}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 10:42:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x73d, @local, 0x7}, {0xa, 0x4e24, 0xd7, @rand_addr="c54e47e2aa3f8e9f818c04b966b3cd94", 0xa0}, 0xe4ca, [0x1000, 0x80, 0x4, 0x1, 0x40, 0x3, 0x80, 0xbee]}, 0x5c) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:42:57 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, 0x0, 0x0, 0x800000000002) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000000)={0x35, 0x9a}) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:42:57 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x78738a2f5d29293e}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:42:59 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:42:59 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x78738a2f5d29293e}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:42:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000040)={0xffff, 0x7, 0x401, 0x1, 0x6}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x424a01, 0x0) sendmmsg$alg(r4, &(0x7f0000001700)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="94139a7545ae28954fb2c968206280e2e9e1a66c5c21c4b17ceb75802677b2d10cb3677c52017e615dbda6d0b8c9a0646bc2ce1d7a274ff0", 0x38}, {&(0x7f0000000240)="20ac79e4565e305e239512d01b48475275e46aaaa188fac527997e40f237aba07c7511fe5799858088721e1fa30cd0f7db3d70313a53c248f6900c04ebb3205d29b2c1", 0x43}, {&(0x7f00000002c0)="fac21ae4743ef13eb63ff43fb0c55f2b575b7955d18207c777b1f886da9c178633689a6bacf942c2b23760d7dc178b3ace65c238afed156f6ada11212deb8058aaf965671595bf362a6fe081c6e7804353dd908ccee2975824bf0db339d193bb", 0x60}, {&(0x7f0000000340)="d141f0509d8f", 0x6}], 0x4, 0x0, 0x0, 0x4000044}, {0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000003c0)="5c020b01904c26185fc89aba56a05e26b61668b7dc83bd3749f3ed7e14b88bcca5edf473850ba0920721ff1c154af025cb0aedce2b97326d7395faf780d79837a3aceba42a59ebe0b4eef5bcba7d36b9f77ec31724d053064b9bbf630dd73a13af56771655da1edf1baad03482c6f3077b0be6708380e0850d6e55a94400657f1ebf92c7b1d74ee94f1d46e9a3e38b2a8ab474b68e4688d75c07ac4a0c071c8084707dcb85aa391ec1332795ab6cb5af92f952abb2b2e438f29f", 0xba}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="7538c550e9a13de2ccfb573c77b527c4d49be5eaee03248af5f7f1e8f9bf4db4f4120121d30f597998de146e74918c989b3eefc27ed65ee89aba49e97f617ab7ceadec29c1939a86ce15ac2a2ca705eda01e5252481b60f44df7ef761ff978b8a366bd12081d2b4687cef4dc142748c850899e2169f864f158c3d9c16da57a13bf870eb1931aad205d8849769e1394902e4095b8832b9773437511292a42a233b51a745f797069f571cd0822961d023c10f134", 0xb3}], 0x3, &(0x7f0000001580)=[@iv={0x80, 0x117, 0x2, 0x68, "c2916fd6386f1d501c18a17f8fdbe36b0a815246e65f5f524c8458e366b8e017683decd40f63ea647f33f8181a2ceb644bdfd23378d42df5d2825d367cec78c51e0a97ca0a29cd89a64ea1442146d740a3bee061e455ef7689b7618c887863ec4ce67235d89ffe23"}, @assoc={0x18, 0x117, 0x4, 0x8001}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x68, 0x117, 0x2, 0x4f, "dfdc4f90989f0e67d957c19a056dd87b1c216d1b62e4d3050f72615a56e1ceb521f8249b334d3ac146217af4a61b27b831a5bce5874437c9c6565ecbf0c7e8b272a926a3e7ee54f6f8a0ec4bc5440f"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x160, 0x29}], 0x2, 0x40) 10:42:59 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:42:59 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r11, 0x0, 0x0, 0x800000000002) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000100)=0x0) prlimit64(r12, 0x0, 0x0, &(0x7f00000001c0)) 10:42:59 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:00 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:00 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:00 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:00 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x880) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000001c0)=0x6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2804a040}, 0x4852) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:00 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getaffinity(0xffffffffffffffff, 0x2b8, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000036c0), 0x12) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000002c0)={r2, &(0x7f0000000200)=""/188}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r2, 0x1}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) [ 570.732940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=28292 comm=syz-executor.5 10:43:00 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, 0x0, 0x0, 0x800000000002) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000000)) 10:43:02 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:02 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) recvmmsg(r0, &(0x7f0000003140), 0x400007a, 0x8000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) socket$inet6(0xa, 0x5, 0x7) 10:43:02 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_writev(r9, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x4, 0x0) 10:43:03 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:03 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r11, 0x0, 0x0, 0x800000000002) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000100)) 10:43:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syncfs(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x9) r3 = socket$packet(0x11, 0x0, 0x300) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), &(0x7f00000002c0)=0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) socket(0xd, 0xdd33c10dd247377a, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, 0x0, 0xedc0) 10:43:03 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc}) 10:43:03 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2902) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}, 0x1}}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1000) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r3, &(0x7f00000017c0), 0x33d, 0x4000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000100)) 10:43:03 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r11, 0x0, 0x0, 0x800000000002) 10:43:03 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:06 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:06 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) sysinfo(&(0x7f0000000040)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc}) 10:43:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10200000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 10:43:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:06 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 10:43:06 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000001c00)={0x0, 0x0, 0x0, [], 0x0}) 10:43:06 executing program 5: 10:43:06 executing program 3: 10:43:06 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:06 executing program 5: 10:43:06 executing program 3: 10:43:09 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:09 executing program 5: 10:43:09 executing program 3: 10:43:09 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000040)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:09 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) 10:43:09 executing program 5: 10:43:09 executing program 3: 10:43:09 executing program 5: 10:43:09 executing program 3: 10:43:09 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:09 executing program 5: 10:43:12 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:12 executing program 3: 10:43:12 executing program 5: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000140)='g', 0x1}]) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) 10:43:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) 10:43:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:12 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:12 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000140)='g', 0x1}]) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) 10:43:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) 10:43:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) [ 582.705551] audit: type=1804 audit(1571913792.314:995): pid=28446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/" dev="sda1" ino=2333 res=1 [ 582.758339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=28446 comm=syz-executor.3 [ 582.779169] audit: type=1804 audit(1571913792.364:996): pid=28434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/" dev="sda1" ino=2333 res=1 10:43:12 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000fc8000000800010075333200580002005400050000000000000000000000000000000000400006003000010000000000000019000000000000000000000000000000000000000000000000001300000000000000f8fbac32c9712b8c22e1e9d77ba189c7460999d8f31a44af4c7a938966d5e87d55e05dae3332c116fa93f45e2ed1edb0c997709ac6c6"], 0x84}}, 0x0) 10:43:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/192, 0xc0}], 0x1, 0x0) 10:43:13 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:13 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f"], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x200000000000}) 10:43:13 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000010000001d09"], 0x0) syz_genetlink_get_family_id$fou(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x3, 0x1, 0x0, r2, &(0x7f0000000140)='g', 0x1}]) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) 10:43:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB='}\x00'/119]) 10:43:13 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r9, 0x0) ioprio_get$uid(0x3, r9) 10:43:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) [ 583.499947] audit: type=1804 audit(1571913793.104:997): pid=28477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/" dev="sda1" ino=2333 res=1 10:43:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000010000af00000", @ANYRES32, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) 10:43:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x10) 10:43:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000dc2cb92810904fa9e5f21301ce646ba1a30a78d3abdf1e15"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="2e360f2b99dc00660f71e0ff0f01c80fe0b41e002e0f01cb0f01cfba4000b860bdef0f58bd00000f01b100000f0118", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@initdev}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x0) bind(r8, &(0x7f0000000000)=@hci={0x1f, 0x0, 0x3}, 0x80) 10:43:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:13 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:13 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x10) 10:43:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x208000, 0x0) r3 = dup(r2) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) ioctl$KDADDIO(r3, 0x4b34, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:13 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r9, 0x0) 10:43:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x10) 10:43:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'nr0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x0) 10:43:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 10:43:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x10) 10:43:14 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x36, &(0x7f00000001c0)=0x2, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x2283, &(0x7f0000000200)=ANY=[@ANYBLOB="7d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b18808005f4a86bcdd3e7744351b8a738f0c81"]) 10:43:14 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:14 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x20ff0cdc) 10:43:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x28, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000966fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 10:43:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) 10:43:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 10:43:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 3: socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x12923d3d4486cd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32, @ANYBLOB="000000000010000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x68) 10:43:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd, 0x1c1cc4) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000240)=0x8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000001c0)=0x14) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB="7d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aac6d1"]) [ 586.121184] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 586.229437] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:15 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)) 10:43:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 10:43:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x9ed541) msgget(0x2, 0x15a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x4a540) ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, 0x9e}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f0000000200)=0x6, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000240)=0xf3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r10 = accept(0xffffffffffffffff, &(0x7f0000000380)=@nl=@unspec, &(0x7f0000000400)=0x80) ioctl$SIOCX25SCALLUSERDATA(r10, 0x89e5, &(0x7f0000000440)={0x20, "2a431820c86651bcfc1f9f7e053a31e33438d6357d149ccfb389a9f02e2b159a6002ead508d2acaec1f55c4beb349613022ba819d7eb8e2bbfb462dff14f31d02cc6966a5379fac99320ecd39160225e6e36ce0b1316b113b948e53ae2c0f715188df2b4367445f10612e038df5d67bdd7c651e45cbaf1768bcf016179c1b538"}) listen(r9, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB="042cde270ed569f7954c0685bb8be57a63d8197ca86aa4c79d6a103b538010bf4975c97415a4d91d53e3f00755", @ANYRES16=r4, @ANYRESOCT]) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xd44, @remote, 0x521c}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e22, 0x11, @rand_addr="6ad4e8442e4a18f4f35e729c43c8693e", 0x5f48}, @in={0x2, 0x4e23, @local}], 0x84) 10:43:15 executing program 3: socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x12923d3d4486cd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32, @ANYBLOB="000000000010000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x68) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) openat$cgroup(r3, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r4 = dup(r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept$unix(r6, &(0x7f00000002c0), &(0x7f00000003c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff000000800c003950323030302e75"], 0x15) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000400)=ANY=[@ANYBLOB="7d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040065e70000000000000000000000000000000000000000000000000000000000000000000000da584ee4d92fd42606d8c29920a0ee618b3c4766a701cb04560141d8eb7b90f2b2b607972eca66fec6fdd2cc970a55fb95fa39efecfabff51f884a006814e1b18ed083340f370e5e0605fba07f0764bf4aea1206257f22a6c6f394fc9c3e990c6140b0145bb94d103363d85f2c7c8661dd391d7d6cab3f0231bbd69acfb2d0b476652bc73bd66d928ec1b26e1e0aa38c2a9ebb00704d56c8c84ba42dc92432fdb8dc5627a4096d78ff062b6f4be1e8ce20c923a88e6494e01ff399bb1a558096cf0a782822f3f22ab9a0a96e39000800000100"/349]) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x8000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000240)={0x2b6, &(0x7f0000000340)}) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) 10:43:16 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) 10:43:16 executing program 3: socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x12923d3d4486cd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32, @ANYBLOB="000000000010000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x68) 10:43:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x7ff, 0x400280) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="345515e863df76836f0aaf0d7af327c71893cf64d76729fa102e9a6851dcd0755349d827ef17cc09dcdce87714ec985f267cdbb0c7262f755af1537faf4293e764d908d513dad8650c660ca1f462c806f0203a85dc2770f0723604fa3dc600da74c77eebc0ba74e3984ccdea7e20a755919931446b01e733de9dcfd021c1663aad6f6b47f1ef8bfa01e220d88253763e6d347a7a5d20040abfefb744e8ff2fd41e51515d9cf602672835210767c03d7de2db9888238c19756d466d28a7ad7415d49e038ec4312ec4272cafc1b284ad6af9da", @ANYRESHEX, @ANYRESHEX, @ANYRES16=r6], 0xffffffffffffffb1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000200)=ANY=[@ANYBLOB="7d000000000000000000000000000000000000000000000000000000000000000000000000000000d7a5d3727a7f17330700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3439cc00000000000000000000000000000000000000000000000000000000000000000000331473b10000000000000000"]) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) 10:43:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, 0x0, 0x0, 0x800000000002) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x7530}, 0x4, 0x9, 0xba}, {{}, 0x0, 0xfffc, 0x8}, {{r1, r2/1000+30000}, 0x11, 0x7, 0x8}, {{}, 0x0, 0x96, 0x1}], 0x60) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) [ 587.386672] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) 10:43:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:17 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:17 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r6, r7) 10:43:17 executing program 3: socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x12923d3d4486cd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32, @ANYBLOB="000000000010000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x68) 10:43:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0xa, 0x3, 0x8, "e4e880ec0d12923921f5efcb44cf5a6314f16239301d805e1f9c70bf165d6134989fc992d83fb3ab25493452640322db411580b0edd908102e5fcbf96797b145", "cf1447e06b63ec65d573b3fe3a9d7f80e3f9d16699ad975b3c199594ee45d1c39d2f86d1788fcdf65f06d04e2c081aad6a619911961372109745f244f2861b98", "8c5a56bc5c9578a2bffa028c45f5ae133e1daa9a54e9a8c402a060f1e6d16b29", [0x1af, 0x2]}) r6 = dup(r3) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000240)=""/97, 0x61}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000003c0), &(0x7f0000000400)=0x10) 10:43:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 588.247133] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:17 executing program 3: socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2, 0x0, 0x0, 0x12923d3d4486cd92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002a001fff00"/20, @ANYRES32, @ANYBLOB="000000000010000000000000"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x8, @loopback, 0x8000}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x68) 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 588.584005] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:18 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) socket(0x10, 0x803, 0x0) 10:43:18 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000004240), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r7 = memfd_create(&(0x7f0000000200)='mime_typevmnet1em1cgroupeth1wlan1\x00', 0x0) ftruncate(r7, 0x1000000) sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef) accept4$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14, 0x800) r9 = syz_open_dev$vbi(0x0, 0x1, 0x2) r10 = memfd_create(&(0x7f0000000200)='mime_typevmnet1em1cgroupeth1wlan1\x00', 0x0) ftruncate(r10, 0x1000000) sendfile(r9, r10, &(0x7f00000000c0)=0xf18001, 0xeefffdef) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x90, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x64, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x9}, @tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e20}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x8, 0x12, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1004}, @IFLA_IPTUN_LINK={0x8, 0x2, r8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x39}]}}}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x3}}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000080001006868660003"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@ipv4={[], [], @rand_addr=0x9}}, 0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x800) getegid() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x80000040) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 10:43:18 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$link(0x8, r6, 0x0) 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) setsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000400)="c4f2e8b676b4ce6113f812429e8e98d7a628742179c597ae1d12d7aafd83cd654def7de697c553c0a559c33def505601af5d272e43d09d37969b1f0a2e62909c06409c264dae57a3d394f0d63df984de4c0e67f2e6db33a1fe294cf0cdd3959fc42ce6b1704850aca639c4c2a4ed2673e79d08f6559fc6703aa77cc119d37589176d4302fd2984b5c33bc0c8236b7087cfeff1d9896f5ee6bf34ade07a55252ccc99d95c370bf22bff51f344be66cb07f7ba22c4ebd3eb7e238dbbaced01a3f97733d82f54e10465ddcd6b32484a2f6994fe01b8c892d7318186ba2f63e362925a800e", 0xe3) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYPTR], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="867370ec6cff760388e5330987355d7bd632804aec76fe77fe8b4d71eb89a926af4fbe41d588e8350c08f1330317a0a39314aeb00603f7e6ab91280d6cae804d185d689c79b3ffad4e220a8691e8ad000684988b1b08340446df3e24782a75be87", @ANYRESHEX, @ANYBLOB="28af497513c4f215beea18d15aa02488f832734bb5847e4b92c4b89c7c7acac8fc199a3ee9f6cf7a247b723aaec819d78955288ef3c8024fb4635cfffb871dd32f39ee07d6724435202a965e5be5781875d3b416d908f0ba9a973061e21434a7dcd5d6fbdc39d1b9b2afc39c4796c0fb99c6868796a88c9c8a8b93ec176c039263ed4bb83600d579b4d7bebd1c013d67d69c", @ANYRESDEC], @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64=r5, @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r9, @ANYPTR, @ANYRESDEC=0x0, @ANYRES32=r6, @ANYRESDEC=r7, @ANYPTR]], @ANYRES16=r8], 0x12) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 589.097360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) 10:43:19 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) 10:43:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() 10:43:19 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000004240), 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r7 = memfd_create(&(0x7f0000000200)='mime_typevmnet1em1cgroupeth1wlan1\x00', 0x0) ftruncate(r7, 0x1000000) sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef) accept4$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14, 0x800) r9 = syz_open_dev$vbi(0x0, 0x1, 0x2) r10 = memfd_create(&(0x7f0000000200)='mime_typevmnet1em1cgroupeth1wlan1\x00', 0x0) ftruncate(r10, 0x1000000) sendfile(r9, r10, &(0x7f00000000c0)=0xf18001, 0xeefffdef) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x90, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x70, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x64, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x9}, @tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x8, 0x11, 0x4e20}, @IFLA_IPTUN_TOS={0x8, 0x5, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x8, 0x12, 0x4e22}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1004}, @IFLA_IPTUN_LINK={0x8, 0x2, r8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x39}]}}}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x3}}]}, 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000ffff00000000080001006868660003"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000340)={@ipv4={[], [], @rand_addr=0x9}}, 0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x800) getegid() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x80000040) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 10:43:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6fcd, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) fcntl$getown(r6, 0x9) 10:43:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) 10:43:19 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$link(0x8, r6, 0x0) 10:43:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 589.771900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) 10:43:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, 0x0, 0x0, 0x0) 10:43:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x80000001, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, 0x0, 0x0, 0x0) [ 590.044389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 10:43:20 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 10:43:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, 0x0, 0x0, 0x0) 10:43:20 executing program 3: 10:43:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r3, 0x0, 0x0, 0x800000000002) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000001c0)={0x8000000, 0x1ff, 0x5, 0x2, 0x0, 0x5}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r4, 0x0, 0x0, 0x800000000002) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r5, 0x0, 0x0, 0x800000000002) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) signalfd(r6, &(0x7f0000000200)={0x8}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:20 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 10:43:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 10:43:20 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$link(0x8, r6, 0x0) 10:43:20 executing program 3: 10:43:20 executing program 3: 10:43:20 executing program 3: 10:43:20 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 10:43:20 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:20 executing program 3: 10:43:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) 10:43:20 executing program 4: 10:43:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/\x03sg#\x00', 0x2, 0x21cf00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f00000001c0)=ANY=[@ANYBLOB="7d0000000000000000000005000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d61d8e42cf005dd26bf5be5256f86707239f1c725c6ea1469f0011f5df01c7df3a7279bbae7fa4507e1399"]) 10:43:20 executing program 4: 10:43:20 executing program 3: 10:43:21 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r6, r7) 10:43:21 executing program 3: 10:43:21 executing program 4: 10:43:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:21 executing program 4: 10:43:21 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:21 executing program 3: 10:43:21 executing program 4: 10:43:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\x92\f\x8a&\xed\xa4k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') ioctl$FIBMAP(r4, 0x1, &(0x7f0000000200)=0xfffffc00) pread64(r5, 0x0, 0x0, 0x800000000002) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000040)) 10:43:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:21 executing program 4: 10:43:21 executing program 3: 10:43:22 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:22 executing program 5: clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:22 executing program 4: 10:43:22 executing program 3: 10:43:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB='}\x00'/129]) 10:43:22 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:22 executing program 4: 10:43:22 executing program 3: 10:43:22 executing program 5: clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000000000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=r4, @ANYBLOB="040004000000000008000700", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="10000000f3eccaac88b7af0bc9a7000000002000008f6ca9cc00"], 0x3c, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$rose(r7, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) write$apparmor_current(r3, &(0x7f0000000540)=@hat={'permhat ', 0x4, 0x5e, ['stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 'system.posix_acl_access\x00', 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 'system\\trustedwlan1@\x00', '\x00', '.