 391.047035] ffff88805aee5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 391.054545] ffff88805aee5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 04:44:59 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x0, 0x8000003}, 0x20) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0xedc0) 04:44:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 04:45:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) [ 391.062046] >ffff88805aee5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 391.069397] ^ [ 391.075364] ffff88805aee5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 391.082873] ffff88805aee5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc 00 00 [ 391.090238] ================================================================== [ 391.097721] Disabling lock debugging due to kernel taint [ 391.154307] Kernel panic - not syncing: panic_on_warn set ... [ 391.154307] [ 391.161723] CPU: 1 PID: 25830 Comm: syz-executor.1 Tainted: G B 4.14.172-syzkaller #0 [ 391.170821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.180375] Call Trace: [ 391.182970] dump_stack+0x13e/0x194 [ 391.186603] panic+0x1f9/0x42d [ 391.189798] ? add_taint.cold+0x16/0x16 [ 391.193769] ? preempt_schedule_common+0x4a/0xc0 [ 391.198751] ? put_pid_ns+0x75/0x80 [ 391.202363] ? ___preempt_schedule+0x16/0x18 [ 391.206857] ? put_pid_ns+0x75/0x80 [ 391.210471] kasan_end_report+0x43/0x49 [ 391.214436] kasan_report.cold+0x12f/0x2ae [ 391.218772] put_pid_ns+0x75/0x80 [ 391.222209] free_nsproxy+0xf7/0x1f0 [ 391.225912] switch_task_namespaces+0x8f/0xb0 [ 391.230392] copy_process.part.0+0x3c67/0x6a70 [ 391.234960] ? get_pid_task+0xb8/0x130 [ 391.238842] ? save_trace+0x290/0x290 [ 391.242635] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 391.247549] ? __cleanup_sighand+0x40/0x40 [ 391.251929] ? lock_downgrade+0x6e0/0x6e0 [ 391.256065] _do_fork+0x180/0xc80 [ 391.259504] ? fork_idle+0x270/0x270 [ 391.263274] ? fput+0xb/0x140 [ 391.266366] ? SyS_write+0x14d/0x210 [ 391.270113] ? SyS_read+0x210/0x210 [ 391.273723] ? SyS_clock_settime+0x1a0/0x1a0 [ 391.278113] ? do_syscall_64+0x4c/0x640 [ 391.282070] ? sys_vfork+0x20/0x20 [ 391.285604] do_syscall_64+0x1d5/0x640 [ 391.289503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 391.294672] RIP: 0033:0x45c4a9 [ 391.297840] RSP: 002b:00007fdac171ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 391.309971] RAX: ffffffffffffffda RBX: 00007fdac171f6d4 RCX: 000000000045c4a9 [ 391.317232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020268100 [ 391.324516] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 391.331823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 391.339194] R13: 0000000000000074 R14: 00000000004c2d52 R15: 0000000000000038 [ 391.348056] Kernel Offset: disabled [ 391.351701] Rebooting in 86400 seconds..