\x00', '\x00', 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00']}, 0x16c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) eventfd2(0x1f5, 0x39ac842ab29f117b) ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000000380)={0x327, 0x0, 0x3, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000100)={0x6666666666669dd, 0x0, [{0x80000000, 0x1, 0xb, 0x9, 0x700000, 0x0, 0xfffffe00}, {0x1, 0x1, 0x8, 0xfffeffff, 0x2e8a2d7d, 0x7, 0x2}]}) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000400)=ANY=[@ANYBLOB="7d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea6e2d9d811f"]) 10:43:22 executing program 5: clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:22 executing program 3: 10:43:22 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:22 executing program 4: 10:43:22 executing program 3: 10:43:22 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:23 executing program 3: 10:43:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:23 executing program 4: 10:43:23 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='st\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12\xe9\x11\x93Q0I\xf81UQ\f\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xa5`\x8a\xaf\xf0\x1e\x15\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D7k\xcc\xf5>\x82\f\x93\x82#[(\xd1\xc91\xc2\xc7\x8f4@\xece\xcdn}\xe8O$C\xc4\xbc\x13\v%+U\x1fBu\xd5\x0f\xdf\x1fxa?lZH\b\xaaJ-\xe7v\xb3W\xd4mT\xb5\xa8`<)\x9c\xe0\r7\xcdz\xa7c\xe8\xa5\xfb9\x9a+\x1d\x01\xe12\xb4\xb9\xde\x17\xfb', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:23 executing program 3: 10:43:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:23 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:23 executing program 4: 10:43:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:23 executing program 3: 10:43:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000200)) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) 10:43:23 executing program 3: 10:43:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:23 executing program 4: 10:43:24 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:24 executing program 3: 10:43:24 executing program 4: 10:43:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:24 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r6, r7) 10:43:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0x42, 0x80000000, 0x101, "00179260892921f6cae365fcdf0cec6b2201f450f30c3edb5c3a94b30efce5256491594ebfdde019e932a5f6c8f4d3221d8ccc9935ea3ec25aa1f869d813106198fc"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:24 executing program 4: 10:43:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:24 executing program 3: 10:43:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:24 executing program 4: 10:43:24 executing program 3: 10:43:25 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:25 executing program 4: 10:43:25 executing program 3: 10:43:25 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) 10:43:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) recvmsg(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/98, 0x62}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/148, 0x94}, {&(0x7f0000001700)=""/4096, 0x1000}], 0xa}, 0x8000) 10:43:25 executing program 4: 10:43:25 executing program 3: 10:43:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:25 executing program 3: 10:43:25 executing program 4: 10:43:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:25 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:25 executing program 4: 10:43:25 executing program 3: 10:43:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:26 executing program 3: 10:43:26 executing program 4: 10:43:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f00000001c0)=ANY=[@ANYBLOB="7dea0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000df000000000000000000000000000000000000000000000000000000000000000000000000000000000000f605308b201d12448ac7a7232035d7c8562d5d2eabb4"]) 10:43:26 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) 10:43:26 executing program 3: 10:43:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:43:26 executing program 4: 10:43:26 executing program 3: 10:43:26 executing program 4: 10:43:26 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:43:26 executing program 3: 10:43:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200), 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r4, 0x0, 0x0, 0x800000000002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000540)={0x88, 0x401, 0x8, "5303bf751f8759a6551c505466a91fae58ac03ce2e9a10e73cab3f1e72aad2c716dce42e23ea154a2bbf14ed25b31ce8be05340382c1da1160f36530a95e74aef27cb2783e59cb905232570d880e98836a45424cdb80cd09a67ce7993a65efa163d3ee3a04f5e2e0b296bcea4cab2ea8f603a866f38d5d3413d5861e71ceeb6e5adc76632b7ec613"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r6, 0x0, 0x0, 0x800000000002) write$P9_RREADDIR(r6, &(0x7f0000000440)={0xc5, 0x29, 0x2, {0x5, [{{0x3, 0x4}, 0x40, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x4}, 0xa8, 0xcb, 0x7, './file0'}, {{0x8d, 0x4, 0x2}, 0x80000001, 0x52, 0x7, './file0'}, {{0x2, 0x4, 0x7}, 0xace, 0x80, 0x7, './file0'}, {{0xda, 0x1, 0x5}, 0x8, 0x8, 0x7, './file0'}, {{0x20}, 0x8dd, 0x7, 0x7, './file0'}]}}, 0xc5) r7 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB="7d0000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef883987f93d54a373cf64f5c90357000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000"]) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000001c0)=0xffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f0000000240)={0x802b, 0xce3534fd5608e12b}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendto$unix(r11, &(0x7f00000002c0)="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", 0xfc, 0x8000, &(0x7f00000003c0)=@abs={0x2, 0x0, 0x4e21}, 0x6e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @dev={[], 0x1d}, 'bcsh0\x00'}}) 10:43:26 executing program 4: 10:43:26 executing program 3: 10:43:27 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) 10:43:27 executing program 3: 10:43:27 executing program 4: 10:43:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 10:43:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2d787551a8a6d9b2, 0x0) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:27 executing program 4: 10:43:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:27 executing program 3: 10:43:27 executing program 4: 10:43:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r8 = openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0x0) write$binfmt_script(r8, &(0x7f0000002400)=ANY=[@ANYRESDEC=r9, @ANYBLOB="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", @ANYRESHEX=r11], 0x1026) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000001c0)=0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:27 executing program 5: 10:43:27 executing program 3: 10:43:27 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) 10:43:27 executing program 5: 10:43:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)={0x0, 0x5}) 10:43:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x4e21, @multicast2}}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)=ANY=[@ANYBLOB="7d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000001700"/129]) 10:43:27 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:27 executing program 3: 10:43:28 executing program 5: 10:43:28 executing program 4: 10:43:28 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/184, 0xb8}, {&(0x7f0000000b00)=""/57, 0x39}, {&(0x7f0000000b40)=""/143, 0x8f}, {&(0x7f0000002c80)=""/221, 0xdd}, {&(0x7f0000002d80)=""/148, 0x94}], 0x6}, 0x853}], 0x3, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:28 executing program 3: 10:43:28 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:28 executing program 4: 10:43:28 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) 10:43:28 executing program 5: 10:43:28 executing program 3: 10:43:28 executing program 4: 10:43:28 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:28 executing program 3: 10:43:28 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:28 executing program 5: 10:43:28 executing program 4: 10:43:28 executing program 4: 10:43:28 executing program 3: 10:43:29 executing program 5: 10:43:29 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/154, 0x9a}, {&(0x7f0000000680)=""/57, 0x39}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/41, 0x29}, {&(0x7f0000000800)=""/239, 0xef}], 0x8, &(0x7f0000000980)=""/163, 0xa3}, 0xfffffe00}], 0x2, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:29 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) 10:43:29 executing program 4: 10:43:29 executing program 3: 10:43:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x404080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:29 executing program 5: 10:43:29 executing program 4: 10:43:29 executing program 3: 10:43:29 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:29 executing program 3: 10:43:29 executing program 4: 10:43:29 executing program 5: 10:43:29 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:29 executing program 3: 10:43:29 executing program 4: 10:43:29 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}, {r0, 0x6109}], 0x2, 0xffffffff) 10:43:29 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x610000}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 10:43:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xff}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 10:43:30 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 5: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self\x00', 0x8140, 0x0) 10:43:30 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:30 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) 10:43:30 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) 10:43:30 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:30 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, 0x0, 0x0, 0x800000000002) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21}, 0x1c) listen(r3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x80010, r2, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 10:43:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:30 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:30 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:30 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:30 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:31 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:31 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) keyctl$link(0x8, r6, 0x0) 10:43:31 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:31 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:31 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, &(0x7f0000000340)=""/138, 0x8a}, 0x6}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:31 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:31 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:31 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) 10:43:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 10:43:31 executing program 1: r0 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:31 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() 10:43:32 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:43:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) 10:43:32 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/138, 0x8a}, 0x6}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:32 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r6) 10:43:32 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:43:32 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() 10:43:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) 10:43:32 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 10:43:33 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) socket(0x10, 0x803, 0x0) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() 10:43:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 10:43:33 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 10:43:33 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 10:43:33 executing program 1: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) 10:43:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0x0) 10:43:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) socket(0x10, 0x803, 0x0) 10:43:34 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r0, 0x1000000000013) 10:43:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:34 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) 10:43:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) 10:43:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) 10:43:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:35 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(0x0, 0x1000000000013) 10:43:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 10:43:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) 10:43:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:43:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) 10:43:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:35 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x20ff0cdc) 10:43:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) 10:43:35 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r6, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r9, 0x0) ioprio_get$uid(0x3, r9) 10:43:35 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) 10:43:35 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_writev(r9, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x4, 0x0) 10:43:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() pipe(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x2c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x58}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0xa, 0x1, 0x0) 10:43:36 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(0x0, 0x1000000000013) 10:43:36 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_writev(r9, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x4, 0x0) 10:43:36 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) getpid() r0 = socket(0x11, 0x800, 0x2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x3, 0x20, 0x3, 0x20, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x9}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5c}}, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r6, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r8}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r9, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r11}) r12 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r12, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r13, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r14}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000025c0)={'bridge_slave_0\x00', r14}) r15 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r15, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r16, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r17}) r18 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r19 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r18, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r19, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r20}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002600)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000002700)=0xe8) r22 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r23 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r22, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r23, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r24}) r25 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r26 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r25, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r26, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r27}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002740)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000002840)=0xe8) r29 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r30 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r29, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r30, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r31}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'team0\x00', 0x0}) r33 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r34 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r33, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r34, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r35}) r36 = socket$inet6_tcp(0xa, 0x1, 0x0) r37 = dup2(r36, r36) ioctl$PERF_EVENT_IOC_ENABLE(r37, 0x8912, 0x400200) getpeername$packet(r37, &(0x7f00000028c0)={0x11, 0x0, 0x0}, &(0x7f0000002900)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000002a00)={@loopback, @loopback, 0x0}, &(0x7f0000002a40)=0xc) r40 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r41 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r40, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r41, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r42}) r43 = socket$inet6_tcp(0xa, 0x1, 0x0) r44 = dup2(r43, r43) ioctl$PERF_EVENT_IOC_ENABLE(r44, 0x8912, 0x400200) getsockopt$inet_pktinfo(r44, 0x0, 0x8, &(0x7f0000002c00)={0x0, @empty, @empty}, &(0x7f0000002c40)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002c80)={@initdev, 0x0}, &(0x7f0000002cc0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000002d40)=@ipx, 0x80, &(0x7f0000003400)=[{&(0x7f0000002dc0)=""/213, 0xd5}, {&(0x7f0000002ec0)=""/166, 0xa6}, {&(0x7f0000002f80)=""/125, 0x7d}, {&(0x7f0000003000)=""/76, 0x4c}, {&(0x7f0000003080)=""/127, 0x7f}, {&(0x7f0000003100)=""/41, 0x29}, {&(0x7f0000003180)=""/194, 0xc2}, {&(0x7f0000003280)=""/247, 0xf7}, {&(0x7f0000003380)=""/39, 0x27}, {&(0x7f00000033c0)}], 0xa, &(0x7f00000034c0)=""/147, 0x93}, 0xfffffc01}, {{&(0x7f0000003580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004940)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/10, 0xa}, {&(0x7f0000004640)=""/164, 0xa4}, {&(0x7f0000004700)=""/42, 0x2a}, {&(0x7f0000004740)=""/223, 0xdf}, {&(0x7f0000004840)}, {&(0x7f0000004880)=""/169, 0xa9}], 0x7}, 0x8}, {{&(0x7f00000049c0)=@nfc_llcp, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/99, 0x63}, {&(0x7f0000004ac0)=""/138, 0x8a}, {&(0x7f0000004b80)=""/159, 0x9f}], 0x3}, 0x1}, {{&(0x7f0000004c80)=@nfc_llcp, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/67, 0x43}, {&(0x7f0000005d80)=""/165, 0xa5}, {&(0x7f0000005e40)=""/180, 0xb4}, {&(0x7f0000005f00)=""/63, 0x3f}], 0x5, &(0x7f0000005fc0)=""/141, 0x8d}, 0x7}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006080)=""/109, 0x6d}, {&(0x7f0000006100)=""/143, 0x8f}, {&(0x7f00000061c0)=""/4, 0x4}, {&(0x7f0000006200)=""/93, 0x5d}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/77, 0x4d}], 0x6, &(0x7f0000007380)=""/230, 0xe6}, 0x2}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)=""/103, 0x67}], 0x1, &(0x7f0000007540)=""/79, 0x4f}, 0x7ff}, {{&(0x7f00000075c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007640)=""/23, 0x17}, {&(0x7f0000007680)=""/241, 0xf1}, {&(0x7f0000007780)=""/68, 0x44}, {&(0x7f0000007800)=""/37, 0x25}, {&(0x7f0000007840)=""/162, 0xa2}, {&(0x7f0000007900)=""/50, 0x32}, {&(0x7f0000007940)=""/235, 0xeb}], 0x7, &(0x7f0000007ac0)=""/77, 0x4d}, 0xffff}, {{&(0x7f0000007b40)=@can, 0x80, &(0x7f0000007e80)=[{&(0x7f0000007bc0)=""/240, 0xf0}, {&(0x7f0000007cc0)=""/228, 0xe4}, {&(0x7f0000007dc0)=""/47, 0x2f}, {&(0x7f0000007e00)=""/125, 0x7d}], 0x4, &(0x7f0000007ec0)=""/202, 0xca}, 0x6}], 0x8, 0x1, &(0x7f00000081c0)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000008380)={'team0\x00', 0x0}) r49 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r50 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(r49, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x2) ioctl$sock_inet6_SIOCDELRT(r50, 0x890c, &(0x7f0000000000)={@remote, @mcast2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x146100168, r51}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000008d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000008d00)={&(0x7f00000083c0)={0x914, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x15c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xc8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xddaccea}}}]}}, {{0xfffffffffffffe64, 0x1, r11}, {0x1c4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r24}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r27}, {0xb0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r31}, {0x288, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r32}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r38}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r39}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x5b, 0x7, 0x20, 0xffffffff}, {0x9, 0x8, 0x7, 0x9}, {0x137, 0x3f, 0x3, 0x7}, {0x20, 0x1, 0x7f, 0x9}, {0xb96, 0x9, 0x40, 0xffffff80}, {0x1ffe, 0x2f, 0x8e, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r42}}}]}}, {{0x8, 0x1, r45}, {0x18c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r46}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x18a3, 0x0, 0x6, 0x8001}, {0x7, 0x1, 0x3, 0x3}, {0xfb97, 0xc, 0x5, 0x7fff}, {0xfc00, 0x30, 0x8, 0x9}, {0x831, 0x1f, 0x7, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r47}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r48}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r51}}}]}}, {{0x8}, {0xec, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0x914}, 0x1, 0x0, 0x0, 0x4044800}, 0x40008040) preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:36 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_writev(r9, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x4, 0x0) 10:43:36 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) 10:43:36 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r2, 0x1e, &(0x7f0000000040)={0x1e, 0x3, 0x4}) 10:43:36 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/240, 0xf0}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/134, 0x86}, {&(0x7f0000001480)=""/4093, 0xffd}], 0x9, 0x44000) 10:43:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x0, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYBLOB="9d2f78004380f5e453acb47b99690bf21b94552f117c83bff8ab880d70755fb717a689af3859180a27f9fbc7b5f0c849a047706c8b2e12cc06b2c70f650aca7542ce0aac5d4cf9d1c9c78741bd4a948b1d7aa949d2fdfce414cc952a42363eeef4a8857a546d3f808354215c5f0d9c17227e49930493193194bccbbe64ffd408d864204ec44a6c6f149803667c327b87966079544d3491aa10f8486f7fe390f0e0d3596926717f5b9f213bd52e7e657f751b7475e602b2b7cb5b84c47f827616f37893e5110767a43f9a66561ea66da24c715fafb912dd65d1d7f06daede8a82"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000580)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLINK(r2, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x0, 0x0, 0x4, '\x00', 0x1f}, 0x6, 0x4, 0x9, 0xffffffffffffffff, 0x8, 0x6, 'syz1\x00', &(0x7f0000000000)=['net/ip_mr_cache\x00', '\'mime_typelo\x00', 'user+posix_acl_access\x00', '}mime_typenodev@ppp1\x00', '!\'eth1procself\x00', '+em1user*\x00', 'net/ip_mr_cache\x00', 'mime_typevmnet0\x00'], 0x81, [], [0x4d, 0x7ff, 0x5, 0xff]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0xa4000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\'mime_typelo\x00'}}], [{@fowner_gt={'fowner>', r6}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, '\'mime_typelo\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@audit='audit'}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f00000000c0)={{0x0, 0x0, @reserved="f136de24ca2c59998d568b90c3d18e9e49944f3fdfe476845853f3f525c1f114"}}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:36 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r0, 0x12b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x141001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={r4, 0x97, "f61c622ed53dd2254f8c269c810094edf27b5df3917106d8e334d02059664feb4ca5ed0782adc5ef5856ace1ca439ad911047852584e6592b28447395e50de0490632fc59b375285311027bdefae1e0a93783f9c8b3dd43259e136a7ad81ce3b9d5572c06b9c34ff2831ecadc824f49fad14ef80924bd4d888475797e885b1ba93647539018912504e05ba4cd1b4ba29b7058383a696f9"}, &(0x7f0000000300)=0x9f) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r5, 0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) keyctl$link(0x8, r7, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r10, 0x0) ioprio_get$uid(0x3, r10) preadv(r6, &(0x7f00000017c0), 0x33d, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) 10:43:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x0, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYBLOB="9d2f78004380f5e453acb47b99690bf21b94552f117c83bff8ab880d70755fb717a689af3859180a27f9fbc7b5f0c849a047706c8b2e12cc06b2c70f650aca7542ce0aac5d4cf9d1c9c78741bd4a948b1d7aa949d2fdfce414cc952a42363eeef4a8857a546d3f808354215c5f0d9c17227e49930493193194bccbbe64ffd408d864204ec44a6c6f149803667c327b87966079544d3491aa10f8486f7fe390f0e0d3596926717f5b9f213bd52e7e657f751b7475e602b2b7cb5b84c47f827616f37893e5110767a43f9a66561ea66da24c715fafb912dd65d1d7f06daede8a82"], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000580)) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLINK(r2, &(0x7f0000000600)={0x7, 0x47, 0x2}, 0x7) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x7, 0x0, 0x0, 0x4, '\x00', 0x1f}, 0x6, 0x4, 0x9, 0xffffffffffffffff, 0x8, 0x6, 'syz1\x00', &(0x7f0000000000)=['net/ip_mr_cache\x00', '\'mime_typelo\x00', 'user+posix_acl_access\x00', '}mime_typenodev@ppp1\x00', '!\'eth1procself\x00', '+em1user*\x00', 'net/ip_mr_cache\x00', 'mime_typevmnet0\x00'], 0x81, [], [0x4d, 0x7ff, 0x5, 0xff]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0xa4000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\'mime_typelo\x00'}}], [{@fowner_gt={'fowner>', r6}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, '\'mime_typelo\x00'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@audit='audit'}]}}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f00000000c0)={{0x0, 0x0, @reserved="f136de24ca2c59998d568b90c3d18e9e49944f3fdfe476845853f3f525c1f114"}}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r8, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:36 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r1 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0xff0f}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0x207, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x1, 0x6, 0xbb8}) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$nfc_llcp(r0, &(0x7f0000000340), &(0x7f0000000300)=0x60) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000140)={'lapb0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r7 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000000)=0x4223, 0x4) socket$kcm(0x29, 0x0, 0x0) close(r1) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:37 executing program 2: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(0x0, 0x1000000000013) 10:43:37 executing program 4: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r1 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0xff0f}], 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0x207, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000240)={0x1, 0x6, 0xbb8}) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$nfc_llcp(r0, &(0x7f0000000340), &(0x7f0000000300)=0x60) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000140)={'lapb0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r7 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000000)=0x4223, 0x4) socket$kcm(0x29, 0x0, 0x0) close(r1) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:37 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x28200, 0x0) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x9, 0x1, 0x61, 0x80, 0x0, 0x1}, 0x3}, 0xa) getpid() epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:37 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:37 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, 0x0, 0x0, 0x800000000002) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fffffff, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x401}, &(0x7f00000000c0)=0x40, &(0x7f0000000100)=0x2, 0x0, 0x7, 0x7f, 0x4, 0x0, 0xfffffffffffffff8}}], 0x70, 0x71b319e497f69f5d}, 0x4) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:37 executing program 4 (fault-call:2 fault-nth:0): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:37 executing program 0 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) [ 607.933697] FAULT_INJECTION: forcing a failure. [ 607.933697] name failslab, interval 1, probability 0, space 0, times 0 [ 607.951651] CPU: 0 PID: 29776 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 607.955218] FAULT_INJECTION: forcing a failure. [ 607.955218] name failslab, interval 1, probability 0, space 0, times 0 [ 607.958693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.958705] Call Trace: [ 607.958723] dump_stack+0x138/0x197 [ 607.958743] should_fail.cold+0x10f/0x159 [ 607.958758] should_failslab+0xdb/0x130 [ 607.958777] kmem_cache_alloc_trace+0x2e9/0x790 [ 607.998245] assoc_array_insert+0xcc/0x2d30 [ 608.002569] ? __lock_is_held+0xb6/0x140 [ 608.006634] ? assoc_array_cancel_edit+0x80/0x80 [ 608.011389] ? __key_link_begin+0x1a9/0x2c0 [ 608.015717] __key_link_begin+0x10f/0x2c0 [ 608.019859] key_link+0x73/0x270 [ 608.023219] ? key_default_cmp+0x90/0x90 [ 608.027276] ? __key_link_end+0x130/0x130 [ 608.031421] ? fput+0xd4/0x150 [ 608.034617] keyctl_keyring_link+0x6c/0xc0 [ 608.038853] SyS_keyctl+0x205/0x2b5 [ 608.042478] ? keyctl_restrict_keyring+0x170/0x170 [ 608.047492] do_syscall_64+0x1e8/0x640 [ 608.051379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.056228] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.061415] RIP: 0033:0x459ef9 [ 608.064598] RSP: 002b:00007fbd55c8cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 608.072305] RAX: ffffffffffffffda RBX: 00007fbd55c8cc90 RCX: 0000000000459ef9 [ 608.079572] RDX: 00000000081b800e RSI: 000000002cb83a4f RDI: 0000000000000008 [ 608.086837] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.094099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd55c8d6d4 [ 608.101361] R13: 00000000004c6531 R14: 00000000004db4a8 R15: 0000000000000003 [ 608.108646] CPU: 1 PID: 29775 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 608.115664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.125014] Call Trace: [ 608.127603] dump_stack+0x138/0x197 [ 608.131238] should_fail.cold+0x10f/0x159 [ 608.135390] should_failslab+0xdb/0x130 [ 608.139880] kmem_cache_alloc_node+0x287/0x780 [ 608.144474] ? get_pid_task+0x98/0x140 [ 608.148358] copy_process.part.0+0x17d5/0x6a00 [ 608.152948] ? save_trace+0x290/0x290 [ 608.152960] ? proc_fail_nth_write+0x7d/0x180 [ 608.152969] ? proc_cwd_link+0x1b0/0x1b0 [ 608.152980] ? __f_unlock_pos+0x19/0x20 [ 608.152990] ? find_held_lock+0x35/0x130 [ 608.153005] ? __cleanup_sighand+0x50/0x50 [ 608.153015] ? lock_downgrade+0x740/0x740 [ 608.153030] _do_fork+0x19e/0xce0 [ 608.153044] ? fork_idle+0x280/0x280 [ 608.153058] ? fput+0xd4/0x150 [ 608.153068] ? SyS_write+0x15e/0x230 [ 608.153082] SyS_clone+0x37/0x50 [ 608.153090] ? sys_vfork+0x30/0x30 [ 608.153102] do_syscall_64+0x1e8/0x640 [ 608.206445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.211271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.216440] RIP: 0033:0x459ef9 [ 608.219642] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 608.227330] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:37 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:37 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) 10:43:37 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:37 executing program 0 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:37 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r0, 0x0) [ 608.234600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 608.241856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.249112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 608.256377] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:37 executing program 4 (fault-call:2 fault-nth:1): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) [ 608.380953] FAULT_INJECTION: forcing a failure. [ 608.380953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 608.396411] CPU: 1 PID: 29793 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 608.399650] FAULT_INJECTION: forcing a failure. [ 608.399650] name failslab, interval 1, probability 0, space 0, times 0 [ 608.403444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.403450] Call Trace: [ 608.403468] dump_stack+0x138/0x197 [ 608.403487] should_fail.cold+0x10f/0x159 [ 608.403497] ? __might_sleep+0x93/0xb0 [ 608.403511] __alloc_pages_nodemask+0x1d6/0x7a0 [ 608.403524] ? __alloc_pages_slowpath+0x2930/0x2930 [ 608.403544] copy_process.part.0+0x26a/0x6a00 [ 608.403560] ? save_trace+0x290/0x290 [ 608.403570] ? proc_fail_nth_write+0x7d/0x180 [ 608.403578] ? proc_cwd_link+0x1b0/0x1b0 [ 608.403588] ? __f_unlock_pos+0x19/0x20 [ 608.403598] ? find_held_lock+0x35/0x130 [ 608.403614] ? __cleanup_sighand+0x50/0x50 10:43:38 executing program 0 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 608.403623] ? lock_downgrade+0x740/0x740 [ 608.403638] _do_fork+0x19e/0xce0 [ 608.403652] ? fork_idle+0x280/0x280 [ 608.403665] ? fput+0xd4/0x150 [ 608.403674] ? SyS_write+0x15e/0x230 [ 608.403687] SyS_clone+0x37/0x50 [ 608.403696] ? sys_vfork+0x30/0x30 [ 608.403707] do_syscall_64+0x1e8/0x640 [ 608.403715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.403729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.403736] RIP: 0033:0x459ef9 [ 608.403741] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 608.403752] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 608.403757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 608.403762] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.403767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 608.403772] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 608.588779] CPU: 0 PID: 29796 Comm: syz-executor.4 Not tainted 4.14.150 #0 [ 608.595891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.605260] Call Trace: [ 608.605276] dump_stack+0x138/0x197 [ 608.605293] should_fail.cold+0x10f/0x159 [ 608.605308] should_failslab+0xdb/0x130 [ 608.619594] kmem_cache_alloc_trace+0x2e9/0x790 [ 608.624279] assoc_array_insert+0x6f5/0x2d30 [ 608.628694] ? __lock_is_held+0xb6/0x140 [ 608.629433] FAULT_INJECTION: forcing a failure. [ 608.629433] name failslab, interval 1, probability 0, space 0, times 0 [ 608.632774] ? assoc_array_cancel_edit+0x80/0x80 [ 608.632784] ? __key_link_begin+0x1a9/0x2c0 [ 608.632803] __key_link_begin+0x10f/0x2c0 [ 608.632814] key_link+0x73/0x270 [ 608.632822] ? key_default_cmp+0x90/0x90 [ 608.632832] ? __key_link_end+0x130/0x130 [ 608.632842] ? fput+0xd4/0x150 [ 608.632856] keyctl_keyring_link+0x6c/0xc0 [ 608.632875] SyS_keyctl+0x205/0x2b5 [ 608.679752] ? keyctl_restrict_keyring+0x170/0x170 [ 608.684684] do_syscall_64+0x1e8/0x640 [ 608.688570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.693410] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.698591] RIP: 0033:0x459ef9 [ 608.701770] RSP: 002b:00007fbd55c8cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 608.709472] RAX: ffffffffffffffda RBX: 00007fbd55c8cc90 RCX: 0000000000459ef9 [ 608.716732] RDX: 0000000031dcab97 RSI: 000000000614cbf0 RDI: 0000000000000008 [ 608.723995] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.731258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbd55c8d6d4 [ 608.738519] R13: 00000000004c6531 R14: 00000000004db4a8 R15: 0000000000000003 [ 608.745803] CPU: 1 PID: 29803 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 608.752821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.762167] Call Trace: [ 608.764761] dump_stack+0x138/0x197 [ 608.768391] should_fail.cold+0x10f/0x159 [ 608.772543] should_failslab+0xdb/0x130 [ 608.776518] kmem_cache_alloc+0x2d7/0x780 [ 608.780664] ? creds_are_invalid+0x48/0x110 [ 608.784979] ? __validate_process_creds+0x14c/0x200 [ 608.789996] prepare_creds+0x3e/0x380 [ 608.793790] copy_creds+0x7b/0x4f0 [ 608.797323] ? lockdep_init_map+0x9/0x10 [ 608.801381] copy_process.part.0+0x868/0x6a00 [ 608.805882] ? save_trace+0x290/0x290 [ 608.809682] ? proc_fail_nth_write+0x7d/0x180 [ 608.814176] ? proc_cwd_link+0x1b0/0x1b0 [ 608.818235] ? __f_unlock_pos+0x19/0x20 [ 608.822211] ? __cleanup_sighand+0x50/0x50 [ 608.826441] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 608.831196] ? retint_kernel+0x2d/0x2d [ 608.835087] _do_fork+0x19e/0xce0 [ 608.838545] ? fork_idle+0x280/0x280 [ 608.842260] ? retint_kernel+0x2d/0x2d [ 608.846158] SyS_clone+0x37/0x50 [ 608.849513] ? sys_vfork+0x30/0x30 [ 608.853047] do_syscall_64+0x1e8/0x640 [ 608.853056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.853072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 608.853079] RIP: 0033:0x459ef9 [ 608.853085] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 608.853095] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:38 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:38 executing program 0 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:38 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) 10:43:38 executing program 4 (fault-call:2 fault-nth:2): r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:38 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) [ 608.853101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 608.853106] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 608.853111] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 608.853117] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 608.898960] FAULT_INJECTION: forcing a failure. [ 608.898960] name failslab, interval 1, probability 0, space 0, times 0 [ 608.938703] CPU: 1 PID: 29808 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 608.945743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.955095] Call Trace: [ 608.957689] dump_stack+0x138/0x197 [ 608.961326] should_fail.cold+0x10f/0x159 [ 608.965474] should_failslab+0xdb/0x130 [ 608.969449] __kmalloc_track_caller+0x2ec/0x790 [ 608.974119] ? retint_kernel+0x2d/0x2d [ 608.978006] ? selinux_cred_prepare+0x49/0xb0 [ 608.982510] kmemdup+0x27/0x60 [ 608.985703] selinux_cred_prepare+0x49/0xb0 [ 608.990028] security_prepare_creds+0x7d/0xb0 [ 608.994524] prepare_creds+0x2cf/0x380 [ 608.998418] copy_creds+0x7b/0x4f0 [ 609.001956] ? lockdep_init_map+0x9/0x10 [ 609.006018] copy_process.part.0+0x868/0x6a00 [ 609.010519] ? save_trace+0x290/0x290 [ 609.014316] ? proc_fail_nth_write+0x7d/0x180 [ 609.018811] ? proc_cwd_link+0x1b0/0x1b0 [ 609.022874] ? __f_unlock_pos+0x19/0x20 [ 609.026854] ? __cleanup_sighand+0x50/0x50 [ 609.031095] ? lock_downgrade+0x740/0x740 [ 609.035250] _do_fork+0x19e/0xce0 [ 609.038704] ? fork_idle+0x280/0x280 [ 609.042434] ? check_preemption_disabled+0x3c/0x250 [ 609.047450] ? retint_kernel+0x2d/0x2d [ 609.051337] ? SyS_read+0x230/0x230 [ 609.054968] SyS_clone+0x37/0x50 [ 609.058328] ? sys_vfork+0x30/0x30 [ 609.061868] do_syscall_64+0x1e8/0x640 [ 609.065752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.070598] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 609.075783] RIP: 0033:0x459ef9 [ 609.078971] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:38 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_UNALIGN(0x6, 0x1) keyctl$link(0x8, r0, r1) 10:43:38 executing program 0 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 609.086679] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 609.093953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 609.101220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.108487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 609.115839] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:38 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r0, 0x0) [ 609.193845] FAULT_INJECTION: forcing a failure. [ 609.193845] name failslab, interval 1, probability 0, space 0, times 0 [ 609.254873] CPU: 1 PID: 29818 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 609.261921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.271359] Call Trace: [ 609.273951] dump_stack+0x138/0x197 [ 609.277582] should_fail.cold+0x10f/0x159 [ 609.281732] should_failslab+0xdb/0x130 [ 609.285709] __kmalloc_track_caller+0x2ec/0x790 [ 609.290387] ? check_preemption_disabled+0x3c/0x250 [ 609.295401] ? retint_kernel+0x2d/0x2d [ 609.299286] ? selinux_cred_prepare+0x49/0xb0 [ 609.303782] kmemdup+0x27/0x60 [ 609.306984] selinux_cred_prepare+0x49/0xb0 [ 609.311309] security_prepare_creds+0x7d/0xb0 [ 609.315811] prepare_creds+0x2cf/0x380 [ 609.319701] copy_creds+0x7b/0x4f0 [ 609.323235] ? lockdep_init_map+0x9/0x10 [ 609.323248] copy_process.part.0+0x868/0x6a00 [ 609.323257] ? find_held_lock+0x35/0x130 [ 609.335835] ? trace_hardirqs_on+0x10/0x10 [ 609.340065] ? save_trace+0x290/0x290 [ 609.343865] ? lock_downgrade+0x740/0x740 [ 609.348015] ? finish_task_switch+0x178/0x650 [ 609.352523] ? __cleanup_sighand+0x50/0x50 [ 609.357296] ? _raw_spin_unlock_irq+0x28/0x90 [ 609.357315] _do_fork+0x19e/0xce0 [ 609.365231] ? finish_task_switch+0x14d/0x650 [ 609.369730] ? fork_idle+0x280/0x280 [ 609.373445] ? __schedule+0x7c0/0x1cd0 [ 609.377337] ? pci_mmcfg_check_reserved+0x150/0x150 [ 609.382366] SyS_clone+0x37/0x50 [ 609.385729] ? sys_vfork+0x30/0x30 [ 609.389269] do_syscall_64+0x1e8/0x640 [ 609.393156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.398004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 10:43:39 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) 10:43:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, 0x0, 0x0, 0x800000000002) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0x10}, 0x10) recvfrom(r0, &(0x7f0000000340)=""/35, 0x23, 0x2000, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x14}, 'bcsh0\x00'}}, 0x80) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400, 0x0) getpeername$tipc(r3, &(0x7f0000000080), &(0x7f0000000100)=0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) flistxattr(r5, &(0x7f0000000200)=""/232, 0xe8) r6 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_SET_FPEXC(0xc, 0x100000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0xfffffffe, 0x2, 0x1, 0x5, 0x3, 0x1000}) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x31) ioctl$SCSI_IOCTL_SYNC(r6, 0x4) keyctl$link(0x8, r1, r2) [ 609.403193] RIP: 0033:0x459ef9 [ 609.406380] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 609.414086] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 609.421363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 609.428625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.428632] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 609.428637] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:39 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 10:43:39 executing program 0 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 609.558106] FAULT_INJECTION: forcing a failure. [ 609.558106] name failslab, interval 1, probability 0, space 0, times 0 [ 609.575379] CPU: 1 PID: 29837 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 609.582407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.591759] Call Trace: [ 609.594354] dump_stack+0x138/0x197 [ 609.597988] should_fail.cold+0x10f/0x159 [ 609.602139] should_failslab+0xdb/0x130 [ 609.606113] kmem_cache_alloc+0x2d7/0x780 [ 609.610263] ? retire_userns_sysctls+0x90/0x90 [ 609.614840] ? retint_kernel+0x2d/0x2d [ 609.618723] create_user_ns+0x3ce/0xcd0 [ 609.622699] copy_creds+0x3e9/0x4f0 [ 609.626322] ? lockdep_init_map+0x9/0x10 [ 609.630385] copy_process.part.0+0x868/0x6a00 [ 609.634885] ? save_trace+0x290/0x290 [ 609.638695] ? proc_fail_nth_write+0x7d/0x180 [ 609.643190] ? proc_cwd_link+0x1b0/0x1b0 [ 609.647246] ? __f_unlock_pos+0x19/0x20 [ 609.651229] ? __cleanup_sighand+0x50/0x50 [ 609.655472] ? lock_downgrade+0x740/0x740 [ 609.659627] _do_fork+0x19e/0xce0 [ 609.663084] ? fork_idle+0x280/0x280 [ 609.666802] ? fput+0xd4/0x150 [ 609.669995] ? SyS_write+0x15e/0x230 [ 609.673708] SyS_clone+0x37/0x50 [ 609.677068] ? sys_vfork+0x30/0x30 [ 609.680612] do_syscall_64+0x1e8/0x640 [ 609.684492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.689336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 609.694524] RIP: 0033:0x459ef9 [ 609.697719] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:39 executing program 4: syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x1f, 0x49c530cbe2f1f5be) keyctl$link(0x8, r0, r1) 10:43:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) [ 609.705425] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 609.712691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 609.719954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 609.727221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 609.734483] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:39 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) 10:43:39 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) 10:43:39 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) tkill(r0, 0x0) 10:43:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000036c0), 0x12) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000180)={0x3d7, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000002c0)={r3, &(0x7f0000000200)=""/188}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000)={r3, 0x2}) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000080)=0x3, 0x4) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r7, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000140)='keng\x00', &(0x7f0000000180)={'\x01\x00'}, 0x0, 0x0, r7) keyctl$link(0x8, r0, r8) 10:43:39 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = getpgrp(0x0) ioprio_get$pid(0x0, r2) 10:43:39 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:39 executing program 0 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 610.309146] FAULT_INJECTION: forcing a failure. [ 610.309146] name failslab, interval 1, probability 0, space 0, times 0 [ 610.336538] CPU: 1 PID: 29877 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 610.343723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.353799] Call Trace: [ 610.357182] dump_stack+0x138/0x197 [ 610.360822] should_fail.cold+0x10f/0x159 [ 610.364983] should_failslab+0xdb/0x130 [ 610.368965] __kmalloc+0x2f0/0x7a0 [ 610.372517] ? __register_sysctl_table+0x85/0xe50 [ 610.377355] ? __register_sysctl_table+0xc7/0xe50 [ 610.382198] __register_sysctl_table+0xc7/0xe50 [ 610.386876] ? setup_userns_sysctls+0x82/0x180 [ 610.391471] setup_userns_sysctls+0xbc/0x180 [ 610.395883] create_user_ns+0x79c/0xcd0 [ 610.399863] copy_creds+0x3e9/0x4f0 [ 610.403497] ? lockdep_init_map+0x9/0x10 10:43:40 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) [ 610.407572] copy_process.part.0+0x868/0x6a00 [ 610.412080] ? save_trace+0x290/0x290 [ 610.415911] ? proc_fail_nth_write+0x7d/0x180 [ 610.420413] ? proc_cwd_link+0x1b0/0x1b0 [ 610.424483] ? __f_unlock_pos+0x19/0x20 [ 610.428660] ? __cleanup_sighand+0x50/0x50 [ 610.432911] ? lock_downgrade+0x740/0x740 [ 610.437067] _do_fork+0x19e/0xce0 [ 610.440537] ? fork_idle+0x280/0x280 [ 610.444248] ? fput+0xd4/0x150 [ 610.444260] ? SyS_write+0x15e/0x230 [ 610.451155] SyS_clone+0x37/0x50 [ 610.454519] ? sys_vfork+0x30/0x30 10:43:40 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) r8 = syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) recvfrom$x25(r8, &(0x7f0000001480)=""/4096, 0x1000, 0x0, &(0x7f0000000580)={0x9, @remote={[], 0x2}}, 0x12) [ 610.458061] do_syscall_64+0x1e8/0x640 [ 610.461944] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.461963] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 610.461971] RIP: 0033:0x459ef9 [ 610.461977] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 610.461987] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 610.461994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 610.497494] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:43:40 executing program 4: r0 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000040)={'\x00', 0x3}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0xff, 0x90, 0x9, 0x40, 0x6, 0x1f}}, 0x8) keyctl$link(0x8, r1, r2) 10:43:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 610.504758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 610.504765] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:40 executing program 0 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) 10:43:40 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 610.749866] FAULT_INJECTION: forcing a failure. [ 610.749866] name failslab, interval 1, probability 0, space 0, times 0 [ 610.786096] CPU: 1 PID: 29897 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 610.793149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.802506] Call Trace: [ 610.805097] dump_stack+0x138/0x197 [ 610.808732] should_fail.cold+0x10f/0x159 [ 610.812887] should_failslab+0xdb/0x130 [ 610.816856] __kmalloc+0x2f0/0x7a0 [ 610.820397] ? lock_downgrade+0x740/0x740 [ 610.824545] ? find_entry.isra.0+0x1e0/0x1e0 [ 610.828947] ? __register_sysctl_table+0x79b/0xe50 [ 610.833871] __register_sysctl_table+0x79b/0xe50 [ 610.838634] setup_userns_sysctls+0xbc/0x180 [ 610.843046] create_user_ns+0x79c/0xcd0 [ 610.847028] copy_creds+0x3e9/0x4f0 [ 610.850652] ? lockdep_init_map+0x9/0x10 [ 610.854713] copy_process.part.0+0x868/0x6a00 [ 610.859215] ? save_trace+0x290/0x290 [ 610.863187] ? proc_fail_nth_write+0x7d/0x180 [ 610.867680] ? proc_cwd_link+0x1b0/0x1b0 [ 610.871738] ? __f_unlock_pos+0x19/0x20 [ 610.875718] ? __cleanup_sighand+0x50/0x50 [ 610.879948] ? lock_downgrade+0x740/0x740 [ 610.884886] _do_fork+0x19e/0xce0 [ 610.888338] ? fork_idle+0x280/0x280 [ 610.892057] ? fput+0xd4/0x150 [ 610.895252] ? SyS_write+0x15e/0x230 [ 610.898975] SyS_clone+0x37/0x50 [ 610.902335] ? sys_vfork+0x30/0x30 [ 610.905876] do_syscall_64+0x1e8/0x640 [ 610.909766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.914616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 610.919801] RIP: 0033:0x459ef9 [ 610.922984] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 610.930688] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 610.937968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 10:43:40 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) 10:43:40 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:40 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) syz_open_dev$audion(&(0x7f0000000540)='/dev/audio#\x00', 0x4, 0x0) [ 610.945236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 610.952598] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 610.959870] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 611.014288] sysctl could not get directory: //user -12 [ 611.024438] CPU: 1 PID: 29897 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 611.031731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.041082] Call Trace: [ 611.043669] dump_stack+0x138/0x197 [ 611.047302] __register_sysctl_table+0x762/0xe50 [ 611.052071] setup_userns_sysctls+0xbc/0x180 [ 611.056484] create_user_ns+0x79c/0xcd0 [ 611.060493] copy_creds+0x3e9/0x4f0 [ 611.064121] ? lockdep_init_map+0x9/0x10 [ 611.068183] copy_process.part.0+0x868/0x6a00 [ 611.072686] ? save_trace+0x290/0x290 [ 611.076488] ? proc_fail_nth_write+0x7d/0x180 [ 611.080992] ? proc_cwd_link+0x1b0/0x1b0 [ 611.085054] ? __f_unlock_pos+0x19/0x20 [ 611.089041] ? __cleanup_sighand+0x50/0x50 [ 611.093277] ? lock_downgrade+0x740/0x740 [ 611.097451] _do_fork+0x19e/0xce0 [ 611.100909] ? fork_idle+0x280/0x280 [ 611.104624] ? fput+0xd4/0x150 [ 611.107816] ? SyS_write+0x15e/0x230 [ 611.111534] SyS_clone+0x37/0x50 10:43:40 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:40 executing program 4: r0 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='vmnet1\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={';yz'}, 0x0, 0x0, r0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$tipc(r3, &(0x7f0000000280)=@name, &(0x7f0000000300)=0x10, 0x80000) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000340)) sysfs$3(0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r5, 0x0, 0x0, 0x800000000002) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000040)={0x400}) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'yz\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r7, 0x0, 0x0, 0x800000000002) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000400)=0x8c) getsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000280), &(0x7f00000002c0)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f00000003c0)={@local}, 0x14) keyctl$link(0x8, r1, r6) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000240)=0x4) [ 611.114895] ? sys_vfork+0x30/0x30 [ 611.118441] do_syscall_64+0x1e8/0x640 [ 611.122323] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.122340] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 611.122349] RIP: 0033:0x459ef9 [ 611.132345] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 611.132356] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 611.132361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 611.132366] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 611.132372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 611.132377] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 611.178765] audit: type=1400 audit(1571913820.784:998): avc: denied { setattr } for pid=29915 comm="syz-executor.4" path="/proc/29915/smaps" dev="proc" ino=129390 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 10:43:40 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) pread64(r1, &(0x7f0000000000), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) 10:43:40 executing program 0 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 611.324565] FAULT_INJECTION: forcing a failure. [ 611.324565] name failslab, interval 1, probability 0, space 0, times 0 [ 611.365205] CPU: 1 PID: 29928 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 611.372252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.381601] Call Trace: [ 611.384193] dump_stack+0x138/0x197 [ 611.387831] should_fail.cold+0x10f/0x159 [ 611.391987] should_failslab+0xdb/0x130 [ 611.395969] __kmalloc+0x2f0/0x7a0 [ 611.399540] ? lock_downgrade+0x740/0x740 [ 611.403691] ? find_entry.isra.0+0x1e0/0x1e0 [ 611.408125] ? __register_sysctl_table+0x79b/0xe50 [ 611.413056] __register_sysctl_table+0x79b/0xe50 [ 611.417821] setup_userns_sysctls+0xbc/0x180 [ 611.422229] create_user_ns+0x79c/0xcd0 [ 611.426207] copy_creds+0x3e9/0x4f0 [ 611.429834] ? lockdep_init_map+0x9/0x10 [ 611.433900] copy_process.part.0+0x868/0x6a00 [ 611.438395] ? save_trace+0x290/0x290 [ 611.442184] ? proc_fail_nth_write+0x7d/0x180 [ 611.442193] ? proc_cwd_link+0x1b0/0x1b0 [ 611.442203] ? __f_unlock_pos+0x19/0x20 [ 611.442222] ? __cleanup_sighand+0x50/0x50 [ 611.442232] ? lock_downgrade+0x740/0x740 [ 611.442246] _do_fork+0x19e/0xce0 [ 611.442259] ? fork_idle+0x280/0x280 [ 611.442272] ? check_preemption_disabled+0x3c/0x250 [ 611.442283] ? retint_kernel+0x2d/0x2d [ 611.442297] SyS_clone+0x37/0x50 [ 611.482495] ? sys_vfork+0x30/0x30 [ 611.486041] do_syscall_64+0x1e8/0x640 [ 611.489926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.494764] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 611.494772] RIP: 0033:0x459ef9 [ 611.494778] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:41 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) 10:43:41 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:41 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000003c0)="fb72f8913a6a001629804efa7dcafb616d9a00ce9c8ca69eca64de92ae24e6682e1e6fd01e12a5e71190295412f840856e724c5fff107e2bbe533c3e391dec547a5b822b4d98c8499dd2fd630a8857e2f4107a3c9f02cae6312ed25287d2a08e524ab86893bf7f5fbc3dcad4c6b4954aecfe6a6d575939379751f7644791b04a87204589076cbc7fbcf6e4d14390eb166bd2b738b1f4b8fe23800621935b4f5157feca50c3391cc88cb6ca92be293f0e338b62b595892fe986be490181d695e7511f24757b56d187ae561f0f3a13a3f6b8b3e6229b89834f84655029a0494a488b45538d212612976882be07f8f12add2266a4", 0xf3, r1) keyctl$search(0xa, r3, &(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r1) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) write$apparmor_exec(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1ed6737461636b2073"], 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x3a6) listen(r5, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000080)=0xffff) [ 611.494788] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 611.494794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 611.494799] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 611.494804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 611.494811] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 611.614951] sysctl could not get directory: //user -12 [ 611.621445] CPU: 1 PID: 29928 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 611.628473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.637825] Call Trace: [ 611.640411] dump_stack+0x138/0x197 [ 611.644041] __register_sysctl_table+0x762/0xe50 [ 611.648807] setup_userns_sysctls+0xbc/0x180 [ 611.653220] create_user_ns+0x79c/0xcd0 [ 611.657199] copy_creds+0x3e9/0x4f0 [ 611.660825] ? lockdep_init_map+0x9/0x10 [ 611.664884] copy_process.part.0+0x868/0x6a00 [ 611.669383] ? save_trace+0x290/0x290 [ 611.673178] ? proc_fail_nth_write+0x7d/0x180 [ 611.677669] ? proc_cwd_link+0x1b0/0x1b0 [ 611.681725] ? __f_unlock_pos+0x19/0x20 [ 611.685710] ? __cleanup_sighand+0x50/0x50 [ 611.689943] ? lock_downgrade+0x740/0x740 [ 611.694095] _do_fork+0x19e/0xce0 [ 611.697546] ? fork_idle+0x280/0x280 [ 611.701258] ? check_preemption_disabled+0x3c/0x250 [ 611.706271] ? retint_kernel+0x2d/0x2d [ 611.710164] SyS_clone+0x37/0x50 [ 611.713529] ? sys_vfork+0x30/0x30 [ 611.717068] do_syscall_64+0x1e8/0x640 [ 611.720950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.725791] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 611.730980] RIP: 0033:0x459ef9 [ 611.734161] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 611.741864] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 611.749130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 611.756396] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:43:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x2f, 0x4}, &(0x7f0000000200)=0x0) timer_gettime(r1, &(0x7f0000000240)) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2040, 0x0) connect$vsock_dgram(r4, &(0x7f0000000100)={0x28, 0x0, 0x43ae09600bb4eff2, @reserved}, 0x10) keyctl$search(0xa, r3, &(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, r0) keyctl$link(0x8, r0, r2) [ 611.763666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 611.770932] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'ipddp0\x00'}, 0x18) keyctl$link(0x8, r0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000100)={0x1, 0x5, 0xaa, &(0x7f0000000000)="ff089e3eda11a8bbb4ffb365d2419bfa69963ab0dd05698b3345775d7031b10f42380affd5bdd66ef331e99b5371d81c147056ecfc07891f9a073f90f6643ca660c21cca56ed29889f18564c38154d41b29a41b38f55efe23fc83ccb894469bc0ee012d1986b1d144207b5e49a3d8d4663073ccebfd453dd7a0abbf1c8cf5b32c7f9d6fc1814d31b8c76ca270e1a860a6d2870987b33a9b3544bcf6a55b1863b5346bc7184ac34c7e58c"}) 10:43:41 executing program 0 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 611.933184] FAULT_INJECTION: forcing a failure. [ 611.933184] name failslab, interval 1, probability 0, space 0, times 0 [ 611.989279] CPU: 1 PID: 29956 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 611.996331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.005687] Call Trace: [ 612.008276] dump_stack+0x138/0x197 [ 612.011908] should_fail.cold+0x10f/0x159 [ 612.016058] should_failslab+0xdb/0x130 [ 612.020033] kmem_cache_alloc+0x2d7/0x780 [ 612.024187] ? trace_hardirqs_on_caller+0x400/0x590 [ 612.029201] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 612.034304] dup_fd+0x85/0xa40 [ 612.037508] copy_process.part.0+0x1b5a/0x6a00 [ 612.042099] ? save_trace+0x290/0x290 [ 612.045906] ? proc_fail_nth_write+0x7d/0x180 [ 612.050405] ? proc_cwd_link+0x1b0/0x1b0 [ 612.054477] ? __cleanup_sighand+0x50/0x50 [ 612.058715] ? lock_downgrade+0x740/0x740 [ 612.062852] _do_fork+0x19e/0xce0 [ 612.066287] ? fork_idle+0x280/0x280 [ 612.069983] ? fput+0xd4/0x150 [ 612.073172] ? SyS_write+0x15e/0x230 [ 612.076868] SyS_clone+0x37/0x50 [ 612.080210] ? sys_vfork+0x30/0x30 [ 612.083732] do_syscall_64+0x1e8/0x640 [ 612.087598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.092423] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.097589] RIP: 0033:0x459ef9 [ 612.100796] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 612.108485] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 612.115732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 612.122980] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 612.130230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 10:43:41 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) keyctl$link(0x8, r0, r1) 10:43:41 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:41 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$int_in(r7, 0x5421, &(0x7f0000000600)=0x54) 10:43:41 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) [ 612.137479] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:41 executing program 0 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 612.256171] FAULT_INJECTION: forcing a failure. [ 612.256171] name failslab, interval 1, probability 0, space 0, times 0 [ 612.269757] CPU: 1 PID: 29974 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 612.276791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.286151] Call Trace: [ 612.288748] dump_stack+0x138/0x197 [ 612.292388] should_fail.cold+0x10f/0x159 [ 612.296548] should_failslab+0xdb/0x130 [ 612.300532] kmem_cache_alloc_trace+0x2e9/0x790 [ 612.305202] ? retint_kernel+0x2d/0x2d [ 612.309097] ? lock_downgrade+0x740/0x740 [ 612.313248] alloc_fdtable+0x7f/0x280 [ 612.317051] dup_fd+0x693/0xa40 [ 612.320342] copy_process.part.0+0x1b5a/0x6a00 [ 612.325033] ? _raw_spin_unlock_irq+0x5e/0x90 [ 612.329535] ? finish_task_switch+0x178/0x650 [ 612.334026] ? finish_task_switch+0x14d/0x650 [ 612.338513] ? switch_mm_irqs_off+0x5e1/0xec0 [ 612.343014] ? save_trace+0x290/0x290 [ 612.346832] ? __cleanup_sighand+0x50/0x50 [ 612.351069] ? lock_downgrade+0x740/0x740 [ 612.355223] _do_fork+0x19e/0xce0 [ 612.358687] ? fork_idle+0x280/0x280 [ 612.362503] ? fput+0xd4/0x150 [ 612.365696] ? SyS_write+0x15e/0x230 [ 612.369413] SyS_clone+0x37/0x50 [ 612.372775] ? sys_vfork+0x30/0x30 [ 612.376317] do_syscall_64+0x1e8/0x640 [ 612.380204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.385049] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.390236] RIP: 0033:0x459ef9 [ 612.393504] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:41 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r2, 0x1f, &(0x7f0000000040)={0x1b, 0x6, 0x5}) 10:43:42 executing program 0 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 612.401731] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 612.408996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 612.416269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 612.423539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 612.430809] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:42 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:42 executing program 4: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x6, @raw_data="e24200ace3b76ab26b27f52a7821e404e4934ce3685c4399f47067e78e40dc2583357befdddd740980cb06740b37292e58b1ecf690c68728ac4227f6469670f5701798ba022310f6e691bbdb6b010e9433a1c9d5a2d396e07835858ffc56228a0738157da7efb4b52762fd9314a6fbd0508a1d02858a6cf38e0f090d4eb216102643a099023cbacb92aca971be06457a702c6ea7b222044dcdf3cacc18583a54a43933d1ac944360573509e0fce04213be56f193ff4ebedefc68802f2bb0e9af22247fd5cdf9d095"}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:42 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:43:42 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:42 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x400, 0x8, 0x8000, @random="c12e32fec327", 'bcsh0\x00'}) keyctl$link(0x8, r0, r1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) dup2(r3, r4) [ 612.634972] FAULT_INJECTION: forcing a failure. [ 612.634972] name failslab, interval 1, probability 0, space 0, times 0 10:43:42 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 612.718159] CPU: 1 PID: 29994 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 612.725212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.734738] Call Trace: [ 612.737335] dump_stack+0x138/0x197 [ 612.740971] should_fail.cold+0x10f/0x159 [ 612.745130] should_failslab+0xdb/0x130 [ 612.749111] kmem_cache_alloc_node_trace+0x280/0x770 [ 612.754219] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 612.759680] __kmalloc_node+0x3d/0x80 [ 612.763487] kvmalloc_node+0x4e/0xe0 [ 612.767201] alloc_fdtable+0xcf/0x280 [ 612.770999] dup_fd+0x693/0xa40 [ 612.774286] copy_process.part.0+0x1b5a/0x6a00 [ 612.778870] ? save_trace+0x290/0x290 [ 612.782669] ? retint_kernel+0x2d/0x2d [ 612.786563] ? trace_hardirqs_on_caller+0x400/0x590 [ 612.791587] ? __cleanup_sighand+0x50/0x50 [ 612.795825] _do_fork+0x19e/0xce0 [ 612.799279] ? fork_idle+0x280/0x280 [ 612.802993] ? check_preemption_disabled+0x3c/0x250 [ 612.808013] ? retint_kernel+0x2d/0x2d [ 612.811910] SyS_clone+0x37/0x50 [ 612.815271] ? sys_vfork+0x30/0x30 [ 612.818809] do_syscall_64+0x1e8/0x640 [ 612.822698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.827554] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 612.832746] RIP: 0033:0x459ef9 [ 612.835931] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 612.843637] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 612.850906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 612.858177] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 612.865447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 612.872720] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:42 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) 10:43:42 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:42 executing program 0 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 613.034766] FAULT_INJECTION: forcing a failure. [ 613.034766] name failslab, interval 1, probability 0, space 0, times 0 [ 613.056475] CPU: 1 PID: 30021 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 613.063526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.072880] Call Trace: [ 613.075473] dump_stack+0x138/0x197 [ 613.079113] should_fail.cold+0x10f/0x159 [ 613.083266] should_failslab+0xdb/0x130 [ 613.087248] kmem_cache_alloc_node_trace+0x280/0x770 [ 613.092361] ? kasan_unpoison_shadow+0x35/0x50 [ 613.096953] __kmalloc_node+0x3d/0x80 [ 613.100755] kvmalloc_node+0x4e/0xe0 [ 613.104473] alloc_fdtable+0x13b/0x280 [ 613.108362] dup_fd+0x693/0xa40 [ 613.111649] copy_process.part.0+0x1b5a/0x6a00 [ 613.116241] ? save_trace+0x290/0x290 [ 613.120041] ? proc_fail_nth_write+0x7d/0x180 [ 613.124539] ? proc_cwd_link+0x1b0/0x1b0 [ 613.128611] ? __cleanup_sighand+0x50/0x50 [ 613.132844] ? lock_downgrade+0x740/0x740 [ 613.136994] _do_fork+0x19e/0xce0 [ 613.140451] ? fork_idle+0x280/0x280 [ 613.144167] ? fput+0xd4/0x150 [ 613.147385] ? SyS_write+0x15e/0x230 [ 613.151109] SyS_clone+0x37/0x50 [ 613.154472] ? sys_vfork+0x30/0x30 [ 613.158019] do_syscall_64+0x1e8/0x640 [ 613.161906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.166762] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 613.171951] RIP: 0033:0x459ef9 [ 613.175142] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:42 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:43:42 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 613.182954] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 613.190220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 613.197488] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 613.204758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 613.212026] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:42 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = semget(0x1, 0x0, 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x8001, 0x745e, 0x2]) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f00000001c0)=""/134) r3 = semget$private(0x0, 0x1, 0x2) semop(r3, &(0x7f0000000000)=[{0x2, 0x1, 0x1000}], 0x1) keyctl$link(0x8, r0, r1) 10:43:42 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:42 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 10:43:43 executing program 0 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 10:43:43 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:43 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) [ 613.597390] FAULT_INJECTION: forcing a failure. [ 613.597390] name failslab, interval 1, probability 0, space 0, times 0 [ 613.635548] CPU: 0 PID: 30047 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 613.642611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.651972] Call Trace: [ 613.654570] dump_stack+0x138/0x197 [ 613.658217] should_fail.cold+0x10f/0x159 [ 613.662374] should_failslab+0xdb/0x130 [ 613.666354] kmem_cache_alloc+0x2d7/0x780 [ 613.666364] ? dup_fd+0x533/0xa40 [ 613.666380] copy_fs_struct+0x43/0x2d0 [ 613.677928] copy_process.part.0+0x3924/0x6a00 [ 613.682514] ? check_preemption_disabled+0x3c/0x250 [ 613.682527] ? retint_kernel+0x2d/0x2d [ 613.682539] ? save_trace+0x290/0x290 [ 613.682562] ? __cleanup_sighand+0x50/0x50 [ 613.682573] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 613.682588] _do_fork+0x19e/0xce0 [ 613.682603] ? fork_idle+0x280/0x280 [ 613.711370] ? fput+0x10/0x150 [ 613.714567] ? fput+0x16/0x150 [ 613.717770] ? fput+0xd4/0x150 [ 613.720963] ? SyS_write+0x15e/0x230 [ 613.724683] SyS_clone+0x37/0x50 [ 613.728050] ? sys_vfork+0x30/0x30 [ 613.731597] do_syscall_64+0x1e8/0x640 [ 613.735478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.735500] entry_SYSCALL_64_after_hwframe+0x42/0xb7 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000040)=0x401, 0x4) pread64(r2, 0x0, 0x0, 0x800000000002) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x244400, 0x0) preadv(r5, &(0x7f0000001740)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/211, 0xdb}, {&(0x7f0000000300)=""/227, 0x2c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/135, 0x87}, {&(0x7f00000001c0)=""/16}, {&(0x7f0000001500)=""/86, 0x4f}, {&(0x7f0000001580)=""/223, 0xdf}], 0x9, 0x0) keyctl$link(0x8, r0, r1) 10:43:43 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:43 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) [ 613.745508] RIP: 0033:0x459ef9 [ 613.748689] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 613.748701] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 613.748707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 613.748713] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 613.748719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 613.748725] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x0) fcntl$setown(r9, 0x8, r3) setresuid(r4, r6, r8) 10:43:43 executing program 0 (fault-call:1 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x220800) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040010}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x0, 0x332b4db4622b2374, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800e}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x40) keyctl$link(0x8, r0, r1) [ 613.986870] FAULT_INJECTION: forcing a failure. [ 613.986870] name failslab, interval 1, probability 0, space 0, times 0 [ 614.018709] CPU: 1 PID: 30080 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 614.025874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:43:43 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) [ 614.035235] Call Trace: [ 614.037839] dump_stack+0x138/0x197 [ 614.041592] should_fail.cold+0x10f/0x159 [ 614.045740] should_failslab+0xdb/0x130 [ 614.049704] kmem_cache_alloc+0x2d7/0x780 [ 614.053856] ? dup_fd+0x533/0xa40 [ 614.057323] copy_fs_struct+0x43/0x2d0 [ 614.061219] copy_process.part.0+0x3924/0x6a00 [ 614.065810] ? save_trace+0x290/0x290 [ 614.069614] ? retint_kernel+0x2d/0x2d [ 614.073510] ? trace_hardirqs_on_caller+0x400/0x590 [ 614.078543] ? __cleanup_sighand+0x50/0x50 [ 614.082792] _do_fork+0x19e/0xce0 [ 614.086247] ? fork_idle+0x280/0x280 [ 614.089964] ? fput+0xd4/0x150 [ 614.093156] ? SyS_write+0x15e/0x230 [ 614.096871] SyS_clone+0x37/0x50 [ 614.100231] ? sys_vfork+0x30/0x30 [ 614.103770] do_syscall_64+0x1e8/0x640 [ 614.107655] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.112502] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.117687] RIP: 0033:0x459ef9 [ 614.120872] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 614.128585] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:43 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:43 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) keyctl$link(0x8, r0, r1) 10:43:43 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 614.135961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 614.143230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 614.150500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 614.157790] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:43 executing program 0 (fault-call:1 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:43 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) 10:43:43 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:43 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$link(0x8, r1, r0) 10:43:44 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vga_arbiter\x00', 0x1400, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000001280)={0x63e4b3fba875ce9c, @sliced={0x7fff, [0x0, 0x9, 0xf923, 0x3, 0x3, 0x9, 0x7, 0x6, 0x7, 0xba, 0xff60, 0x6, 0x7, 0x5, 0x1, 0x8, 0x0, 0x8, 0x6, 0x401, 0x20fd, 0xd0, 0x3, 0x1ff, 0x776a, 0x7, 0x99c, 0x1, 0xf202, 0x80, 0x8, 0x6, 0x8000, 0xddb, 0x2, 0xffff, 0x40, 0x6, 0x6, 0x6, 0x0, 0x101, 0x9, 0x4, 0xe8, 0x6, 0x3ff, 0x70f], 0x1}}) keyctl$get_security(0x11, r1, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='bi\x90\xf8\x7fz\x16g_key\x00', &(0x7f00000001c0)={'s\x9c3', 0x0}, &(0x7f0000000200)="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", 0xffffffffffffff8f, r1) r4 = openat$pfkey(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000001200)=0x1e) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, r0, r5) 10:43:44 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 614.441620] FAULT_INJECTION: forcing a failure. [ 614.441620] name failslab, interval 1, probability 0, space 0, times 0 [ 614.497627] CPU: 1 PID: 30111 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 614.504699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.514069] Call Trace: [ 614.516665] dump_stack+0x138/0x197 [ 614.520300] ? should_fail.cold+0x10a/0x159 [ 614.524633] should_fail.cold+0x10f/0x159 [ 614.528792] should_failslab+0xdb/0x130 [ 614.532769] kmem_cache_alloc+0x2d7/0x780 [ 614.536922] ? _raw_spin_unlock_irq+0x54/0x90 [ 614.541419] copy_process.part.0+0x1cd5/0x6a00 [ 614.546013] ? retint_kernel+0x2d/0x2d [ 614.549909] ? trace_hardirqs_on_caller+0x400/0x590 [ 614.554941] ? __cleanup_sighand+0x50/0x50 [ 614.559190] _do_fork+0x19e/0xce0 [ 614.562654] ? fork_idle+0x280/0x280 [ 614.566378] ? fput+0xd4/0x150 [ 614.569577] ? SyS_write+0x15e/0x230 [ 614.573302] SyS_clone+0x37/0x50 [ 614.576672] ? sys_vfork+0x30/0x30 [ 614.580214] do_syscall_64+0x1e8/0x640 [ 614.584104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.588961] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 614.594146] RIP: 0033:0x459ef9 10:43:44 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:44 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:44 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 614.597416] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 614.605156] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 614.612429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 614.619707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 614.626981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 614.634255] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2200, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x6, "785aa8", "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"}}, 0x110) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) 10:43:44 executing program 0 (fault-call:1 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:44 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:43:44 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:44 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x4, 0x4, 0x4, 0x0, 0x8, 0x120, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffc0, 0x6, @perf_config_ext={0xd7, 0x401}, 0x0, 0x4, 0x5, 0xe, 0x9, 0xfff, 0x3f}, r4, 0x2, 0xffffffffffffffff, 0x18) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)={{0x1, 0x6, 0x2, 0xff, 0x1f, 0x9}, 0x654f}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r5, &(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0xfff}, 0x80) socket$caif_seqpacket(0x25, 0x5, 0x5) keyctl$link(0x8, r0, r1) [ 614.965967] FAULT_INJECTION: forcing a failure. [ 614.965967] name failslab, interval 1, probability 0, space 0, times 0 10:43:44 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) 10:43:44 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:43:44 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:43:44 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 615.083809] CPU: 1 PID: 30139 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 615.090879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.100247] Call Trace: [ 615.102850] dump_stack+0x138/0x197 [ 615.106491] should_fail.cold+0x10f/0x159 [ 615.110656] should_failslab+0xdb/0x130 [ 615.114640] kmem_cache_alloc+0x2d7/0x780 [ 615.118797] ? selinux_capable+0x36/0x40 [ 615.122866] create_new_namespaces+0x34/0x720 [ 615.127369] ? ns_capable_common+0x12c/0x160 [ 615.131794] copy_namespaces+0x284/0x310 [ 615.135871] copy_process.part.0+0x2603/0x6a00 [ 615.140492] ? mark_held_locks+0xb1/0x100 [ 615.140508] ? trace_hardirqs_on_caller+0x400/0x590 [ 615.140525] ? __cleanup_sighand+0x50/0x50 [ 615.140534] ? lock_downgrade+0x740/0x740 [ 615.140549] _do_fork+0x19e/0xce0 [ 615.140563] ? fork_idle+0x280/0x280 [ 615.140578] ? fput+0xd4/0x150 [ 615.140589] ? SyS_write+0x15e/0x230 [ 615.172439] SyS_clone+0x37/0x50 [ 615.175822] ? sys_vfork+0x30/0x30 [ 615.179377] do_syscall_64+0x1e8/0x640 10:43:44 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 615.183271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.188133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.193333] RIP: 0033:0x459ef9 [ 615.196525] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 615.204237] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 615.211513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 615.218794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 615.226072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 615.233368] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:44 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, 0x0) 10:43:44 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:44 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:43:44 executing program 0 (fault-call:1 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:45 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x101000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r4) 10:43:45 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 615.488136] FAULT_INJECTION: forcing a failure. [ 615.488136] name failslab, interval 1, probability 0, space 0, times 0 10:43:45 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 615.556018] CPU: 1 PID: 30181 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 615.563085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.572451] Call Trace: [ 615.575053] dump_stack+0x138/0x197 [ 615.578725] should_fail.cold+0x10f/0x159 [ 615.582914] should_failslab+0xdb/0x130 [ 615.586909] kmem_cache_alloc_trace+0x2e9/0x790 [ 615.591611] ? _raw_spin_unlock_irq+0x54/0x90 [ 615.596140] inc_ucount+0x3db/0x710 [ 615.599875] ? retire_userns_sysctls+0x90/0x90 [ 615.604469] alloc_mnt_ns+0x98/0x450 [ 615.608190] copy_mnt_ns+0x95/0x8c0 [ 615.611819] ? copy_mnt_ns+0x6/0x8c0 [ 615.615535] create_new_namespaces+0xc9/0x720 [ 615.620034] ? ns_capable_common+0x12c/0x160 [ 615.624450] copy_namespaces+0x284/0x310 [ 615.628520] copy_process.part.0+0x2603/0x6a00 [ 615.633117] ? proc_fail_nth_write+0x7d/0x180 [ 615.637619] ? proc_cwd_link+0x1b0/0x1b0 [ 615.641698] ? __cleanup_sighand+0x50/0x50 [ 615.645969] ? lock_downgrade+0x740/0x740 [ 615.650142] _do_fork+0x19e/0xce0 [ 615.653610] ? fork_idle+0x280/0x280 [ 615.657326] ? fput+0xd4/0x150 [ 615.660520] ? SyS_write+0x15e/0x230 [ 615.664247] SyS_clone+0x37/0x50 [ 615.667788] ? sys_vfork+0x30/0x30 [ 615.671331] do_syscall_64+0x1e8/0x640 [ 615.675224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.680084] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 615.685274] RIP: 0033:0x459ef9 [ 615.688464] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 615.696177] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:45 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:45 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x200, 0xaa88}}, 0x28) keyctl$link(0x8, r0, r1) 10:43:45 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) [ 615.703447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 615.710717] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 615.717999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 615.725271] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:45 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:43:45 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='je]2ing\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$llc(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0xd93b3f0f532bc6e3) shutdown(r4, 0x0) keyctl$link(0x8, r0, r1) 10:43:45 executing program 0 (fault-call:1 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:45 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:43:45 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:45 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:45 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000280)={0x3ff, 0x7fffffff, 0x97d0}) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x20200) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x80, 0x8, 0x4, 0x7, 0x4, 0x7}, 0xc}, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x8, {0x7}}, 0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x1000}, &(0x7f0000000200)=0x8) keyctl$link(0x8, r0, r1) [ 616.105039] FAULT_INJECTION: forcing a failure. [ 616.105039] name failslab, interval 1, probability 0, space 0, times 0 [ 616.145378] CPU: 1 PID: 30220 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 616.152435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.161793] Call Trace: [ 616.164404] dump_stack+0x138/0x197 [ 616.168041] should_fail.cold+0x10f/0x159 [ 616.172206] should_failslab+0xdb/0x130 [ 616.176191] kmem_cache_alloc_trace+0x2e9/0x790 [ 616.180866] ? retire_userns_sysctls+0x90/0x90 [ 616.185456] alloc_mnt_ns+0xde/0x450 [ 616.189176] copy_mnt_ns+0x95/0x8c0 [ 616.192813] ? kmem_cache_alloc+0x611/0x780 [ 616.197138] ? selinux_capable+0x36/0x40 [ 616.201204] create_new_namespaces+0xc9/0x720 [ 616.205699] ? ns_capable_common+0x12c/0x160 [ 616.210112] copy_namespaces+0x284/0x310 [ 616.214174] copy_process.part.0+0x2603/0x6a00 [ 616.218763] ? retint_kernel+0x2d/0x2d [ 616.222651] ? trace_hardirqs_on_caller+0x400/0x590 [ 616.227677] ? __cleanup_sighand+0x50/0x50 [ 616.231916] _do_fork+0x19e/0xce0 [ 616.235378] ? fork_idle+0x280/0x280 [ 616.239094] ? fput+0xd4/0x150 [ 616.242381] ? SyS_write+0x15e/0x230 [ 616.246099] SyS_clone+0x37/0x50 [ 616.249460] ? sys_vfork+0x30/0x30 [ 616.253009] do_syscall_64+0x1e8/0x640 [ 616.256896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.261746] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.267881] RIP: 0033:0x459ef9 [ 616.271066] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 616.278775] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 616.286041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 10:43:45 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:45 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 616.293308] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 616.300577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 616.307847] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:45 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:43:46 executing program 0 (fault-call:1 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e65772065637279707466732074727573746564081030303030303030303030303030301c32350068ab5c21e75a0f017779ed14c3c6821b388fcf62d59f4c7f10a639a5"], 0x2b, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000080)=0x4) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000040)={{0x2, @addr=0x7ff}, 0x8, 0x8}) 10:43:46 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) [ 616.504322] FAULT_INJECTION: forcing a failure. [ 616.504322] name failslab, interval 1, probability 0, space 0, times 0 [ 616.558989] CPU: 1 PID: 30246 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 616.566047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.575401] Call Trace: [ 616.578002] dump_stack+0x138/0x197 [ 616.581642] should_fail.cold+0x10f/0x159 [ 616.585799] should_failslab+0xdb/0x130 [ 616.589780] kmem_cache_alloc+0x2d7/0x780 [ 616.593998] alloc_vfsmnt+0x28/0x7d0 [ 616.597724] clone_mnt+0x70/0xee0 [ 616.601201] copy_tree+0xd0/0x8a0 [ 616.604669] copy_mnt_ns+0x11c/0x8c0 [ 616.608383] ? kmem_cache_alloc+0x611/0x780 [ 616.612710] ? check_preemption_disabled+0x3c/0x250 [ 616.617731] ? retint_kernel+0x2d/0x2d [ 616.621625] create_new_namespaces+0xc9/0x720 [ 616.626136] copy_namespaces+0x284/0x310 [ 616.630201] copy_process.part.0+0x2603/0x6a00 [ 616.634795] ? proc_fail_nth_write+0x7d/0x180 [ 616.639299] ? proc_cwd_link+0x1b0/0x1b0 [ 616.643372] ? __cleanup_sighand+0x50/0x50 [ 616.647611] ? lock_downgrade+0x740/0x740 [ 616.651769] _do_fork+0x19e/0xce0 [ 616.655228] ? fork_idle+0x280/0x280 [ 616.659034] ? fput+0xd4/0x150 [ 616.662230] ? SyS_write+0x15e/0x230 [ 616.665952] SyS_clone+0x37/0x50 [ 616.669325] ? sys_vfork+0x30/0x30 [ 616.672872] do_syscall_64+0x1e8/0x640 [ 616.676761] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.681613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 616.686813] RIP: 0033:0x459ef9 [ 616.690002] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 616.697712] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 616.704984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 616.712253] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 616.719522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 616.726803] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:46 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:46 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:46 executing program 0 (fault-call:1 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) 10:43:46 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0x1f) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0x2, 0x0, 0x2008, 0x8, 0x6, 0x2, 0x2, 0x7}}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = semget(0x0, 0x0, 0x3c9) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) fstat(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, 0x0) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000003c0)={{0x6, r3, r5, 0xee01, r6, 0x16, 0x5}, 0x7, 0xec}) keyctl$link(0x8, 0x0, r0) 10:43:46 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) keyctl$link(0x8, r0, r1) [ 616.953978] FAULT_INJECTION: forcing a failure. [ 616.953978] name failslab, interval 1, probability 0, space 0, times 0 [ 616.984245] CPU: 1 PID: 30278 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 616.991306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.001185] Call Trace: [ 617.003773] dump_stack+0x138/0x197 [ 617.007419] should_fail.cold+0x10f/0x159 [ 617.011587] should_failslab+0xdb/0x130 [ 617.015570] kmem_cache_alloc+0x2d7/0x780 [ 617.019736] alloc_vfsmnt+0x28/0x7d0 [ 617.023460] clone_mnt+0x70/0xee0 [ 617.026919] copy_tree+0xd0/0x8a0 [ 617.030382] copy_mnt_ns+0x11c/0x8c0 [ 617.034444] ? kmem_cache_alloc+0x611/0x780 [ 617.038766] ? selinux_capable+0x36/0x40 [ 617.042833] create_new_namespaces+0xc9/0x720 [ 617.047345] ? ns_capable_common+0x12c/0x160 [ 617.051760] copy_namespaces+0x284/0x310 [ 617.055822] copy_process.part.0+0x2603/0x6a00 [ 617.060414] ? retint_kernel+0x2d/0x2d [ 617.064324] ? __cleanup_sighand+0x50/0x50 [ 617.068573] ? lock_downgrade+0x740/0x740 [ 617.072754] ? retint_kernel+0x2d/0x2d [ 617.076650] _do_fork+0x19e/0xce0 [ 617.080123] ? fork_idle+0x280/0x280 [ 617.083830] ? retint_kernel+0x2d/0x2d [ 617.088203] SyS_clone+0x37/0x50 [ 617.091570] ? sys_vfork+0x30/0x30 [ 617.095117] do_syscall_64+0x1e8/0x640 [ 617.099008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.103859] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.109051] RIP: 0033:0x459ef9 [ 617.112238] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.119973] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 617.127267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 617.134546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 617.141821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 617.149115] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:46 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:46 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:46 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) 10:43:46 executing program 0 (fault-call:1 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:46 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./file0\x00') r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x3, @mcast2, 0x2}, {0xa, 0x4e22, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10001}, 0x401, [0x2, 0x10001, 0x7f, 0x7, 0x4846, 0xc05d, 0x10001]}, 0x5c) keyctl$link(0x8, r0, r1) socketpair(0x11, 0x3, 0x20, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 617.331457] FAULT_INJECTION: forcing a failure. [ 617.331457] name failslab, interval 1, probability 0, space 0, times 0 [ 617.344798] CPU: 1 PID: 30299 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 617.351835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.361450] Call Trace: [ 617.364046] dump_stack+0x138/0x197 [ 617.367684] should_fail.cold+0x10f/0x159 [ 617.371842] should_failslab+0xdb/0x130 [ 617.375824] __kmalloc_track_caller+0x2ec/0x790 [ 617.380498] ? kstrdup_const+0x48/0x60 [ 617.384396] kstrdup+0x3a/0x70 [ 617.387589] kstrdup_const+0x48/0x60 [ 617.391302] alloc_vfsmnt+0xe5/0x7d0 [ 617.395019] clone_mnt+0x70/0xee0 [ 617.398473] ? is_subdir+0x222/0x389 [ 617.402192] copy_tree+0x33b/0x8a0 [ 617.407215] copy_mnt_ns+0x11c/0x8c0 [ 617.410929] ? kmem_cache_alloc+0x611/0x780 [ 617.415256] create_new_namespaces+0xc9/0x720 [ 617.419749] ? ns_capable_common+0x12c/0x160 [ 617.424186] copy_namespaces+0x284/0x310 [ 617.428251] copy_process.part.0+0x2603/0x6a00 [ 617.432843] ? proc_fail_nth_write+0x7d/0x180 [ 617.437343] ? proc_cwd_link+0x1b0/0x1b0 [ 617.441417] ? __cleanup_sighand+0x50/0x50 [ 617.445654] ? lock_downgrade+0x740/0x740 [ 617.449807] _do_fork+0x19e/0xce0 [ 617.453264] ? fork_idle+0x280/0x280 [ 617.456983] ? fput+0xd4/0x150 [ 617.460176] ? SyS_write+0x15e/0x230 [ 617.463890] SyS_clone+0x37/0x50 [ 617.467251] ? sys_vfork+0x30/0x30 [ 617.470790] do_syscall_64+0x1e8/0x640 [ 617.474673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.479520] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.484708] RIP: 0033:0x459ef9 [ 617.487889] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.495596] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 617.502866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 617.510230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 617.517497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 617.524766] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:47 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:47 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:47 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:47 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:47 executing program 0 (fault-call:1 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:47 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) [ 617.748079] FAULT_INJECTION: forcing a failure. [ 617.748079] name failslab, interval 1, probability 0, space 0, times 0 [ 617.767969] CPU: 1 PID: 30316 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 617.775012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.784373] Call Trace: [ 617.786967] dump_stack+0x138/0x197 [ 617.790610] should_fail.cold+0x10f/0x159 [ 617.794796] should_failslab+0xdb/0x130 [ 617.798788] __kmalloc_track_caller+0x2ec/0x790 [ 617.803464] ? kstrdup+0x1f/0x70 [ 617.806830] ? strlen+0x23/0xa0 [ 617.810104] ? kstrdup_const+0x48/0x60 [ 617.813992] kstrdup+0x3a/0x70 [ 617.817182] kstrdup_const+0x48/0x60 [ 617.820992] alloc_vfsmnt+0xe5/0x7d0 [ 617.824736] clone_mnt+0x70/0xee0 [ 617.828214] ? is_subdir+0x222/0x389 [ 617.831956] copy_tree+0x33b/0x8a0 [ 617.835507] copy_mnt_ns+0x11c/0x8c0 [ 617.839324] ? kmem_cache_alloc+0x611/0x780 [ 617.843629] ? security_capable+0x40/0xc0 [ 617.847762] create_new_namespaces+0xc9/0x720 [ 617.852248] ? ns_capable_common+0x12c/0x160 [ 617.856649] copy_namespaces+0x284/0x310 [ 617.860692] copy_process.part.0+0x2603/0x6a00 [ 617.865259] ? proc_fail_nth_write+0x7d/0x180 [ 617.869734] ? proc_cwd_link+0x1b0/0x1b0 [ 617.873798] ? __cleanup_sighand+0x50/0x50 [ 617.878024] ? lock_downgrade+0x740/0x740 [ 617.882168] _do_fork+0x19e/0xce0 [ 617.885605] ? fork_idle+0x280/0x280 [ 617.889314] ? fput+0xd4/0x150 [ 617.892497] ? SyS_write+0x15e/0x230 [ 617.896205] SyS_clone+0x37/0x50 [ 617.899548] ? sys_vfork+0x30/0x30 [ 617.903073] do_syscall_64+0x1e8/0x640 [ 617.906938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.911774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 617.916954] RIP: 0033:0x459ef9 [ 617.920131] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 617.927822] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 617.935090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 10:43:47 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:47 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:47 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:47 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) [ 617.942342] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 617.949592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 617.956845] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:47 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x88006}, 0x2000000) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r3) 10:43:47 executing program 0 (fault-call:1 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:47 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:47 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2b629a063a586eb2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040)) clone(0xef62f293ea0a2c29, &(0x7f00000001c0)="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", &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000002c0)="278d1906abe7654f4be4d2925aeb883d78e4e04bd2f3bbfdca920007ded88d29ee258b595206569683b22ffcabdbe74c7256e42fa97061a049bb82c2415b59f60638a6e32a1eaa1bdabffbb9ba5ac7fb5cccef9d3a25b3027947a4964eab8f115bd1aa8ed843c9a3fbb085642ae78a6859c8da4a72c7f505901463bd7b53a3ae92491453d508e15c2a377ae928c6934b5d33e9fa947f0f8be5734034d966508338c4035ca9") keyctl$link(0x8, r0, r1) 10:43:47 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) [ 618.207540] FAULT_INJECTION: forcing a failure. [ 618.207540] name failslab, interval 1, probability 0, space 0, times 0 [ 618.268749] CPU: 1 PID: 30341 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 618.275814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.285182] Call Trace: [ 618.287791] dump_stack+0x138/0x197 [ 618.291438] should_fail.cold+0x10f/0x159 [ 618.295603] should_failslab+0xdb/0x130 [ 618.299596] __kmalloc_track_caller+0x2ec/0x790 [ 618.304307] ? kstrdup_const+0x48/0x60 [ 618.308348] kstrdup+0x3a/0x70 [ 618.311546] kstrdup_const+0x48/0x60 [ 618.315264] alloc_vfsmnt+0xe5/0x7d0 [ 618.318984] clone_mnt+0x70/0xee0 [ 618.322446] copy_tree+0x33b/0x8a0 [ 618.326000] copy_mnt_ns+0x11c/0x8c0 [ 618.329725] ? kmem_cache_alloc+0x611/0x780 [ 618.334054] ? selinux_capable+0x36/0x40 [ 618.338124] create_new_namespaces+0xc9/0x720 [ 618.342619] ? ns_capable_common+0x12c/0x160 [ 618.347040] copy_namespaces+0x284/0x310 [ 618.351110] copy_process.part.0+0x2603/0x6a00 [ 618.355702] ? retint_kernel+0x2d/0x2d [ 618.359606] ? trace_hardirqs_on_caller+0x400/0x590 [ 618.364642] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 618.369413] ? check_preemption_disabled+0x3c/0x250 [ 618.374447] ? __cleanup_sighand+0x50/0x50 [ 618.378689] ? lock_downgrade+0x740/0x740 [ 618.382847] _do_fork+0x19e/0xce0 [ 618.386309] ? fork_idle+0x280/0x280 [ 618.390030] ? fput+0xd4/0x150 [ 618.393229] ? SyS_write+0x15e/0x230 [ 618.396953] SyS_clone+0x37/0x50 [ 618.400323] ? sys_vfork+0x30/0x30 [ 618.403871] do_syscall_64+0x1e8/0x640 [ 618.407763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 618.413226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 10:43:48 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:43:48 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3, 0x9}, 0x10) keyctl$link(0x8, r0, r1) 10:43:48 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 10:43:48 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) [ 618.418419] RIP: 0033:0x459ef9 [ 618.421599] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 618.429302] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 618.436577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 618.443859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 618.451142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 618.458442] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:48 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) r8 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) r9 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x400000) poll(&(0x7f0000000340)=[{r1, 0x1000}, {r2, 0x2002}, {r3, 0x220}, {r4}, {r5, 0x40}, {r6, 0xa0}, {r7, 0x100}, {r8, 0x8004}, {r9, 0x2000}], 0x9, 0x5) r10 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, r0) r11 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r10, r11) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="4367606abcd85ad5ff9a6cf5197af215ef80f53422159b330344c2e62e15f6a1bbd8a63969cfd2bfb226db711acdfb24faf5badc3fb8d3edde52a0d2", 0x3c, r0) 10:43:48 executing program 0 (fault-call:1 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:48 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) [ 618.696806] FAULT_INJECTION: forcing a failure. [ 618.696806] name failslab, interval 1, probability 0, space 0, times 0 [ 618.735578] CPU: 1 PID: 30374 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 618.742634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.751990] Call Trace: [ 618.754585] dump_stack+0x138/0x197 [ 618.758230] should_fail.cold+0x10f/0x159 [ 618.762392] should_failslab+0xdb/0x130 [ 618.766375] kmem_cache_alloc+0x2d7/0x780 [ 618.770535] alloc_vfsmnt+0x28/0x7d0 [ 618.774250] clone_mnt+0x70/0xee0 [ 618.777715] copy_tree+0x33b/0x8a0 [ 618.781266] copy_mnt_ns+0x11c/0x8c0 [ 618.785014] ? kmem_cache_alloc+0x611/0x780 [ 618.789339] ? check_preemption_disabled+0x3c/0x250 [ 618.794365] create_new_namespaces+0xc9/0x720 [ 618.798883] copy_namespaces+0x284/0x310 [ 618.802949] copy_process.part.0+0x2603/0x6a00 [ 618.807547] ? proc_fail_nth_write+0x7d/0x180 [ 618.812038] ? proc_cwd_link+0x1b0/0x1b0 [ 618.816089] ? __cleanup_sighand+0x50/0x50 [ 618.820342] ? lock_downgrade+0x740/0x740 [ 618.824472] _do_fork+0x19e/0xce0 [ 618.827905] ? fork_idle+0x280/0x280 [ 618.831604] ? check_preemption_disabled+0x3c/0x250 [ 618.836603] ? retint_kernel+0x2d/0x2d [ 618.840486] SyS_clone+0x37/0x50 [ 618.843852] ? sys_vfork+0x30/0x30 [ 618.847413] do_syscall_64+0x1e8/0x640 [ 618.851292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 618.856221] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 618.861392] RIP: 0033:0x459ef9 [ 618.864745] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 618.872447] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 618.879696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 618.886946] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:43:48 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3, 0x9}, 0x10) keyctl$link(0x8, r0, r1) 10:43:48 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) 10:43:48 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:48 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:48 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 618.894208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 618.901474] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:48 executing program 0 (fault-call:1 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:48 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3, 0x9}, 0x10) keyctl$link(0x8, r0, r1) 10:43:48 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x401, 0x0) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) keyctl$link(0x8, r0, r1) 10:43:48 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 619.124798] FAULT_INJECTION: forcing a failure. [ 619.124798] name failslab, interval 1, probability 0, space 0, times 0 [ 619.168666] CPU: 0 PID: 30400 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 619.175728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.175765] Call Trace: [ 619.175783] dump_stack+0x138/0x197 [ 619.175800] should_fail.cold+0x10f/0x159 [ 619.195775] should_failslab+0xdb/0x130 [ 619.199763] __kmalloc_track_caller+0x2ec/0x790 [ 619.205136] ? kstrdup_const+0x48/0x60 [ 619.205150] kstrdup+0x3a/0x70 [ 619.205161] kstrdup_const+0x48/0x60 [ 619.205174] alloc_vfsmnt+0xe5/0x7d0 [ 619.205184] clone_mnt+0x70/0xee0 [ 619.205197] ? lock_downgrade+0x740/0x740 [ 619.223116] copy_tree+0x33b/0x8a0 [ 619.223137] copy_mnt_ns+0x11c/0x8c0 [ 619.223149] ? kmem_cache_alloc+0x611/0x780 [ 619.223161] ? selinux_capable+0x36/0x40 [ 619.223175] create_new_namespaces+0xc9/0x720 [ 619.231098] ? ns_capable_common+0x12c/0x160 [ 619.231114] copy_namespaces+0x284/0x310 [ 619.231129] copy_process.part.0+0x2603/0x6a00 [ 619.231158] ? __cleanup_sighand+0x50/0x50 [ 619.231169] ? lock_downgrade+0x740/0x740 [ 619.231183] _do_fork+0x19e/0xce0 [ 619.243798] ? fork_idle+0x280/0x280 [ 619.243815] ? fput+0xd4/0x150 [ 619.243827] ? SyS_write+0x15e/0x230 [ 619.243842] SyS_clone+0x37/0x50 [ 619.243852] ? sys_vfork+0x30/0x30 [ 619.256965] do_syscall_64+0x1e8/0x640 [ 619.294704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.299579] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.304778] RIP: 0033:0x459ef9 [ 619.307971] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:48 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:48 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r3, 0x9}, 0x10) keyctl$link(0x8, r0, r1) 10:43:48 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:48 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 619.315694] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 619.322990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 619.330279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 619.337562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 619.344848] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:49 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r1, 0x9}, 0x10) 10:43:49 executing program 0 (fault-call:1 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:49 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:49 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 619.576794] FAULT_INJECTION: forcing a failure. [ 619.576794] name failslab, interval 1, probability 0, space 0, times 0 [ 619.614598] CPU: 0 PID: 30434 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 619.621649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.621655] Call Trace: [ 619.621671] dump_stack+0x138/0x197 [ 619.621689] should_fail.cold+0x10f/0x159 [ 619.621705] should_failslab+0xdb/0x130 [ 619.621718] __kmalloc_track_caller+0x2ec/0x790 [ 619.650082] ? kstrdup_const+0x48/0x60 [ 619.653989] kstrdup+0x3a/0x70 [ 619.657197] kstrdup_const+0x48/0x60 [ 619.660911] alloc_vfsmnt+0xe5/0x7d0 [ 619.660923] clone_mnt+0x70/0xee0 [ 619.660940] copy_tree+0x33b/0x8a0 [ 619.660957] copy_mnt_ns+0x11c/0x8c0 [ 619.660970] ? kmem_cache_alloc+0x611/0x780 [ 619.679664] create_new_namespaces+0xc9/0x720 [ 619.684166] ? ns_capable_common+0x12c/0x160 [ 619.688583] copy_namespaces+0x284/0x310 [ 619.692658] copy_process.part.0+0x2603/0x6a00 [ 619.697261] ? proc_fail_nth_write+0x7d/0x180 [ 619.701768] ? proc_cwd_link+0x1b0/0x1b0 [ 619.705853] ? __cleanup_sighand+0x50/0x50 [ 619.710098] ? lock_downgrade+0x740/0x740 [ 619.714261] _do_fork+0x19e/0xce0 [ 619.717726] ? fork_idle+0x280/0x280 [ 619.721449] ? fput+0xd4/0x150 [ 619.724646] ? SyS_write+0x15e/0x230 [ 619.728542] SyS_clone+0x37/0x50 [ 619.731906] ? sys_vfork+0x30/0x30 [ 619.735539] do_syscall_64+0x1e8/0x640 [ 619.739430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.744284] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 619.749479] RIP: 0033:0x459ef9 [ 619.752666] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 619.760375] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 619.767645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 619.774922] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 619.782197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 619.789473] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:49 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:43:49 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 0 (fault-call:1 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:49 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:49 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:49 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 620.120297] FAULT_INJECTION: forcing a failure. [ 620.120297] name failslab, interval 1, probability 0, space 0, times 0 [ 620.186059] CPU: 1 PID: 30471 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 620.193123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.202478] Call Trace: [ 620.205422] dump_stack+0x138/0x197 [ 620.209064] should_fail.cold+0x10f/0x159 [ 620.213221] should_failslab+0xdb/0x130 [ 620.217205] __kmalloc_track_caller+0x2ec/0x790 [ 620.221887] ? kstrdup_const+0x48/0x60 [ 620.225780] kstrdup+0x3a/0x70 [ 620.228975] kstrdup_const+0x48/0x60 [ 620.232689] alloc_vfsmnt+0xe5/0x7d0 [ 620.236403] clone_mnt+0x70/0xee0 [ 620.239854] ? lock_downgrade+0x740/0x740 [ 620.245307] copy_tree+0x33b/0x8a0 [ 620.248852] copy_mnt_ns+0x11c/0x8c0 [ 620.252563] ? kmem_cache_alloc+0x611/0x780 [ 620.256888] ? selinux_capable+0x36/0x40 [ 620.260969] create_new_namespaces+0xc9/0x720 [ 620.265467] ? ns_capable_common+0x12c/0x160 [ 620.269880] copy_namespaces+0x284/0x310 [ 620.273948] copy_process.part.0+0x2603/0x6a00 [ 620.278539] ? trace_hardirqs_on_caller+0x400/0x590 [ 620.283567] ? __cleanup_sighand+0x50/0x50 [ 620.287811] _do_fork+0x19e/0xce0 [ 620.291267] ? fork_idle+0x280/0x280 [ 620.294986] ? check_preemption_disabled+0x3c/0x250 [ 620.300015] ? retint_kernel+0x2d/0x2d [ 620.303920] SyS_clone+0x37/0x50 [ 620.307295] ? sys_vfork+0x30/0x30 [ 620.310834] do_syscall_64+0x1e8/0x640 [ 620.314706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 620.319555] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 620.324743] RIP: 0033:0x459ef9 [ 620.327932] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:49 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 620.335658] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 620.342931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 620.350231] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 620.357506] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 620.364780] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 0 (fault-call:1 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:50 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 620.633584] FAULT_INJECTION: forcing a failure. [ 620.633584] name failslab, interval 1, probability 0, space 0, times 0 [ 620.699693] CPU: 1 PID: 30505 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 620.706749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.716109] Call Trace: [ 620.718705] dump_stack+0x138/0x197 [ 620.722347] should_fail.cold+0x10f/0x159 [ 620.726507] should_failslab+0xdb/0x130 [ 620.730485] kmem_cache_alloc+0x2d7/0x780 [ 620.734627] ? find_held_lock+0x35/0x130 [ 620.734638] ? copy_tree+0x4a2/0x8a0 [ 620.734651] alloc_vfsmnt+0x28/0x7d0 [ 620.746108] clone_mnt+0x70/0xee0 [ 620.749568] ? lock_downgrade+0x740/0x740 [ 620.753731] copy_tree+0x33b/0x8a0 [ 620.757307] copy_mnt_ns+0x11c/0x8c0 [ 620.761027] ? kmem_cache_alloc+0x611/0x780 [ 620.765354] ? selinux_capable+0x36/0x40 [ 620.769424] create_new_namespaces+0xc9/0x720 [ 620.773915] ? ns_capable_common+0x12c/0x160 [ 620.773931] copy_namespaces+0x284/0x310 [ 620.773945] copy_process.part.0+0x2603/0x6a00 [ 620.773963] ? proc_fail_nth_write+0x7d/0x180 [ 620.782519] ? proc_cwd_link+0x1b0/0x1b0 [ 620.782540] ? __cleanup_sighand+0x50/0x50 [ 620.782553] ? lock_downgrade+0x740/0x740 [ 620.782569] _do_fork+0x19e/0xce0 [ 620.782586] ? fork_idle+0x280/0x280 [ 620.782600] ? fput+0xd4/0x150 [ 620.807888] ? SyS_write+0x15e/0x230 [ 620.807905] SyS_clone+0x37/0x50 [ 620.807915] ? sys_vfork+0x30/0x30 [ 620.825383] do_syscall_64+0x1e8/0x640 [ 620.829270] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 620.829287] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 620.829297] RIP: 0033:0x459ef9 [ 620.842495] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 620.850211] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 620.857488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 620.864784] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 620.872058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 620.881337] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:50 executing program 0 (fault-call:1 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:50 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:50 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) 10:43:50 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x404, 0x0) r2 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000240)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=r3) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=r3) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r4) 10:43:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:51 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) [ 621.345162] FAULT_INJECTION: forcing a failure. [ 621.345162] name failslab, interval 1, probability 0, space 0, times 0 [ 621.414371] CPU: 1 PID: 30551 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 621.423178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.432665] Call Trace: [ 621.435268] dump_stack+0x138/0x197 [ 621.438916] should_fail.cold+0x10f/0x159 [ 621.443081] should_failslab+0xdb/0x130 [ 621.447069] kmem_cache_alloc+0x2d7/0x780 [ 621.451233] alloc_vfsmnt+0x28/0x7d0 [ 621.454955] clone_mnt+0x70/0xee0 [ 621.458418] ? lock_downgrade+0x740/0x740 [ 621.462585] copy_tree+0x33b/0x8a0 [ 621.466136] copy_mnt_ns+0x11c/0x8c0 [ 621.469856] ? kmem_cache_alloc+0x611/0x780 [ 621.474184] create_new_namespaces+0xc9/0x720 [ 621.474196] ? ns_capable_common+0x12c/0x160 [ 621.474210] copy_namespaces+0x284/0x310 [ 621.474223] copy_process.part.0+0x2603/0x6a00 [ 621.474238] ? mark_held_locks+0xb1/0x100 [ 621.483570] ? trace_hardirqs_on_caller+0x400/0x590 [ 621.483591] ? __cleanup_sighand+0x50/0x50 [ 621.483600] ? lock_downgrade+0x740/0x740 [ 621.483617] _do_fork+0x19e/0xce0 10:43:51 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) [ 621.483632] ? fork_idle+0x280/0x280 [ 621.483648] ? fput+0xd4/0x150 [ 621.483657] ? SyS_write+0x15e/0x230 [ 621.483669] SyS_clone+0x37/0x50 [ 621.483678] ? sys_vfork+0x30/0x30 [ 621.483691] do_syscall_64+0x1e8/0x640 [ 621.535794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 621.540658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 621.545863] RIP: 0033:0x459ef9 [ 621.549052] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 621.556768] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 621.564041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 621.571341] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 621.578621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 621.585899] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:51 executing program 0 (fault-call:1 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:51 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'irlan0\x00', @ifru_addrs=@generic={0x8, "d781f0cae008889868560ef9fec1"}}}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) 10:43:51 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:51 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:51 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:51 executing program 2: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 621.816186] FAULT_INJECTION: forcing a failure. [ 621.816186] name failslab, interval 1, probability 0, space 0, times 0 10:43:51 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x4a0, 0x2a0, 0x140, 0x2a0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f0000000000), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="edee4ee803fe", @mac=@remote, @local, @rand_addr=0x12b9d4ff, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x9, 0x8, 0x0, 0x0, "f445e6202ca0f062049d094b3cab4ae280bcd0195ac1c4c1deedf7aa249e07fc5ece554264dbb07ae5cff3990dcf42314e3c9f28b9adbabc4f04b4260fa81af2"}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff9f, 0x9, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r5) [ 621.896077] CPU: 1 PID: 30589 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 621.903144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.912856] Call Trace: [ 621.915458] dump_stack+0x138/0x197 [ 621.919122] should_fail.cold+0x10f/0x159 [ 621.923467] should_failslab+0xdb/0x130 [ 621.927457] __kmalloc_track_caller+0x2ec/0x790 [ 621.932149] ? kstrdup_const+0x48/0x60 [ 621.936055] kstrdup+0x3a/0x70 [ 621.939249] kstrdup_const+0x48/0x60 10:43:51 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 621.943003] alloc_vfsmnt+0xe5/0x7d0 [ 621.946726] clone_mnt+0x70/0xee0 [ 621.950200] ? lock_downgrade+0x740/0x740 [ 621.954356] copy_tree+0x33b/0x8a0 [ 621.957915] copy_mnt_ns+0x11c/0x8c0 [ 621.961635] ? kmem_cache_alloc+0x611/0x780 [ 621.966313] ? selinux_capable+0x36/0x40 [ 621.966337] create_new_namespaces+0xc9/0x720 [ 621.974883] ? ns_capable_common+0x12c/0x160 [ 621.974897] copy_namespaces+0x284/0x310 [ 621.974910] copy_process.part.0+0x2603/0x6a00 [ 621.987939] ? proc_fail_nth_write+0x7d/0x180 [ 621.992448] ? proc_cwd_link+0x1b0/0x1b0 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 621.996718] ? __cleanup_sighand+0x50/0x50 [ 622.000972] ? lock_downgrade+0x740/0x740 [ 622.005141] _do_fork+0x19e/0xce0 [ 622.008985] ? fork_idle+0x280/0x280 [ 622.012716] ? fput+0xd4/0x150 [ 622.015932] ? SyS_write+0x15e/0x230 [ 622.019668] SyS_clone+0x37/0x50 [ 622.023041] ? sys_vfork+0x30/0x30 [ 622.026587] do_syscall_64+0x1e8/0x640 [ 622.030482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.035428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.040619] RIP: 0033:0x459ef9 [ 622.043835] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 622.051552] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 622.058832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 622.066198] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 622.073480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 622.080777] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:51 executing program 0 (fault-call:1 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:51 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x200, 0x4) 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:51 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='weyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) [ 622.209618] FAULT_INJECTION: forcing a failure. [ 622.209618] name failslab, interval 1, probability 0, space 0, times 0 [ 622.229871] CPU: 1 PID: 30621 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 622.236934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.246319] Call Trace: [ 622.248921] dump_stack+0x138/0x197 [ 622.252563] should_fail.cold+0x10f/0x159 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 622.256828] should_failslab+0xdb/0x130 [ 622.260820] kmem_cache_alloc+0x2d7/0x780 [ 622.264969] ? find_held_lock+0x35/0x130 [ 622.269123] ? copy_tree+0x4a2/0x8a0 [ 622.272848] alloc_vfsmnt+0x28/0x7d0 [ 622.276567] clone_mnt+0x70/0xee0 [ 622.280020] ? lock_downgrade+0x740/0x740 [ 622.284174] copy_tree+0x33b/0x8a0 [ 622.287722] copy_mnt_ns+0x11c/0x8c0 [ 622.291436] ? kmem_cache_alloc+0x611/0x780 [ 622.295764] ? selinux_capable+0x36/0x40 [ 622.299839] create_new_namespaces+0xc9/0x720 [ 622.304338] ? ns_capable_common+0x12c/0x160 10:43:51 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 622.308756] copy_namespaces+0x284/0x310 [ 622.312827] copy_process.part.0+0x2603/0x6a00 [ 622.317422] ? proc_fail_nth_write+0x7d/0x180 [ 622.321925] ? proc_cwd_link+0x1b0/0x1b0 [ 622.326020] ? __cleanup_sighand+0x50/0x50 [ 622.330287] ? lock_downgrade+0x740/0x740 [ 622.334455] ? retint_kernel+0x2d/0x2d [ 622.338437] _do_fork+0x19e/0xce0 [ 622.341898] ? fork_idle+0x280/0x280 [ 622.345622] ? retint_kernel+0x2d/0x2d [ 622.349530] SyS_clone+0x37/0x50 [ 622.352997] ? sys_vfork+0x30/0x30 [ 622.356556] do_syscall_64+0x1e8/0x640 10:43:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 622.360454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.365577] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.370775] RIP: 0033:0x459ef9 [ 622.373969] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 622.381776] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 622.389490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 622.396786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 622.404065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 622.411340] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:52 executing program 0 (fault-call:1 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:52 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000280)=""/156, &(0x7f0000000100)=0x9c) ptrace$cont(0x9, r2, 0x0, 0x0) waitid(0x0, r2, &(0x7f0000000040), 0x80000003, &(0x7f00000001c0)) keyctl$link(0x8, r0, r1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r4, 0x0, 0x0, 0x800000000002) ioctl$TIOCSBRK(r4, 0x5427) 10:43:52 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000001c0)=""/210) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) close(0xffffffffffffffff) keyctl$link(0x8, r0, r2) 10:43:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 622.593907] FAULT_INJECTION: forcing a failure. [ 622.593907] name failslab, interval 1, probability 0, space 0, times 0 [ 622.627142] CPU: 0 PID: 30655 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 622.634206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.643566] Call Trace: [ 622.646165] dump_stack+0x138/0x197 [ 622.649811] should_fail.cold+0x10f/0x159 [ 622.653975] should_failslab+0xdb/0x130 [ 622.657957] kmem_cache_alloc+0x2d7/0x780 [ 622.662112] ? find_held_lock+0x35/0x130 [ 622.666171] ? copy_tree+0x4a2/0x8a0 [ 622.666186] alloc_vfsmnt+0x28/0x7d0 [ 622.666198] clone_mnt+0x70/0xee0 [ 622.666207] ? lock_downgrade+0x740/0x740 [ 622.666220] copy_tree+0x33b/0x8a0 [ 622.673625] copy_mnt_ns+0x11c/0x8c0 [ 622.673645] create_new_namespaces+0xc9/0x720 [ 622.673655] ? ns_capable_common+0x12c/0x160 [ 622.673667] copy_namespaces+0x284/0x310 [ 622.701483] copy_process.part.0+0x2603/0x6a00 [ 622.706074] ? check_preemption_disabled+0x3c/0x250 [ 622.711096] ? retint_kernel+0x2d/0x2d [ 622.715003] ? __cleanup_sighand+0x50/0x50 [ 622.719244] ? lock_downgrade+0x740/0x740 [ 622.723401] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 622.728189] _do_fork+0x19e/0xce0 [ 622.731707] ? fork_idle+0x280/0x280 [ 622.735550] ? fput+0xd4/0x150 [ 622.738750] ? SyS_write+0x15e/0x230 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 622.742469] SyS_clone+0x37/0x50 [ 622.745837] ? sys_vfork+0x30/0x30 [ 622.749385] do_syscall_64+0x1e8/0x640 [ 622.753272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.753291] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 622.753300] RIP: 0033:0x459ef9 [ 622.763304] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 622.763315] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 622.763321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 622.763327] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 622.763333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 622.763339] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:52 executing program 0 (fault-call:1 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:52 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pread64(r4, 0x0, 0x7c3feaf6, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)={0x3}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000080), 0x0, 0xffffffff}) 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 622.975861] FAULT_INJECTION: forcing a failure. [ 622.975861] name failslab, interval 1, probability 0, space 0, times 0 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x48080, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7ff}, 0x1c) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) [ 623.055505] CPU: 1 PID: 30694 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 623.062576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.071944] Call Trace: [ 623.074541] dump_stack+0x138/0x197 [ 623.078183] ? vprintk_func+0x65/0x159 [ 623.082079] should_fail.cold+0x10f/0x159 [ 623.086235] should_failslab+0xdb/0x130 [ 623.090212] __kmalloc_track_caller+0x2ec/0x790 [ 623.094891] ? kstrdup_const+0x48/0x60 [ 623.098779] kstrdup+0x3a/0x70 [ 623.101973] kstrdup_const+0x48/0x60 [ 623.105684] alloc_vfsmnt+0xe5/0x7d0 [ 623.109389] clone_mnt+0x70/0xee0 [ 623.112831] ? lock_downgrade+0x740/0x740 [ 623.112846] copy_tree+0x33b/0x8a0 [ 623.112863] copy_mnt_ns+0x11c/0x8c0 [ 623.112873] ? kmem_cache_alloc+0x611/0x780 [ 623.112884] ? cred_has_capability+0x142/0x290 [ 623.112900] create_new_namespaces+0xc9/0x720 [ 623.112910] ? ns_capable_common+0x12c/0x160 [ 623.112921] copy_namespaces+0x284/0x310 [ 623.112934] copy_process.part.0+0x2603/0x6a00 [ 623.112951] ? proc_fail_nth_write+0x7d/0x180 [ 623.137683] ? proc_cwd_link+0x1b0/0x1b0 [ 623.137708] ? __cleanup_sighand+0x50/0x50 [ 623.163457] ? lock_downgrade+0x740/0x740 [ 623.167616] _do_fork+0x19e/0xce0 [ 623.171076] ? fork_idle+0x280/0x280 [ 623.174793] ? fput+0xd4/0x150 [ 623.177991] ? SyS_write+0x15e/0x230 [ 623.181709] SyS_clone+0x37/0x50 [ 623.185075] ? sys_vfork+0x30/0x30 [ 623.188625] do_syscall_64+0x1e8/0x640 [ 623.192521] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.197372] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.202562] RIP: 0033:0x459ef9 10:43:52 executing program 0 (fault-call:1 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:52 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) write$P9_RLERROR(r2, &(0x7f0000000000)={0x16, 0x7, 0x2, {0xd, 'security..%lo'}}, 0x16) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)={0xff, 0x6, "b90c89fc746d7676b0f6313b4f963aef04600c417c4c4e42d16db9e01f430b9a93b3923b6584e605d697540ee18029b7dbe3d59bdae4d110d194c6bc46ebf08fd30bcc8ff161939b4e36060f144533d2bb0e18abf809dfa910f2dccee7721e981354d65d8b6d890d86dac60551a316b89a7f5f3c80c745e35eda140cd4d0aa4f1333cc8dfd2648daa7e98bcabc5da2216b56a5aa584929ce09f0d22ffab055e8c5c455b53194db295a9784bcc44bffbc0dc0292890d2413a9d04269be0275258d781f8dc2b69913bffb56071cd5aaa5ff309059843670ff56f709692c36e6e649190ea5c47decf1d26f190857da80449f9ae159a5bf934"}, 0x2501) keyctl$link(0x8, r0, r3) 10:43:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:52 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.205757] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 623.213459] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 623.213464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 623.213469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.213473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 623.213478] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x8000, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2888}, {r2, 0x40}], 0x2, &(0x7f0000000080), &(0x7f0000000100)={0x4}, 0x8) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r3) [ 623.336047] FAULT_INJECTION: forcing a failure. [ 623.336047] name failslab, interval 1, probability 0, space 0, times 0 [ 623.355975] CPU: 1 PID: 30727 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 623.363030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.363035] Call Trace: [ 623.363052] dump_stack+0x138/0x197 [ 623.363071] should_fail.cold+0x10f/0x159 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 623.363085] should_failslab+0xdb/0x130 [ 623.363095] kmem_cache_alloc+0x2d7/0x780 [ 623.363110] ? find_held_lock+0x35/0x130 [ 623.395058] ? copy_tree+0x4a2/0x8a0 [ 623.398786] alloc_vfsmnt+0x28/0x7d0 [ 623.402506] clone_mnt+0x70/0xee0 [ 623.405958] ? lock_downgrade+0x740/0x740 [ 623.410112] copy_tree+0x33b/0x8a0 [ 623.413659] copy_mnt_ns+0x11c/0x8c0 [ 623.417377] ? kmem_cache_alloc+0x611/0x780 [ 623.421700] ? selinux_capable+0x36/0x40 [ 623.421718] create_new_namespaces+0xc9/0x720 [ 623.421728] ? ns_capable_common+0x12c/0x160 10:43:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.421739] copy_namespaces+0x284/0x310 [ 623.421752] copy_process.part.0+0x2603/0x6a00 [ 623.421770] ? proc_fail_nth_write+0x7d/0x180 [ 623.421779] ? proc_cwd_link+0x1b0/0x1b0 [ 623.421800] ? __cleanup_sighand+0x50/0x50 [ 623.421811] ? lock_downgrade+0x740/0x740 [ 623.421826] _do_fork+0x19e/0xce0 [ 623.421839] ? fork_idle+0x280/0x280 [ 623.421854] ? fput+0xd4/0x150 [ 623.421864] ? SyS_write+0x15e/0x230 [ 623.421878] SyS_clone+0x37/0x50 [ 623.421887] ? sys_vfork+0x30/0x30 [ 623.421899] do_syscall_64+0x1e8/0x640 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.421907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.421922] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.421930] RIP: 0033:0x459ef9 [ 623.421935] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 623.421947] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 623.438970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 623.438977] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.438983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 10:43:53 executing program 0 (fault-call:1 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:53 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.438989] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f00000001c0)={0xff, 0x2}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="89e7b47974a1f43f146e7a1febc4662165bf31492c", 0x15, r2) keyctl$negate(0xd, r3, 0x8, 0xfffffffffffffff9) 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 623.683848] FAULT_INJECTION: forcing a failure. [ 623.683848] name failslab, interval 1, probability 0, space 0, times 0 10:43:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.729422] CPU: 0 PID: 30757 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 623.736481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.745866] Call Trace: [ 623.748905] dump_stack+0x138/0x197 [ 623.752561] should_fail.cold+0x10f/0x159 [ 623.756734] should_failslab+0xdb/0x130 [ 623.760722] __kmalloc_track_caller+0x2ec/0x790 [ 623.765406] ? kstrdup_const+0x48/0x60 [ 623.769307] kstrdup+0x3a/0x70 [ 623.772510] kstrdup_const+0x48/0x60 [ 623.776230] alloc_vfsmnt+0xe5/0x7d0 10:43:53 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r0, 0x8) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) keyctl$link(0x8, r0, r0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4c101, 0x0) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 623.779951] clone_mnt+0x70/0xee0 [ 623.783410] ? lock_downgrade+0x740/0x740 [ 623.787565] copy_tree+0x33b/0x8a0 [ 623.791116] copy_mnt_ns+0x11c/0x8c0 [ 623.794835] create_new_namespaces+0xc9/0x720 [ 623.799334] ? ns_capable_common+0x12c/0x160 [ 623.803747] copy_namespaces+0x284/0x310 [ 623.807818] copy_process.part.0+0x2603/0x6a00 [ 623.812409] ? proc_fail_nth_write+0x7d/0x180 [ 623.813066] QAT: Invalid ioctl [ 623.816901] ? proc_cwd_link+0x1b0/0x1b0 [ 623.816953] ? __cleanup_sighand+0x50/0x50 [ 623.816967] ? lock_downgrade+0x740/0x740 [ 623.832611] _do_fork+0x19e/0xce0 [ 623.834477] QAT: Invalid ioctl [ 623.836072] ? fork_idle+0x280/0x280 [ 623.836089] ? fput+0xd4/0x150 [ 623.836100] ? SyS_write+0x15e/0x230 [ 623.836115] SyS_clone+0x37/0x50 [ 623.853234] ? sys_vfork+0x30/0x30 [ 623.856787] do_syscall_64+0x1e8/0x640 [ 623.860679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.865526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 623.870712] RIP: 0033:0x459ef9 [ 623.873897] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 623.881614] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 623.888886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 623.896165] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.903430] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 623.910714] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:53 executing program 0 (fault-call:1 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:53 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r5, 0x0) stat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xd41adfb, 0x7, &(0x7f0000003380)=[{&(0x7f00000001c0)="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", 0x1000, 0x4}, {&(0x7f00000011c0)="f75556989201fbd1564a2d6480eeda38d5ca9849ae8ef5c65ba9c7fd98737c980d11b88508e92dc82eb221516c5f50a79193cd2fbd460a4032d3c9ffe52744cb76fcc1e9590d8075706825bb01f7db2cb80f03c12c458727a06926fa15422ead333c6b50ccb0812c771058d81606ee5031a56115ef3a072729c8fb0356ff3931c3fbc1b8126a462d3430255129ca45db872c125822f1503de38780720c313fff7bbaf3c9ea3c579171a107c64d3850d1976eb57c3050", 0xb6, 0x5}, {&(0x7f0000000080)="522e9bb34bc39e442aa9caab54ab1d4033015a62e46b3c90db581712ad07915217a88a48593ddc407bdc751587caee8073ec920c24b672b6c35e678e", 0x3c, 0x2}, {&(0x7f0000000100)="a537dab14fa87213f0e88bbc59c106a404f3b23b6eef718b0f65feacda37702dfdf2b3d6f3d066a5", 0x28, 0x7f}, {&(0x7f0000001280)="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", 0xfe, 0x6b80}, {&(0x7f0000001380)="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", 0x1000, 0x2}, {&(0x7f0000002380)="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", 0x1000, 0xabbc951}], 0x4000, &(0x7f00000036c0)=ANY=[@ANYBLOB="6469725f756d61303030303030305500583e696f636861727365743d69736f383835392d31332c756d617372c130a098606b3d30303030303030303030303030303030303030323030312c756d61736b3d30303030f92d70303030303030303030303030303337372c636f646570692c657569643d47a99db34be46d87b2795ccd496f2093a91dba26f70e066dbe6e257af5d9c97677a104000000b67ad6288c8af7f9bd789dabbdb25be0489d2852462917137e643ea42803b02dea233520222fc95d452fad9f171679eff3", @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC=r5, @ANYBLOB=',obj_user=syz,defcontext=user_u,subj_user=syz,uid=', @ANYRESDEC=r6, @ANYBLOB=',mask=^MAY_WRITE,euid=', @ANYRESDEC=r7, @ANYBLOB=',fsname=trustedbdev,posix_acl_access},\x00']) keyctl$link(0x8, r0, r1) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:53 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:53 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0xfffffdfb) keyctl$get_security(0x11, r1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, r0, r3) [ 624.125025] FAULT_INJECTION: forcing a failure. [ 624.125025] name failslab, interval 1, probability 0, space 0, times 0 [ 624.180954] CPU: 1 PID: 30808 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 624.188012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.197368] Call Trace: [ 624.199966] dump_stack+0x138/0x197 [ 624.203610] should_fail.cold+0x10f/0x159 [ 624.207769] should_failslab+0xdb/0x130 [ 624.211751] kmem_cache_alloc+0x2d7/0x780 [ 624.215899] ? find_held_lock+0x35/0x130 [ 624.219964] ? copy_tree+0x4a2/0x8a0 [ 624.223676] alloc_vfsmnt+0x28/0x7d0 [ 624.227402] clone_mnt+0x70/0xee0 [ 624.230856] ? lock_downgrade+0x740/0x740 [ 624.235007] copy_tree+0x33b/0x8a0 [ 624.238545] copy_mnt_ns+0x11c/0x8c0 [ 624.242245] ? kmem_cache_alloc+0x611/0x780 [ 624.246560] ? selinux_capable+0x36/0x40 [ 624.250671] create_new_namespaces+0xc9/0x720 [ 624.255153] ? ns_capable_common+0x12c/0x160 [ 624.259541] copy_namespaces+0x284/0x310 [ 624.263594] copy_process.part.0+0x2603/0x6a00 [ 624.268604] ? proc_fail_nth_write+0x7d/0x180 [ 624.273076] ? proc_cwd_link+0x1b0/0x1b0 [ 624.277120] ? __cleanup_sighand+0x50/0x50 [ 624.281345] ? lock_downgrade+0x740/0x740 [ 624.285586] _do_fork+0x19e/0xce0 [ 624.289035] ? fork_idle+0x280/0x280 [ 624.292741] ? fput+0xd4/0x150 [ 624.295918] ? SyS_write+0x15e/0x230 [ 624.299626] SyS_clone+0x37/0x50 [ 624.302989] ? sys_vfork+0x30/0x30 [ 624.306533] do_syscall_64+0x1e8/0x640 [ 624.310407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 624.315235] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.320407] RIP: 0033:0x459ef9 [ 624.323591] RSP: 002b:00007f7d943e0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 624.331290] RAX: ffffffffffffffda RBX: 00007f7d943e0c90 RCX: 0000000000459ef9 [ 624.338542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 624.345816] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 624.353066] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d943e16d4 [ 624.360322] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000003 10:43:54 executing program 0 (fault-call:1 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, 0x0, 0x0, 0x800000000002) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000000)={0x7, 0x0, 0x5, 0x100}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 624.532160] FAULT_INJECTION: forcing a failure. [ 624.532160] name failslab, interval 1, probability 0, space 0, times 0 [ 624.563026] CPU: 1 PID: 30835 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 624.570077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.579433] Call Trace: [ 624.582029] dump_stack+0x138/0x197 [ 624.585668] should_fail.cold+0x10f/0x159 [ 624.589825] should_failslab+0xdb/0x130 [ 624.593810] __kmalloc_track_caller+0x2ec/0x790 [ 624.598627] ? kstrdup_const+0x48/0x60 [ 624.602519] kstrdup+0x3a/0x70 [ 624.606666] kstrdup_const+0x48/0x60 [ 624.610368] alloc_vfsmnt+0xe5/0x7d0 [ 624.610379] clone_mnt+0x70/0xee0 [ 624.610393] copy_tree+0x33b/0x8a0 [ 624.610409] copy_mnt_ns+0x11c/0x8c0 [ 624.610426] create_new_namespaces+0xc9/0x720 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x0, 0x0, &(0x7f0000000100)=0xd4) [ 624.610437] ? ns_capable_common+0x12c/0x160 [ 624.610449] copy_namespaces+0x284/0x310 [ 624.610463] copy_process.part.0+0x2603/0x6a00 [ 624.642715] ? proc_fail_nth_write+0x7d/0x180 [ 624.647215] ? proc_cwd_link+0x1b0/0x1b0 [ 624.651301] ? __cleanup_sighand+0x50/0x50 [ 624.655538] ? lock_downgrade+0x740/0x740 [ 624.659698] _do_fork+0x19e/0xce0 [ 624.663163] ? fork_idle+0x280/0x280 [ 624.666885] ? fput+0xd4/0x150 [ 624.670073] ? SyS_write+0x15e/0x230 [ 624.670088] SyS_clone+0x37/0x50 [ 624.670096] ? sys_vfork+0x30/0x30 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 624.670108] do_syscall_64+0x1e8/0x640 [ 624.670116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 624.670132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 624.670140] RIP: 0033:0x459ef9 [ 624.670147] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 [ 624.677200] ORIG_RAX: 0000000000000038 [ 624.677207] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 624.677212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 624.677220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 624.728916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 624.736202] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:54 executing program 0 (fault-call:1 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:54 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='keyring\x00', 0xfffffffffffffffd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000000)={0x4, 0x6, 0xfffffe01, 0x7fff}) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, r1) keyctl$link(0x8, r0, r4) 10:43:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x0, 0x0, &(0x7f0000000100)=0xd4) 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r2) keyctl$link(0x8, r0, r3) 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x0, 0x0, &(0x7f0000000100)=0xd4) 10:43:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 624.992394] FAULT_INJECTION: forcing a failure. [ 624.992394] name failslab, interval 1, probability 0, space 0, times 0 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 625.052774] CPU: 0 PID: 30874 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 625.059836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.069205] Call Trace: [ 625.071805] dump_stack+0x138/0x197 [ 625.075444] should_fail.cold+0x10f/0x159 [ 625.079604] should_failslab+0xdb/0x130 [ 625.083579] kmem_cache_alloc+0x2d7/0x780 [ 625.083593] ? find_held_lock+0x35/0x130 [ 625.083604] ? copy_tree+0x4a2/0x8a0 [ 625.083615] alloc_vfsmnt+0x28/0x7d0 [ 625.091801] clone_mnt+0x70/0xee0 [ 625.091812] ? lock_downgrade+0x740/0x740 [ 625.091829] copy_tree+0x33b/0x8a0 [ 625.091846] copy_mnt_ns+0x11c/0x8c0 [ 625.091855] ? kmem_cache_alloc+0x611/0x780 [ 625.091866] ? selinux_capable+0x37/0x40 [ 625.091885] create_new_namespaces+0xc9/0x720 [ 625.126898] ? ns_capable_common+0x12c/0x160 [ 625.131318] copy_namespaces+0x284/0x310 [ 625.135384] copy_process.part.0+0x2603/0x6a00 [ 625.139950] ? proc_fail_nth_write+0xf7/0x180 [ 625.144428] ? proc_fail_nth_write+0x134/0x180 [ 625.148991] ? proc_fail_nth_write+0x7d/0x180 [ 625.153477] ? proc_cwd_link+0x1b0/0x1b0 [ 625.157527] ? __cleanup_sighand+0x50/0x50 [ 625.161852] ? lock_downgrade+0x740/0x740 [ 625.166002] _do_fork+0x19e/0xce0 [ 625.169442] ? fork_idle+0x280/0x280 [ 625.173144] ? fput+0xd4/0x150 [ 625.176324] ? SyS_write+0x15e/0x230 [ 625.180028] SyS_clone+0x37/0x50 [ 625.183379] ? sys_vfork+0x30/0x30 [ 625.186917] do_syscall_64+0x1e8/0x640 [ 625.190788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 625.195618] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.200787] RIP: 0033:0x459ef9 [ 625.203955] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 625.211645] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 625.218897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 625.226147] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 625.233396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 625.240656] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:54 executing program 0 (fault-call:1 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, 0x0) 10:43:54 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:54 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'\x00\x06\x00', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) keyctl$link(0x8, r2, r0) 10:43:54 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, 0x0) 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x31a00) keyctl$link(0x8, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0xfffffffc, 0x0, [], {0x0, @reserved}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='m-c\x00\xc4\x00\x00\x00\x00\x00\x00\x04\x10\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@random={'trusted.', '/dev/input/event#\x00'}, &(0x7f0000000400)=""/72, 0x48) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000040)={0x32ed, "acc3e3a4e0ef61e94fddee9133f2ecc7e470982ea0012829c1a744665d44706d", 0x2, 0x1}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000002c0)={0x958bedfe236425f4, 0x0, 0x400, [], &(0x7f0000000280)={0x13013ba, 0xfff, [], @p_u8=&(0x7f0000000100)=0x7}}) ioctl$KDDISABIO(r3, 0x4b37) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r6, 0x0, 0x0, 0x800000000002) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000480)={'syzkaller0\x00', 0x4, 0x7f}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) getsockopt$sock_buf(r5, 0x1, 0x77f18c43a9c597bf, &(0x7f0000000300)=""/68, &(0x7f0000000380)=0x44) 10:43:55 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 625.492099] FAULT_INJECTION: forcing a failure. [ 625.492099] name failslab, interval 1, probability 0, space 0, times 0 [ 625.541966] CPU: 0 PID: 30910 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 625.549022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.558378] Call Trace: [ 625.560987] dump_stack+0x138/0x197 [ 625.564640] should_fail.cold+0x10f/0x159 [ 625.568816] should_failslab+0xdb/0x130 [ 625.572798] __kmalloc_track_caller+0x2ec/0x790 [ 625.577470] ? kstrdup_const+0x48/0x60 [ 625.581368] kstrdup+0x3a/0x70 [ 625.584563] kstrdup_const+0x48/0x60 [ 625.588276] alloc_vfsmnt+0xe5/0x7d0 [ 625.591987] clone_mnt+0x70/0xee0 [ 625.595437] ? lock_downgrade+0x740/0x740 [ 625.599585] copy_tree+0x33b/0x8a0 [ 625.599605] copy_mnt_ns+0x11c/0x8c0 [ 625.599615] ? kmem_cache_alloc+0x611/0x780 [ 625.599626] ? selinux_capable+0x36/0x40 [ 625.606863] create_new_namespaces+0xc9/0x720 [ 625.606874] ? ns_capable_common+0x12c/0x160 [ 625.606886] copy_namespaces+0x284/0x310 [ 625.606899] copy_process.part.0+0x2603/0x6a00 [ 625.632739] ? proc_fail_nth_write+0x7d/0x180 [ 625.637242] ? proc_cwd_link+0x1b0/0x1b0 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) [ 625.641318] ? __cleanup_sighand+0x50/0x50 [ 625.645561] ? lock_downgrade+0x740/0x740 [ 625.649722] _do_fork+0x19e/0xce0 [ 625.653180] ? fork_idle+0x280/0x280 [ 625.656892] ? fput+0xd4/0x150 [ 625.660082] ? SyS_write+0x15e/0x230 [ 625.663845] SyS_clone+0x37/0x50 [ 625.667210] ? sys_vfork+0x30/0x30 [ 625.670755] do_syscall_64+0x1e8/0x640 [ 625.674640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 625.679490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 625.684677] RIP: 0033:0x459ef9 10:43:55 executing program 0 (fault-call:1 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:55 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:43:55 executing program 4: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) keyctl$link(0x8, r2, r1) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x7, &(0x7f00000001c0)=""/4096) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x1, 0x0, 0x0) 10:43:55 executing program 1: geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 625.687863] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 625.695567] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 625.702826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 625.702832] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 625.702838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 625.702843] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:43:55 executing program 1: geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:55 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:43:55 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) [ 625.870350] FAULT_INJECTION: forcing a failure. [ 625.870350] name failslab, interval 1, probability 0, space 0, times 0 10:43:55 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x7c99f071305c59e6, 0x0) r3 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x5, 0x4, 0xff, 0x7fff}, 0x3, 0x0, 0x7, r3, 0x2, 0x40, 'syz0\x00', &(0x7f0000000040)=['syz', 'keyring\x00'], 0xb, [], [0x6f, 0xe60, 0x3, 0x9]}) [ 625.931720] CPU: 0 PID: 30947 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 625.938792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.948161] Call Trace: [ 625.950762] dump_stack+0x138/0x197 [ 625.954410] should_fail.cold+0x10f/0x159 [ 625.958566] should_failslab+0xdb/0x130 [ 625.962544] kmem_cache_alloc+0x2d7/0x780 [ 625.966695] ? find_held_lock+0x35/0x130 [ 625.970761] ? copy_tree+0x4a2/0x8a0 [ 625.974482] alloc_vfsmnt+0x28/0x7d0 [ 625.978185] clone_mnt+0x70/0xee0 [ 625.981639] ? lock_downgrade+0x740/0x740 [ 625.985801] copy_tree+0x33b/0x8a0 [ 625.989353] copy_mnt_ns+0x11c/0x8c0 [ 625.993076] create_new_namespaces+0xc9/0x720 [ 625.997668] copy_namespaces+0x284/0x310 [ 626.001736] copy_process.part.0+0x2603/0x6a00 [ 626.006338] ? proc_fail_nth_write+0x7d/0x180 [ 626.010832] ? proc_cwd_link+0x1b0/0x1b0 [ 626.014904] ? __cleanup_sighand+0x50/0x50 [ 626.019145] ? trace_hardirqs_on_caller+0x400/0x590 [ 626.024256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 626.029029] _do_fork+0x19e/0xce0 [ 626.032489] ? fork_idle+0x280/0x280 [ 626.036208] ? SyS_write+0x159/0x230 [ 626.039921] ? __sanitizer_cov_trace_pc+0x31/0x60 [ 626.044774] ? SyS_write+0x15e/0x230 [ 626.048492] SyS_clone+0x37/0x50 [ 626.051843] ? sys_vfork+0x30/0x30 [ 626.051855] do_syscall_64+0x1e8/0x640 [ 626.051864] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.051880] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 626.051887] RIP: 0033:0x459ef9 [ 626.051892] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 626.080164] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 626.087415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 626.094665] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 626.101915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 626.109165] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:55 executing program 0 (fault-call:1 fault-nth:41): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:55 executing program 1: geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e24, 0x37, @ipv4={[], [], @rand_addr=0x3}, 0x20}}}, 0x80) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r2, r3) 10:43:55 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:43:55 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:43:55 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) [ 626.252433] FAULT_INJECTION: forcing a failure. [ 626.252433] name failslab, interval 1, probability 0, space 0, times 0 10:43:55 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:55 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r1, 0x0, 0x0, 0x800000000002) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x7, &(0x7f0000000100)=[{0x800, 0x80, 0x4, 0x6b6e}, {0x1f, 0x7, 0x6, 0xfffffffe}, {0x6, 0xff, 0x1c, 0x80000001}, {0x3, 0x15, 0xa5, 0x2}, {0x4, 0x3, 0x8, 0x8000}, {0x81, 0x7, 0x20, 0x610}, {0x0, 0x52, 0x3, 0x9}]}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xbd, @dev={0xfe, 0x80, [], 0xb}, 0x80}, @in6={0xa, 0x4e20, 0x7, @remote, 0x4}], 0x38) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x84100, 0x0) close(r4) 10:43:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 626.387247] CPU: 1 PID: 30983 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 626.394306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.403665] Call Trace: [ 626.406266] dump_stack+0x138/0x197 [ 626.409908] should_fail.cold+0x10f/0x159 [ 626.414064] should_failslab+0xdb/0x130 [ 626.418045] __kmalloc_track_caller+0x2ec/0x790 [ 626.422720] ? kstrdup_const+0x48/0x60 [ 626.426638] kstrdup+0x3a/0x70 [ 626.429834] kstrdup_const+0x48/0x60 [ 626.433559] alloc_vfsmnt+0xe5/0x7d0 [ 626.437276] clone_mnt+0x70/0xee0 [ 626.440728] ? lock_downgrade+0x740/0x740 [ 626.444889] copy_tree+0x33b/0x8a0 [ 626.448437] copy_mnt_ns+0x11c/0x8c0 [ 626.452163] create_new_namespaces+0xc9/0x720 [ 626.456671] copy_namespaces+0x284/0x310 [ 626.460734] copy_process.part.0+0x2603/0x6a00 [ 626.465306] ? retint_kernel+0x2d/0x2d [ 626.465320] ? trace_hardirqs_on_caller+0x400/0x590 [ 626.465348] ? __cleanup_sighand+0x50/0x50 [ 626.465358] ? lock_downgrade+0x740/0x740 [ 626.482605] _do_fork+0x19e/0xce0 [ 626.486062] ? fork_idle+0x280/0x280 [ 626.489776] ? fput+0xd4/0x150 [ 626.492975] ? SyS_write+0x15e/0x230 [ 626.496695] SyS_clone+0x37/0x50 [ 626.500064] ? sys_vfork+0x30/0x30 [ 626.503605] do_syscall_64+0x1e8/0x640 [ 626.507496] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.512345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 626.517526] RIP: 0033:0x459ef9 [ 626.520701] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 626.528417] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:56 executing program 0 (fault-call:1 fault-nth:42): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:56 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:56 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) getpgid(r2) [ 626.536130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 626.543399] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 626.550669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 626.557940] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 626.693576] FAULT_INJECTION: forcing a failure. [ 626.693576] name failslab, interval 1, probability 0, space 0, times 0 [ 626.759590] CPU: 1 PID: 31017 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 626.766638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.775990] Call Trace: [ 626.778582] dump_stack+0x138/0x197 [ 626.782252] should_fail.cold+0x10f/0x159 [ 626.786408] should_failslab+0xdb/0x130 [ 626.790404] kmem_cache_alloc+0x2d7/0x780 [ 626.794551] ? find_held_lock+0x35/0x130 [ 626.798618] ? copy_tree+0x4a2/0x8a0 [ 626.802337] alloc_vfsmnt+0x28/0x7d0 [ 626.806055] clone_mnt+0x70/0xee0 10:43:56 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 626.809512] ? lock_downgrade+0x740/0x740 [ 626.813670] copy_tree+0x33b/0x8a0 [ 626.817219] copy_mnt_ns+0x11c/0x8c0 [ 626.820932] ? kmem_cache_alloc+0x611/0x780 [ 626.825257] ? check_preemption_disabled+0x3c/0x250 [ 626.830273] ? retint_kernel+0x2d/0x2d [ 626.834162] create_new_namespaces+0xc9/0x720 [ 626.838659] copy_namespaces+0x284/0x310 [ 626.842719] copy_process.part.0+0x2603/0x6a00 [ 626.847311] ? check_preemption_disabled+0x3c/0x250 [ 626.852327] ? retint_kernel+0x2d/0x2d 10:43:56 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 626.856227] ? __cleanup_sighand+0x50/0x50 [ 626.860458] ? lock_downgrade+0x740/0x740 [ 626.864610] _do_fork+0x19e/0xce0 [ 626.868071] ? fork_idle+0x280/0x280 [ 626.871792] ? fput+0xd4/0x150 [ 626.874983] ? SyS_write+0x15e/0x230 [ 626.878702] SyS_clone+0x37/0x50 [ 626.882065] ? sys_vfork+0x30/0x30 [ 626.885606] do_syscall_64+0x1e8/0x640 [ 626.889493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.894345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 626.899556] RIP: 0033:0x459ef9 [ 626.902746] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, 0x0, &(0x7f0000000100)=0xd4) [ 626.910456] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 626.917724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 626.924997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 626.932261] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 626.939530] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:56 executing program 0 (fault-call:1 fault-nth:43): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:56 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$get_security(0x11, r4, 0x0, 0x6e24f62ae5781019) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r5, 0x0, 0x0, 0x800000000002) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000200)={0x0, 0x24d, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r8, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x10) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6994a11a}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b7fe8880d0b00f0dc0d46e7ca67ea511c0aedc68553899b4c60033c4ffb385e13654e3d515b3275a0ec455bf0eca8e6c4c0e1925c23625e03e0ac2be49c5bacd", @ANYRES16=r8, @ANYBLOB="000326bd7000fddbdf250e0000003400090008000200850c000008000100080000000800010081000000080002000400000008000100a70b00000800020005000000340004001400010062726f6164636173742d6c696e6b00001c00070008000200050000000800020004000000080002000800000024000600040002000800010096cd00000400020008000100fffbffff080001000800000014000100100001007564703a737a31000000001c00060004000200080001000000000004000200040002000400020090000100100001008f9fe74b73797a3000000000100001007564703a73797a3100000000100001006574683a64756d6d79300000100001007564703a73797a3100000000100001007564703a73797a31000000001400010069623a7465616d5f736c6176655f3000100001007564703a73797a31000000000800030010000000100001007564703a73797a300000000000"], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendto$inet(r5, &(0x7f0000000200)="1632ce2f4bc9adbd4bcd383ba68bb0a3505d4da39557a488aecac0", 0x1b, 0x4048800, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='keyring\x00', r2) 10:43:56 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:56 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:43:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) 10:43:56 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) [ 627.171842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45264 sclass=netlink_tcpdiag_socket pig=31045 comm=syz-executor.4 10:43:56 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:56 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 627.251687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45264 sclass=netlink_tcpdiag_socket pig=31059 comm=syz-executor.4 [ 627.255741] FAULT_INJECTION: forcing a failure. [ 627.255741] name failslab, interval 1, probability 0, space 0, times 0 [ 627.403282] CPU: 0 PID: 31053 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 627.410330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.410335] Call Trace: [ 627.410350] dump_stack+0x138/0x197 [ 627.410365] should_fail.cold+0x10f/0x159 [ 627.410379] should_failslab+0xdb/0x130 [ 627.410392] __kmalloc_track_caller+0x2ec/0x790 [ 627.410403] ? kstrdup+0x1f/0x70 [ 627.410414] ? strlen+0x23/0xa0 [ 627.410422] ? kstrdup_const+0x48/0x60 [ 627.410432] kstrdup+0x3a/0x70 [ 627.410442] kstrdup_const+0x48/0x60 [ 627.410454] alloc_vfsmnt+0xe5/0x7d0 [ 627.410465] clone_mnt+0x70/0xee0 [ 627.410475] ? lock_downgrade+0x740/0x740 [ 627.410488] copy_tree+0x33b/0x8a0 [ 627.410506] copy_mnt_ns+0x11c/0x8c0 [ 627.410514] ? kmem_cache_alloc+0x611/0x780 [ 627.410526] ? selinux_capable+0x36/0x40 [ 627.410540] create_new_namespaces+0xc9/0x720 [ 627.410550] ? ns_capable_common+0x12c/0x160 [ 627.422465] copy_namespaces+0x284/0x310 [ 627.422480] copy_process.part.0+0x2603/0x6a00 [ 627.422492] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 627.505245] ? proc_fail_nth_write+0x7d/0x180 [ 627.509729] ? proc_cwd_link+0x1b0/0x1b0 [ 627.513803] ? __cleanup_sighand+0x50/0x50 [ 627.518034] ? lock_downgrade+0x740/0x740 [ 627.522168] _do_fork+0x19e/0xce0 [ 627.525604] ? fork_idle+0x280/0x280 [ 627.529297] ? fput+0xd4/0x150 [ 627.532492] ? SyS_write+0x15e/0x230 [ 627.536197] SyS_clone+0x37/0x50 [ 627.539542] ? sys_vfork+0x30/0x30 [ 627.543064] do_syscall_64+0x1e8/0x640 [ 627.546930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 627.551770] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 627.556936] RIP: 0033:0x459ef9 [ 627.560106] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 627.567798] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 627.575101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 627.582353] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 627.589642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 627.596896] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:57 executing program 0 (fault-call:1 fault-nth:44): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:57 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keg\x00', &(0x7f0000000000)={'\x00', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:43:57 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:57 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:57 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'ryz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) keyctl$link(0x8, r0, r1) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000002080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000020c0)=0x1c) getsockopt$inet6_buf(r3, 0x29, 0x7c932eca9c0544a3, &(0x7f0000002100)=""/33, &(0x7f0000002140)=0x21) [ 627.706497] FAULT_INJECTION: forcing a failure. [ 627.706497] name failslab, interval 1, probability 0, space 0, times 0 [ 627.744221] CPU: 1 PID: 31085 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 627.751273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.760625] Call Trace: [ 627.763212] dump_stack+0x138/0x197 [ 627.766852] should_fail.cold+0x10f/0x159 [ 627.771010] should_failslab+0xdb/0x130 [ 627.774988] kmem_cache_alloc+0x2d7/0x780 [ 627.779139] ? find_held_lock+0x35/0x130 [ 627.783204] ? copy_tree+0x4a2/0x8a0 [ 627.786920] alloc_vfsmnt+0x28/0x7d0 [ 627.790634] clone_mnt+0x70/0xee0 [ 627.794089] ? lock_downgrade+0x740/0x740 [ 627.798244] copy_tree+0x33b/0x8a0 [ 627.801791] copy_mnt_ns+0x11c/0x8c0 [ 627.805512] ? kmem_cache_alloc+0x611/0x780 [ 627.809833] ? check_preemption_disabled+0x3c/0x250 [ 627.814859] ? retint_kernel+0x2d/0x2d [ 627.818753] create_new_namespaces+0xc9/0x720 [ 627.823254] copy_namespaces+0x284/0x310 [ 627.827316] copy_process.part.0+0x2603/0x6a00 [ 627.831909] ? proc_fail_nth_write+0x7d/0x180 [ 627.836409] ? proc_cwd_link+0x1b0/0x1b0 [ 627.840479] ? __cleanup_sighand+0x50/0x50 [ 627.844710] ? lock_downgrade+0x740/0x740 [ 627.848871] _do_fork+0x19e/0xce0 [ 627.852334] ? fork_idle+0x280/0x280 [ 627.856052] ? fput+0xd4/0x150 [ 627.859245] ? SyS_write+0x15e/0x230 [ 627.862961] SyS_clone+0x37/0x50 [ 627.866321] ? sys_vfork+0x30/0x30 [ 627.869861] do_syscall_64+0x1e8/0x640 [ 627.873746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 627.878595] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 627.883780] RIP: 0033:0x459ef9 [ 627.886970] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 627.894863] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:43:57 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 627.902133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 627.909404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 627.916671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 627.924030] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:57 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:57 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:43:57 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x4d) keyctl$link(0x8, r0, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r3, 0x0, 0x0, 0x800000000002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x401, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000480)={0x2, 0xd, 0x7fffffff, 0x789c5a67}, &(0x7f00000004c0)=0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x100}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r3, 0x10, &(0x7f0000000640)={&(0x7f0000000380)=""/240, 0xf0, r4}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) fsetxattr$security_capability(r2, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x0, 0xffffff51}, {0x2, 0x800}], r5}, 0x18, 0x3) 10:43:57 executing program 0 (fault-call:1 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:57 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) keyctl$revoke(0x3, r2) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r3) 10:43:57 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:57 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={'\b\x00z'}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) 10:43:57 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 628.303751] FAULT_INJECTION: forcing a failure. [ 628.303751] name failslab, interval 1, probability 0, space 0, times 0 10:43:57 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:43:57 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x8000000004) [ 628.375778] CPU: 0 PID: 31122 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 628.382835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.392216] Call Trace: [ 628.394810] dump_stack+0x138/0x197 [ 628.398447] ? should_fail.cold+0x10a/0x159 [ 628.402787] should_fail.cold+0x10f/0x159 [ 628.406950] should_failslab+0xdb/0x130 [ 628.410939] __kmalloc_track_caller+0x2ec/0x790 [ 628.415619] ? kstrdup_const+0x48/0x60 [ 628.419517] kstrdup+0x3a/0x70 [ 628.422715] kstrdup_const+0x48/0x60 [ 628.426436] alloc_vfsmnt+0xe5/0x7d0 [ 628.430156] clone_mnt+0x70/0xee0 [ 628.433696] ? lock_downgrade+0x740/0x740 [ 628.437859] copy_tree+0x33b/0x8a0 [ 628.441414] copy_mnt_ns+0x11c/0x8c0 [ 628.445150] ? kmem_cache_alloc+0x611/0x780 [ 628.449480] ? selinux_capable+0x36/0x40 [ 628.453554] create_new_namespaces+0xc9/0x720 [ 628.458060] ? ns_capable_common+0x12c/0x160 [ 628.462469] copy_namespaces+0x284/0x310 [ 628.466535] copy_process.part.0+0x2603/0x6a00 [ 628.471132] ? proc_fail_nth_write+0x7d/0x180 [ 628.475641] ? proc_cwd_link+0x1b0/0x1b0 [ 628.479730] ? __cleanup_sighand+0x50/0x50 [ 628.483975] ? lock_downgrade+0x740/0x740 [ 628.488126] _do_fork+0x19e/0xce0 [ 628.491568] ? fork_idle+0x280/0x280 [ 628.495345] ? fput+0xd4/0x150 [ 628.498532] ? SyS_write+0x15e/0x230 [ 628.502236] SyS_clone+0x37/0x50 [ 628.506113] ? sys_vfork+0x30/0x30 [ 628.509638] do_syscall_64+0x1e8/0x640 [ 628.513526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 628.518371] entry_SYSCALL_64_after_hwframe+0x42/0xb7 10:43:58 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r2) 10:43:58 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'sy\x00'}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$link(0x8, r0, r1) [ 628.523547] RIP: 0033:0x459ef9 [ 628.526726] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 628.534439] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 628.541696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 628.548967] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 628.556245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 628.563498] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:58 executing program 0 (fault-call:1 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:58 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)={r5, 0x5, 0x6, [0x8, 0x100, 0x8001, 0x200, 0x101, 0x4]}, &(0x7f0000000040)=0x14) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r6) 10:43:58 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:58 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:58 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) 10:43:58 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) 10:43:58 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:58 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 628.853958] FAULT_INJECTION: forcing a failure. [ 628.853958] name failslab, interval 1, probability 0, space 0, times 0 [ 628.898706] CPU: 1 PID: 31167 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 628.905756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.915116] Call Trace: [ 628.917709] dump_stack+0x138/0x197 [ 628.921375] should_fail.cold+0x10f/0x159 [ 628.925537] should_failslab+0xdb/0x130 [ 628.929517] kmem_cache_alloc+0x2d7/0x780 [ 628.933670] ? find_held_lock+0x35/0x130 [ 628.937739] ? copy_tree+0x4a2/0x8a0 [ 628.941468] alloc_vfsmnt+0x28/0x7d0 [ 628.945191] clone_mnt+0x70/0xee0 10:43:58 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) [ 628.948647] ? lock_downgrade+0x740/0x740 [ 628.952806] copy_tree+0x33b/0x8a0 [ 628.956361] copy_mnt_ns+0x11c/0x8c0 [ 628.960069] ? kmem_cache_alloc+0x611/0x780 [ 628.960082] ? selinux_capable+0x36/0x40 [ 628.960101] create_new_namespaces+0xc9/0x720 [ 628.960110] ? ns_capable_common+0x12c/0x160 [ 628.960122] copy_namespaces+0x284/0x310 [ 628.960140] copy_process.part.0+0x2603/0x6a00 [ 628.968713] ? proc_fail_nth_write+0x7d/0x180 [ 628.968723] ? proc_cwd_link+0x1b0/0x1b0 [ 628.994850] ? __cleanup_sighand+0x50/0x50 [ 628.999090] ? lock_downgrade+0x740/0x740 [ 629.003258] _do_fork+0x19e/0xce0 [ 629.006717] ? fork_idle+0x280/0x280 [ 629.010435] ? fput+0xd4/0x150 [ 629.013691] ? SyS_write+0x15e/0x230 [ 629.017414] SyS_clone+0x37/0x50 [ 629.020779] ? sys_vfork+0x30/0x30 [ 629.024319] do_syscall_64+0x1e8/0x640 [ 629.028211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 629.033063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.038249] RIP: 0033:0x459ef9 [ 629.041781] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:43:58 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:58 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 629.049502] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 629.056786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 629.064053] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 629.071316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 629.078589] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:58 executing program 0 (fault-call:1 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) [ 629.301805] FAULT_INJECTION: forcing a failure. [ 629.301805] name failslab, interval 1, probability 0, space 0, times 0 [ 629.313495] CPU: 1 PID: 31195 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 629.320516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.320521] Call Trace: [ 629.320536] dump_stack+0x138/0x197 [ 629.320554] should_fail.cold+0x10f/0x159 [ 629.320570] should_failslab+0xdb/0x130 [ 629.320583] kmem_cache_alloc+0x2d7/0x780 [ 629.320597] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.320612] alloc_vfsmnt+0x28/0x7d0 [ 629.320623] clone_mnt+0x70/0xee0 [ 629.320637] copy_tree+0x33b/0x8a0 [ 629.320655] copy_mnt_ns+0x11c/0x8c0 [ 629.320663] ? kmem_cache_alloc+0x611/0x780 [ 629.320675] ? selinux_capable+0x36/0x40 [ 629.320688] create_new_namespaces+0xc9/0x720 [ 629.320698] ? ns_capable_common+0x12c/0x160 [ 629.320710] copy_namespaces+0x284/0x310 [ 629.320723] copy_process.part.0+0x2603/0x6a00 [ 629.320741] ? proc_fail_nth_write+0x7d/0x180 [ 629.320750] ? proc_cwd_link+0x1b0/0x1b0 [ 629.320769] ? __cleanup_sighand+0x50/0x50 [ 629.320779] ? trace_hardirqs_on_caller+0x400/0x590 [ 629.320789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.320802] _do_fork+0x19e/0xce0 [ 629.320815] ? fork_idle+0x280/0x280 [ 629.320828] ? check_preemption_disabled+0x3c/0x250 [ 629.320838] ? retint_kernel+0x2d/0x2d [ 629.320855] SyS_clone+0x37/0x50 [ 629.320863] ? sys_vfork+0x30/0x30 [ 629.320874] do_syscall_64+0x1e8/0x640 [ 629.320883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 629.320897] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.320905] RIP: 0033:0x459ef9 [ 629.320911] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 629.320921] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 629.320927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 629.320933] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 629.320938] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 629.320944] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) 10:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) 10:43:59 executing program 0 (fault-call:1 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:59 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='ng\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) keyctl$get_security(0x11, r1, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'\x00', 0x0}, 0x0, 0x0, r3) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="18c98d52dce2791f97c3f0c058bbc2409afb9c5b431c58b94927e69d3178ee972a18482f7f8ac2c5f143c7d89a3284c19a8675ba7f04da5a9b2d339bc2ff248f", 0x40, r4) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000300)={0xd2, 0x7}) keyctl$link(0x8, r0, r5) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) chdir(&(0x7f00000003c0)='./file0\x00') listen(r9, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e22, 0x3f, @mcast1, 0x7}, {0xa, 0x4e24, 0x5, @local}, 0x911, [0xdd2b, 0x9, 0x1f, 0x0, 0x0, 0x848, 0x40, 0x8b54]}, 0x5c) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 629.702702] FAULT_INJECTION: forcing a failure. [ 629.702702] name failslab, interval 1, probability 0, space 0, times 0 [ 629.723861] CPU: 1 PID: 31209 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 629.730913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.740271] Call Trace: [ 629.742868] dump_stack+0x138/0x197 [ 629.746506] should_fail.cold+0x10f/0x159 [ 629.750673] should_failslab+0xdb/0x130 [ 629.754654] __kmalloc_track_caller+0x2ec/0x790 [ 629.759329] ? kstrdup_const+0x48/0x60 [ 629.763222] kstrdup+0x3a/0x70 [ 629.766420] kstrdup_const+0x48/0x60 [ 629.770130] alloc_vfsmnt+0xe5/0x7d0 [ 629.773843] clone_mnt+0x70/0xee0 [ 629.777292] ? lock_downgrade+0x740/0x740 [ 629.781445] copy_tree+0x33b/0x8a0 [ 629.784991] copy_mnt_ns+0x11c/0x8c0 [ 629.788708] ? kmem_cache_alloc+0x611/0x780 [ 629.793039] ? selinux_capable+0x36/0x40 [ 629.797116] create_new_namespaces+0xc9/0x720 [ 629.801614] ? ns_capable_common+0x12c/0x160 [ 629.806032] copy_namespaces+0x284/0x310 [ 629.810124] copy_process.part.0+0x2603/0x6a00 [ 629.814712] ? trace_hardirqs_on_caller+0x400/0x590 [ 629.819733] ? _raw_spin_unlock_irq+0x5e/0x90 [ 629.824235] ? switch_mm_irqs_off+0x5e1/0xec0 [ 629.828747] ? __cleanup_sighand+0x50/0x50 [ 629.833000] ? lock_downgrade+0x740/0x740 [ 629.837152] ? preempt_schedule_common+0x4f/0xe0 [ 629.841912] _do_fork+0x19e/0xce0 [ 629.845377] ? fork_idle+0x280/0x280 [ 629.849105] ? fput+0xd4/0x150 10:43:59 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) [ 629.852302] ? SyS_write+0x15e/0x230 [ 629.856016] SyS_clone+0x37/0x50 [ 629.859368] ? sys_vfork+0x30/0x30 [ 629.862914] do_syscall_64+0x1e8/0x640 [ 629.866804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 629.871658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 629.876846] RIP: 0033:0x459ef9 [ 629.880028] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 629.887917] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 629.895215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 10:43:59 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) 10:43:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 629.902491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 629.909765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 629.917053] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:43:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:43:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r3 = accept(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, r5, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0xd36}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40, @loopback, 0xcb}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x140, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8001, @ipv4={[], [], @local}, 0x2}}}}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0xffffffff}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7324}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x1) 10:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 0 (fault-call:1 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:43:59 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) dup2(r1, 0xffffffffffffffff) 10:43:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:43:59 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:44:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 630.482406] FAULT_INJECTION: forcing a failure. [ 630.482406] name failslab, interval 1, probability 0, space 0, times 0 [ 630.500327] CPU: 1 PID: 31256 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 630.507382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.516743] Call Trace: [ 630.519343] dump_stack+0x138/0x197 [ 630.522981] should_fail.cold+0x10f/0x159 [ 630.527144] ? should_failslab+0xa1/0x130 [ 630.531306] should_failslab+0xdb/0x130 [ 630.535291] kmem_cache_alloc+0x2d7/0x780 [ 630.539449] alloc_vfsmnt+0x28/0x7d0 [ 630.543163] clone_mnt+0x70/0xee0 [ 630.546618] ? lock_downgrade+0x740/0x740 [ 630.550772] copy_tree+0x33b/0x8a0 [ 630.554356] copy_mnt_ns+0x11c/0x8c0 [ 630.558103] create_new_namespaces+0xc9/0x720 [ 630.562621] ? ns_capable_common+0x12c/0x160 [ 630.567046] copy_namespaces+0x284/0x310 [ 630.571122] copy_process.part.0+0x2603/0x6a00 [ 630.575718] ? retint_kernel+0x2d/0x2d [ 630.579619] ? __cleanup_sighand+0x50/0x50 [ 630.583865] _do_fork+0x19e/0xce0 [ 630.587322] ? fork_idle+0x280/0x280 [ 630.591040] ? fput+0xd4/0x150 [ 630.594231] ? SyS_write+0x15e/0x230 [ 630.597950] SyS_clone+0x37/0x50 [ 630.601319] ? sys_vfork+0x30/0x30 [ 630.604868] do_syscall_64+0x1e8/0x640 [ 630.608763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 630.613620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 630.618813] RIP: 0033:0x459ef9 [ 630.621998] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 10:44:00 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:44:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 630.629710] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 630.636977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 630.644230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 630.651479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 630.658815] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:44:00 executing program 0 (fault-call:1 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:00 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:44:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:44:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:00 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x891040, 0x0) getpeername$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 631.191634] FAULT_INJECTION: forcing a failure. [ 631.191634] name failslab, interval 1, probability 0, space 0, times 0 [ 631.281117] CPU: 1 PID: 31296 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 631.288183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.297539] Call Trace: [ 631.300220] dump_stack+0x138/0x197 [ 631.303855] should_fail.cold+0x10f/0x159 [ 631.308015] should_failslab+0xdb/0x130 [ 631.312009] __kmalloc_track_caller+0x2ec/0x790 [ 631.316687] ? kstrdup+0x1f/0x70 [ 631.320065] ? strlen+0x36/0xa0 [ 631.323348] ? kstrdup_const+0x48/0x60 [ 631.327452] kstrdup+0x3a/0x70 [ 631.330653] kstrdup_const+0x48/0x60 [ 631.334373] alloc_vfsmnt+0xe5/0x7d0 [ 631.338098] clone_mnt+0x70/0xee0 [ 631.341567] copy_tree+0x33b/0x8a0 [ 631.345115] copy_mnt_ns+0x11c/0x8c0 [ 631.348858] ? kmem_cache_alloc+0x611/0x780 [ 631.353189] ? check_preemption_disabled+0x3c/0x250 [ 631.358225] create_new_namespaces+0xc9/0x720 [ 631.362731] copy_namespaces+0x284/0x310 [ 631.366825] copy_process.part.0+0x2603/0x6a00 [ 631.371411] ? retint_kernel+0x2d/0x2d [ 631.375300] ? trace_hardirqs_on_caller+0x400/0x590 [ 631.380341] ? __cleanup_sighand+0x50/0x50 [ 631.384572] ? lock_downgrade+0x740/0x740 [ 631.388726] _do_fork+0x19e/0xce0 [ 631.392187] ? fork_idle+0x280/0x280 [ 631.395918] ? fput+0xd4/0x150 [ 631.399126] ? SyS_write+0x15e/0x230 [ 631.402851] SyS_clone+0x37/0x50 [ 631.406229] ? sys_vfork+0x30/0x30 [ 631.409776] do_syscall_64+0x1e8/0x640 [ 631.413753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 631.418690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 631.423869] RIP: 0033:0x459ef9 10:44:01 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:modules_dep_t:s0\x00', 0x23) [ 631.427048] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 631.434861] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 631.442142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 631.449420] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 631.456702] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 631.463973] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:01 executing program 0 (fault-call:1 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='smaps\x00', r0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\x03\x00p'}, 0x0, 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r4, 0x0, 0xfffffffffffffecf, 0x800000000002) r5 = syz_open_pts(r4, 0x2) ioctl$TIOCEXCL(r5, 0x540c) keyctl$link(0x8, r0, r3) [ 631.732629] FAULT_INJECTION: forcing a failure. [ 631.732629] name failslab, interval 1, probability 0, space 0, times 0 10:44:01 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) 10:44:01 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) [ 631.805660] CPU: 1 PID: 31332 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 631.812843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.822201] Call Trace: [ 631.824799] dump_stack+0x138/0x197 [ 631.828444] should_fail.cold+0x10f/0x159 [ 631.832601] should_failslab+0xdb/0x130 [ 631.836575] kmem_cache_alloc+0x2d7/0x780 [ 631.836590] ? copy_pid_ns+0x19d/0xa40 [ 631.836601] copy_pid_ns+0x1ae/0xa40 [ 631.836616] create_new_namespaces+0x267/0x720 [ 631.844628] copy_namespaces+0x284/0x310 [ 631.844643] copy_process.part.0+0x2603/0x6a00 [ 631.844661] ? proc_fail_nth_write+0x7d/0x180 [ 631.866044] ? proc_cwd_link+0x1b0/0x1b0 [ 631.870124] ? __cleanup_sighand+0x50/0x50 [ 631.874356] ? lock_downgrade+0x740/0x740 [ 631.878504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 631.883268] _do_fork+0x19e/0xce0 [ 631.886727] ? fork_idle+0x280/0x280 [ 631.890440] ? fput+0xd4/0x150 [ 631.893628] ? SyS_write+0x15e/0x230 [ 631.897340] SyS_clone+0x37/0x50 [ 631.900703] ? sys_vfork+0x30/0x30 [ 631.904243] do_syscall_64+0x1e8/0x640 [ 631.908126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 631.912976] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 631.918161] RIP: 0033:0x459ef9 [ 631.921349] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 631.929059] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 631.936330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 631.943603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r2, 0x0, 0x0, 0x800000000002) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x6, 0x20, 0x10, "2e635b75163226656e267dfbff30a099848bf29c4b8725e37a44250243a035683119e38d9ec5f4d65e36db557866f54c78ebdae304f70361d2bb3bb25904a5", 0x1c}, 0x60) 10:44:01 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) [ 631.950875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 631.958410] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:01 executing program 0 (fault-call:1 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x103002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r3}) 10:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:01 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:44:01 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 632.256628] FAULT_INJECTION: forcing a failure. [ 632.256628] name failslab, interval 1, probability 0, space 0, times 0 [ 632.289376] CPU: 0 PID: 31371 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 632.296442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.305902] Call Trace: [ 632.308492] dump_stack+0x138/0x197 [ 632.312118] should_fail.cold+0x10f/0x159 [ 632.312134] should_failslab+0xdb/0x130 [ 632.312147] kmem_cache_alloc_trace+0x2e9/0x790 [ 632.312155] ? kmem_cache_alloc+0x611/0x780 [ 632.312167] ? retire_userns_sysctls+0x90/0x90 [ 632.312181] copy_pid_ns+0x1f4/0xa40 [ 632.312191] ? copy_pid_ns+0x1/0xa40 [ 632.341335] create_new_namespaces+0x267/0x720 [ 632.345943] copy_namespaces+0x284/0x310 [ 632.350015] copy_process.part.0+0x2603/0x6a00 [ 632.354609] ? proc_fail_nth_write+0x7d/0x180 [ 632.359110] ? proc_cwd_link+0x1b0/0x1b0 [ 632.363178] ? __cleanup_sighand+0x50/0x50 [ 632.367418] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 632.372181] _do_fork+0x19e/0xce0 [ 632.375640] ? fork_idle+0x280/0x280 [ 632.379353] ? fput+0x10/0x150 [ 632.382544] ? fput+0x16/0x150 [ 632.385744] ? fput+0xd4/0x150 [ 632.388935] ? SyS_write+0x15e/0x230 [ 632.392659] SyS_clone+0x37/0x50 [ 632.396110] ? sys_vfork+0x30/0x30 [ 632.399654] do_syscall_64+0x1e8/0x640 10:44:01 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='x/policy\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r4, 0x0, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-monitor\x00', 0x1000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r6, 0x0, 0x0, 0x800000000002) accept4$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14, 0x101800) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000600)={@multicast2, @remote, r7}, 0xc) r8 = add_key(&(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="3621f98b61c58b85dca64eebe0b2f28e09b6b1fce05ba4", 0x17, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f00000002c0)=@secondary='builtin_and_secondary_trusted\x00') pread64(r3, 0x0, 0x0, 0x800000000002) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='statm\x00') ioctl$KVM_GET_XCRS(r9, 0x8188aea6, &(0x7f00000003c0)=ANY=[@ANYBLOB="00005e9369bf381900000080e1296e7f740000000090f400000002000000000000000300"/45]) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e21, 0x0, @rand_addr="cb8635933aa251ea700fd943e02b51ca", 0x5}, {0xa, 0x4e20, 0x0, @rand_addr="f7c3167ea18335afac9c66392fc319d1", 0x2}, 0x6, [0x5, 0x6, 0x3, 0x3, 0x6, 0x4, 0x6, 0x1]}, 0x5c) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xff}) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xffffffff, 0x8000) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000080)={0x3, r10}) keyctl$link(0x8, r0, r1) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000440)={[0x0, 0xd000, 0x10000, 0xf000], 0x0, 0xa0, 0xc00000000}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000300)={0x9, 0x0, 0x1, 0x5, 0x82}) 10:44:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 632.403541] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 632.408395] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 632.413584] RIP: 0033:0x459ef9 [ 632.416769] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 632.424475] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 632.431836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 632.439101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 632.446360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 10:44:02 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) [ 632.446365] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:02 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keqring\x00', &(0x7f0000000180), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2001, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 10:44:02 executing program 0 (fault-call:1 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:44:02 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:44:02 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:44:02 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x9, 0x6, 0x3007, 0x8, 0x8, 0x1, 0x2, 0x4}}) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, 0x0, 0x0) keyctl$clear(0x7, r3) keyctl$link(0x8, r0, r2) 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) [ 632.880938] FAULT_INJECTION: forcing a failure. [ 632.880938] name failslab, interval 1, probability 0, space 0, times 0 [ 632.938639] CPU: 1 PID: 31418 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 632.945695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.955076] Call Trace: [ 632.957680] dump_stack+0x138/0x197 [ 632.961332] should_fail.cold+0x10f/0x159 [ 632.966048] ? should_failslab+0xa1/0x130 [ 632.970217] should_failslab+0xdb/0x130 [ 632.974207] kmem_cache_alloc+0x2d7/0x780 [ 632.978360] ? refcount_inc+0x1f/0x40 [ 632.982157] alloc_pid+0x5d/0xc70 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) [ 632.982173] ? copy_thread_tls+0x3c8/0x7a0 [ 632.982190] copy_process.part.0+0x272f/0x6a00 [ 632.982208] ? proc_fail_nth_write+0x7d/0x180 [ 632.982217] ? proc_cwd_link+0x1b0/0x1b0 [ 632.982235] ? __cleanup_sighand+0x50/0x50 [ 633.007266] ? lock_downgrade+0x740/0x740 [ 633.011460] _do_fork+0x19e/0xce0 [ 633.014924] ? fork_idle+0x280/0x280 [ 633.018644] ? fput+0xd4/0x150 [ 633.021842] ? SyS_write+0x15e/0x230 [ 633.025562] SyS_clone+0x37/0x50 [ 633.028937] ? sys_vfork+0x30/0x30 [ 633.032484] do_syscall_64+0x1e8/0x640 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) [ 633.036411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.041266] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 633.046543] RIP: 0033:0x459ef9 [ 633.049733] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 633.057441] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 633.064720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 633.064726] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 633.064731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 633.064736] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:02 executing program 0 (fault-call:1 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:02 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='\x1e\x00\a\x00', &(0x7f0000000040), 0x0, 0x0, r1) keyctl$link(0x8, r0, r2) 10:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x4) recvfrom$inet6(r4, &(0x7f00000004c0)=""/41, 0x29, 0x1, &(0x7f0000000500)={0xa, 0xce24, 0x2, @empty, 0x9}, 0x1c) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000005c0)={0xffff, 0x1, 0x7}) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:ssh_keygen_exec_t:s0\x00', 0x27, 0xa1440966208e0537) 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:02 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) 10:44:02 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x40, 0x0) fcntl$setsig(r2, 0xa, 0x9) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000000)={0x3, 0x6, 0x0, 0x7, 0x6}) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r4) [ 633.293625] FAULT_INJECTION: forcing a failure. [ 633.293625] name failslab, interval 1, probability 0, space 0, times 0 10:44:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:03 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'s\x12\x04'}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r2, r1) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xa9d, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f00000001c0)={{0x7f, 0x9}, {0x4, 0x37}, 0x9, 0x1}) keyctl$assume_authority(0x10, r1) keyctl$link(0x8, r0, r1) [ 633.402976] CPU: 1 PID: 31451 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 633.410059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.419423] Call Trace: [ 633.422021] dump_stack+0x138/0x197 [ 633.425665] should_fail.cold+0x10f/0x159 [ 633.429825] should_failslab+0xdb/0x130 [ 633.433815] kmem_cache_alloc+0x2d7/0x780 [ 633.438408] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 633.443175] alloc_vfsmnt+0x28/0x7d0 [ 633.446902] vfs_kern_mount.part.0+0x2a/0x3d0 [ 633.451409] kern_mount_data+0x56/0xc0 [ 633.455308] pid_ns_prepare_proc+0x1e/0x90 [ 633.459555] alloc_pid+0x9ef/0xc70 [ 633.463119] copy_process.part.0+0x272f/0x6a00 [ 633.467709] ? retint_kernel+0x2d/0x2d [ 633.472733] ? trace_hardirqs_on_caller+0x400/0x590 [ 633.477772] ? __cleanup_sighand+0x50/0x50 [ 633.482010] ? trace_hardirqs_on_caller+0x400/0x590 [ 633.487031] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 633.491794] _do_fork+0x19e/0xce0 [ 633.495272] ? fork_idle+0x280/0x280 [ 633.498984] ? SyS_write+0x15e/0x230 [ 633.502708] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 633.507564] ? SyS_write+0x15e/0x230 [ 633.511298] SyS_clone+0x37/0x50 [ 633.514674] ? sys_vfork+0x30/0x30 [ 633.518313] do_syscall_64+0x1e8/0x640 [ 633.522208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.527073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 633.532274] RIP: 0033:0x459ef9 [ 633.535464] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 633.543176] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) [ 633.550450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 633.557727] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 633.565001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 633.572376] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:03 executing program 0 (fault-call:1 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:44:03 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyriT \x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 10:44:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:44:03 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) 10:44:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x4000) 10:44:03 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, 0x0) [ 633.768308] FAULT_INJECTION: forcing a failure. [ 633.768308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.838871] CPU: 1 PID: 31492 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 633.845932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.855295] Call Trace: [ 633.857889] dump_stack+0x138/0x197 [ 633.861881] should_fail.cold+0x10f/0x159 [ 633.866036] ? __might_sleep+0x93/0xb0 [ 633.869928] __alloc_pages_nodemask+0x1d6/0x7a0 [ 633.874602] ? __alloc_pages_slowpath+0x2930/0x2930 [ 633.879634] alloc_pages_current+0xec/0x1e0 [ 633.883966] __get_free_pages+0xf/0x40 [ 633.887862] get_zeroed_page+0x11/0x20 [ 633.891800] mount_fs+0x1cc/0x2a1 [ 633.895270] vfs_kern_mount.part.0+0x5e/0x3d0 [ 633.899766] kern_mount_data+0x56/0xc0 [ 633.903654] pid_ns_prepare_proc+0x1e/0x90 [ 633.907885] alloc_pid+0x9ef/0xc70 [ 633.911431] copy_process.part.0+0x272f/0x6a00 [ 633.916032] ? check_preemption_disabled+0x3c/0x250 [ 633.921048] ? retint_kernel+0x2d/0x2d [ 633.924956] ? __cleanup_sighand+0x50/0x50 [ 633.929370] ? lock_downgrade+0x740/0x740 [ 633.933527] _do_fork+0x19e/0xce0 [ 633.936986] ? fork_idle+0x280/0x280 [ 633.940704] ? fput+0xd4/0x150 [ 633.943900] ? SyS_write+0x15e/0x230 [ 633.947621] SyS_clone+0x37/0x50 [ 633.950991] ? sys_vfork+0x30/0x30 [ 633.954535] do_syscall_64+0x1e8/0x640 [ 633.958434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.963292] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 633.968485] RIP: 0033:0x459ef9 [ 633.971755] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 633.979457] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 10:44:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:44:03 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800400000000004fcff", 0x2f0}], 0x1) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000440)=0x20, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x421, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) 10:44:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="030000011500b700000000"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) lseek(0xffffffffffffffff, 0x1003, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580), 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') [ 633.986709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 633.993961] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 634.001210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 634.008501] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:03 executing program 0 (fault-call:1 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:03 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 10:44:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:44:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 10:44:03 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 634.221792] FAULT_INJECTION: forcing a failure. [ 634.221792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.303695] CPU: 1 PID: 31520 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 634.310815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.320172] Call Trace: [ 634.322770] dump_stack+0x138/0x197 [ 634.326412] should_fail.cold+0x10f/0x159 [ 634.330568] ? __might_sleep+0x93/0xb0 [ 634.334465] __alloc_pages_nodemask+0x1d6/0x7a0 [ 634.339140] ? check_preemption_disabled+0x3c/0x250 [ 634.344190] ? __alloc_pages_slowpath+0x2930/0x2930 [ 634.349232] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 634.354685] ? __alloc_pages_nodemask+0x639/0x7a0 [ 634.359533] alloc_pages_current+0xec/0x1e0 [ 634.363862] __get_free_pages+0xf/0x40 [ 634.367763] get_zeroed_page+0x11/0x20 [ 634.371697] selinux_sb_copy_data+0x2a/0x390 [ 634.376098] security_sb_copy_data+0x75/0xb0 [ 634.380496] mount_fs+0x1ec/0x2a1 [ 634.380510] vfs_kern_mount.part.0+0x5e/0x3d0 [ 634.380523] kern_mount_data+0x56/0xc0 [ 634.380534] pid_ns_prepare_proc+0x1e/0x90 [ 634.380546] alloc_pid+0x9ef/0xc70 [ 634.400111] copy_process.part.0+0x272f/0x6a00 [ 634.404772] ? proc_fail_nth_write+0x7d/0x180 [ 634.409249] ? proc_cwd_link+0x1b0/0x1b0 [ 634.413387] ? __cleanup_sighand+0x50/0x50 [ 634.417603] ? lock_downgrade+0x740/0x740 [ 634.421754] _do_fork+0x19e/0xce0 [ 634.425194] ? fork_idle+0x280/0x280 [ 634.428892] ? fput+0xd4/0x150 [ 634.432777] ? SyS_write+0x15e/0x230 [ 634.436474] SyS_clone+0x37/0x50 [ 634.439834] ? sys_vfork+0x30/0x30 [ 634.443357] do_syscall_64+0x1e8/0x640 [ 634.447244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 634.452090] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 634.457261] RIP: 0033:0x459ef9 [ 634.460434] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 634.468150] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 634.475662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 634.482913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 634.490252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 10:44:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:44:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, 0x0, 0x0, 0x4000) 10:44:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) 10:44:04 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 634.497517] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:04 executing program 0 (fault-call:1 fault-nth:57): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 634.667114] FAULT_INJECTION: forcing a failure. [ 634.667114] name failslab, interval 1, probability 0, space 0, times 0 [ 634.685910] CPU: 1 PID: 31550 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 634.692977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.702326] Call Trace: [ 634.702344] dump_stack+0x138/0x197 [ 634.702363] should_fail.cold+0x10f/0x159 [ 634.702379] should_failslab+0xdb/0x130 [ 634.702390] kmem_cache_alloc_trace+0x2e9/0x790 [ 634.702402] ? preempt_count_sub+0x8/0x130 [ 634.702413] sget_userns+0xfe/0xc30 [ 634.702425] ? set_anon_super+0x20/0x20 [ 634.733143] ? get_empty_filp.cold+0x3b/0x3b [ 634.737559] mount_ns+0x6d/0x190 [ 634.740936] ? proc_get_inode+0x620/0x620 [ 634.746208] proc_mount+0x6a/0xa0 [ 634.749644] mount_fs+0x97/0x2a1 [ 634.752997] vfs_kern_mount.part.0+0x5e/0x3d0 [ 634.757494] kern_mount_data+0x56/0xc0 [ 634.761365] pid_ns_prepare_proc+0x1e/0x90 [ 634.765605] alloc_pid+0x9ef/0xc70 [ 634.769137] copy_process.part.0+0x272f/0x6a00 [ 634.773729] ? proc_fail_nth_write+0x7d/0x180 [ 634.778206] ? proc_cwd_link+0x1b0/0x1b0 [ 634.782258] ? __cleanup_sighand+0x50/0x50 [ 634.786474] ? lock_downgrade+0x740/0x740 [ 634.790612] _do_fork+0x19e/0xce0 [ 634.794050] ? fork_idle+0x280/0x280 [ 634.797747] ? fput+0xd4/0x150 [ 634.800923] ? SyS_write+0x15e/0x230 [ 634.804621] SyS_clone+0x37/0x50 [ 634.807982] ? sys_vfork+0x30/0x30 [ 634.811512] do_syscall_64+0x1e8/0x640 [ 634.815402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 634.820229] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 634.825406] RIP: 0033:0x459ef9 [ 634.828578] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 634.836269] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 634.843522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 634.850789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 634.858039] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 634.865551] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:04 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x15, &(0x7f0000000180), 0x182) 10:44:04 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x200, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000180)) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) 10:44:04 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() tkill(r4, 0x15) tkill(r1, 0x15) tkill(r0, 0x1000000000016) 10:44:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 10:44:04 executing program 0 (fault-call:1 fault-nth:58): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000003300)=""/78) 10:44:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:04 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 10:44:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 635.094884] FAULT_INJECTION: forcing a failure. [ 635.094884] name failslab, interval 1, probability 0, space 0, times 0 [ 635.116419] CPU: 1 PID: 31577 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 635.123478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.132846] Call Trace: [ 635.135450] dump_stack+0x138/0x197 [ 635.139093] should_fail.cold+0x10f/0x159 [ 635.143258] should_failslab+0xdb/0x130 [ 635.147240] kmem_cache_alloc_trace+0x2e9/0x790 [ 635.151916] selinux_sb_alloc_security+0x46/0x220 [ 635.156758] security_sb_alloc+0x6d/0xa0 [ 635.160825] sget_userns+0x196/0xc30 [ 635.164540] ? set_anon_super+0x20/0x20 [ 635.168526] ? get_empty_filp.cold+0x3b/0x3b [ 635.172936] mount_ns+0x6d/0x190 [ 635.176290] ? proc_get_inode+0x620/0x620 [ 635.180441] proc_mount+0x6a/0xa0 [ 635.183901] mount_fs+0x97/0x2a1 [ 635.187271] vfs_kern_mount.part.0+0x5e/0x3d0 [ 635.192467] kern_mount_data+0x56/0xc0 [ 635.196365] pid_ns_prepare_proc+0x1e/0x90 [ 635.200605] alloc_pid+0x9ef/0xc70 [ 635.204156] copy_process.part.0+0x272f/0x6a00 [ 635.208763] ? retint_kernel+0x2d/0x2d [ 635.212660] ? trace_hardirqs_on_caller+0x400/0x590 [ 635.217698] ? __cleanup_sighand+0x50/0x50 [ 635.221951] _do_fork+0x19e/0xce0 [ 635.225409] ? fork_idle+0x280/0x280 [ 635.229301] ? fput+0xd4/0x150 [ 635.232499] ? SyS_write+0x15e/0x230 [ 635.236238] SyS_clone+0x37/0x50 [ 635.236246] ? sys_vfork+0x30/0x30 10:44:04 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0b0300080008000b000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:44:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) [ 635.236259] do_syscall_64+0x1e8/0x640 [ 635.243132] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 635.243147] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 635.243154] RIP: 0033:0x459ef9 [ 635.243159] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 635.243169] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 635.243176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 635.261631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:44:04 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc}) 10:44:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) [ 635.268265] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 635.268271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 635.268277] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 10:44:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) [ 635.389456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:44:05 executing program 1: socket$unix(0x1, 0x400000000001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syncfs(0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000010000000b70700000100000048700000c9df0000bc700000000000039500ed5a94d757a6cb890000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r1, 0xb76e88dc8ae99d50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_getaffinity(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000040, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) 10:44:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 10:44:05 executing program 0 (fault-call:1 fault-nth:59): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:05 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) 10:44:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x80000}) 10:44:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getuid() socket$inet_udplite(0x2, 0x2, 0x88) 10:44:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:05 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd6004000000280600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00000009078000013122a068c6c98df2de60455fd80b16764e0ea30e9a80000"], 0x0) 10:44:05 executing program 2: r0 = socket$kcm(0x2, 0x2000000000003, 0x2) close(r0) [ 636.030340] FAULT_INJECTION: forcing a failure. [ 636.030340] name failslab, interval 1, probability 0, space 0, times 0 10:44:05 executing program 4: socket$isdn(0x22, 0x3, 0x7139be48b28b2a09) [ 636.127716] CPU: 0 PID: 31629 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 636.134779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.144147] Call Trace: [ 636.146752] dump_stack+0x138/0x197 [ 636.150432] should_fail.cold+0x10f/0x159 [ 636.154601] should_failslab+0xdb/0x130 [ 636.158675] __kmalloc+0x2f0/0x7a0 [ 636.162229] ? __list_lru_init+0x6b/0x660 [ 636.166391] __list_lru_init+0x6b/0x660 [ 636.170374] sget_userns+0x4e0/0xc30 [ 636.174092] ? set_anon_super+0x20/0x20 [ 636.178081] ? get_empty_filp.cold+0x3b/0x3b [ 636.182498] mount_ns+0x6d/0x190 [ 636.185867] ? proc_get_inode+0x620/0x620 [ 636.190018] proc_mount+0x6a/0xa0 [ 636.193496] mount_fs+0x97/0x2a1 [ 636.196873] vfs_kern_mount.part.0+0x5e/0x3d0 [ 636.201373] ? rcu_read_lock_sched_held+0x110/0x130 [ 636.206400] kern_mount_data+0x56/0xc0 [ 636.210297] pid_ns_prepare_proc+0x1e/0x90 [ 636.214537] alloc_pid+0x9ef/0xc70 [ 636.218101] copy_process.part.0+0x272f/0x6a00 [ 636.222699] ? proc_fail_nth_write+0x7d/0x180 [ 636.227568] ? proc_cwd_link+0x1b0/0x1b0 [ 636.231668] ? __cleanup_sighand+0x50/0x50 [ 636.235950] ? lock_downgrade+0x740/0x740 [ 636.240099] _do_fork+0x19e/0xce0 [ 636.240114] ? fork_idle+0x280/0x280 [ 636.240128] ? fput+0xd4/0x150 [ 636.240143] ? SyS_write+0x15e/0x230 [ 636.240157] SyS_clone+0x37/0x50 [ 636.240165] ? sys_vfork+0x30/0x30 [ 636.240177] do_syscall_64+0x1e8/0x640 [ 636.240185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 636.240202] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 636.275497] RIP: 0033:0x459ef9 [ 636.278691] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 636.286399] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 636.293670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 636.300937] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 636.308208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 636.315477] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 636.323421] protocol 88fb is buggy, dev hsr_slave_0 [ 636.328831] protocol 88fb is buggy, dev hsr_slave_1 [ 636.335393] protocol 88fb is buggy, dev hsr_slave_0 [ 636.340947] protocol 88fb is buggy, dev hsr_slave_1 [ 636.347403] protocol 88fb is buggy, dev hsr_slave_0 [ 636.353197] protocol 88fb is buggy, dev hsr_slave_1 10:44:06 executing program 1: socket$unix(0x1, 0x400000000001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syncfs(0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000010000000b70700000100000048700000c9df0000bc700000000000039500ed5a94d757a6cb890000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r1, 0xb76e88dc8ae99d50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_getaffinity(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000040, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) 10:44:06 executing program 4: eventfd2(0x1, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000000c0), 0x1000) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000000c0), 0x1000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0x2a4981d0c4bb7487) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="240000001a0007041dfffd946f6105000a0000001f00e2ffffff08000800040035000000280000001100ffffba16a0aa1c0900000018004003000000eff24d8238cfa47e23f7efbf54000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r9, &(0x7f00000011c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0xfffffffffffffdf0, 0x0) r10 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r10, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000780)=""/114) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r7, r11, 0x0, 0x8000fffffffe) 10:44:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, 0x0) 10:44:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000340)) 10:44:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:06 executing program 0 (fault-call:1 fault-nth:60): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, 0x0) 10:44:06 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x5460, 0x0) [ 636.869164] FAULT_INJECTION: forcing a failure. [ 636.869164] name failslab, interval 1, probability 0, space 0, times 0 [ 636.884119] CPU: 0 PID: 31669 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 636.891168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.900526] Call Trace: [ 636.903124] dump_stack+0x138/0x197 [ 636.906763] should_fail.cold+0x10f/0x159 [ 636.911014] should_failslab+0xdb/0x130 [ 636.915000] __kmalloc+0x2f0/0x7a0 10:44:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, 0x0) 10:44:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x108000400000003a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000040)={'syzkaller1\x00'}) dup2(r0, r1) [ 636.918555] ? __list_lru_init+0x6b/0x660 [ 636.922711] __list_lru_init+0x6b/0x660 [ 636.926694] sget_userns+0x4e0/0xc30 [ 636.930414] ? set_anon_super+0x20/0x20 [ 636.934396] ? get_empty_filp.cold+0x3b/0x3b [ 636.938814] mount_ns+0x6d/0x190 [ 636.942184] ? proc_get_inode+0x620/0x620 [ 636.946341] proc_mount+0x6a/0xa0 [ 636.949801] mount_fs+0x97/0x2a1 [ 636.953176] vfs_kern_mount.part.0+0x5e/0x3d0 [ 636.957687] ? rcu_read_lock_sched_held+0x110/0x130 [ 636.962716] kern_mount_data+0x56/0xc0 10:44:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x4147, 0x0) [ 636.966613] pid_ns_prepare_proc+0x1e/0x90 [ 636.970887] alloc_pid+0x9ef/0xc70 [ 636.974536] copy_process.part.0+0x272f/0x6a00 [ 636.979128] ? proc_fail_nth_write+0x7d/0x180 [ 636.983623] ? proc_cwd_link+0x1b0/0x1b0 [ 636.987703] ? __cleanup_sighand+0x50/0x50 [ 636.992030] ? lock_downgrade+0x740/0x740 [ 636.996197] _do_fork+0x19e/0xce0 [ 636.999663] ? fork_idle+0x280/0x280 [ 637.003383] ? check_preemption_disabled+0x3c/0x250 [ 637.008405] ? retint_kernel+0x2d/0x2d [ 637.012304] ? sys_vfork+0x30/0x30 [ 637.015945] SyS_clone+0x37/0x50 [ 637.019314] ? sys_vfork+0x30/0x30 [ 637.022863] do_syscall_64+0x1e8/0x640 [ 637.026759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 637.031632] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 637.036826] RIP: 0033:0x459ef9 [ 637.040021] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 637.047768] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 637.055051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 637.062329] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:44:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc), 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 10:44:06 executing program 1: socket$unix(0x1, 0x400000000001, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syncfs(0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000010000000b70700000100000048700000c9df0000bc700000000000039500ed5a94d757a6cb890000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r1, 0xb76e88dc8ae99d50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_getaffinity(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000040, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) [ 637.069613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 637.076898] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 637.085119] protocol 88fb is buggy, dev hsr_slave_0 [ 637.091223] protocol 88fb is buggy, dev hsr_slave_1 [ 637.121177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.520171] protocol 88fb is buggy, dev hsr_slave_0 [ 637.525408] protocol 88fb is buggy, dev hsr_slave_1 [ 637.765563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.775746] audit: type=1804 audit(1571913847.394:999): pid=31707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir514479446/syzkaller.q9DJwi/1081/bus" dev="sda1" ino=17620 res=1 10:44:07 executing program 3: ioctl(0xffffffffffffffff, 0x4147, 0x0) 10:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:07 executing program 0 (fault-call:1 fault-nth:61): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x30020100, 0x0, 0x0, 0x0, 0x0) 10:44:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x80000000b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc), 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 10:44:07 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) 10:44:07 executing program 4: eventfd2(0x1, 0x2000000000000002) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000840)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000000c0), 0x1000) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000000c0), 0x1000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0x2a4981d0c4bb7487) ioctl$RTC_VL_READ(r2, 0x80047013, 0x0) r6 = socket$inet(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="240000001a0007041dfffd946f6105000a0000001f00e2ffffff08000800040035000000280000001100ffffba16a0aa1c0900000018004003000000eff24d8238cfa47e23f7efbf54000000", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000010c0)={{{@in=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@dev}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r7 = dup(r3) open(&(0x7f0000000240)='./bus\x00', 0x80000, 0x10) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r8, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1e, 0x0) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r9, &(0x7f00000011c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0xfffffffffffffdf0, 0x0) r10 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fsetxattr(r10, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x1f, 0x2) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000780)=""/114) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080)=0xfffffffffffffffe, 0x4) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00\x00~\x00', 0x10) r11 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) sendfile(r7, r11, 0x0, 0x8000fffffffe) 10:44:07 executing program 1: r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0xeca60000, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) 10:44:07 executing program 3: ioctl(0xffffffffffffffff, 0x4147, 0x0) 10:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x2}, 0x1c) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) [ 638.060721] FAULT_INJECTION: forcing a failure. [ 638.060721] name failslab, interval 1, probability 0, space 0, times 0 10:44:07 executing program 3: ioctl(0xffffffffffffffff, 0x4147, 0x0) 10:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) [ 638.152190] CPU: 1 PID: 31720 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 638.159250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.168605] Call Trace: [ 638.168650] dump_stack+0x138/0x197 [ 638.174854] should_fail.cold+0x10f/0x159 [ 638.179013] should_failslab+0xdb/0x130 [ 638.183002] __kmalloc+0x2f0/0x7a0 [ 638.186551] ? lock_downgrade+0x740/0x740 [ 638.186564] ? register_shrinker+0xbd/0x220 [ 638.186577] register_shrinker+0xbd/0x220 [ 638.186588] sget_userns+0x9bf/0xc30 [ 638.186597] ? set_anon_super+0x20/0x20 [ 638.207388] ? get_empty_filp.cold+0x3b/0x3b [ 638.211812] mount_ns+0x6d/0x190 [ 638.215183] ? proc_get_inode+0x620/0x620 [ 638.219373] proc_mount+0x6a/0xa0 [ 638.222840] mount_fs+0x97/0x2a1 [ 638.226214] vfs_kern_mount.part.0+0x5e/0x3d0 [ 638.230713] ? rcu_read_lock_sched_held+0x110/0x130 [ 638.235822] kern_mount_data+0x56/0xc0 [ 638.239732] pid_ns_prepare_proc+0x1e/0x90 [ 638.243979] alloc_pid+0x9ef/0xc70 [ 638.247540] copy_process.part.0+0x272f/0x6a00 10:44:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000009, &(0x7f0000000000)=0x8000003, 0x4) listen(r1, 0xffffffff80000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2}, 0x10) 10:44:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000ff0000"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) [ 638.252124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.252142] ? check_preemption_disabled+0x3c/0x250 [ 638.252155] ? retint_kernel+0x2d/0x2d [ 638.261902] ? __f_unlock_pos+0x19/0x20 [ 638.261923] ? __cleanup_sighand+0x50/0x50 [ 638.261934] ? lock_downgrade+0x740/0x740 [ 638.261949] _do_fork+0x19e/0xce0 [ 638.261965] ? fork_idle+0x280/0x280 [ 638.285414] ? fput+0xd4/0x150 [ 638.288613] ? SyS_write+0x15e/0x230 [ 638.292340] SyS_clone+0x37/0x50 [ 638.295737] ? sys_vfork+0x30/0x30 [ 638.299292] do_syscall_64+0x1e8/0x640 [ 638.303188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 638.308119] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 638.313342] RIP: 0033:0x459ef9 [ 638.313349] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 638.313361] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 638.313367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 638.313372] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 10:44:07 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x4147, 0x0) [ 638.313378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 638.313384] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 638.397885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.455216] ================================================================== [ 638.463068] BUG: KASAN: use-after-free in put_pid_ns+0x100/0x110 [ 638.469225] Read of size 8 at addr ffff888055f11410 by task syz-executor.0/31720 [ 638.476768] [ 638.478408] CPU: 1 PID: 31720 Comm: syz-executor.0 Not tainted 4.14.150 #0 [ 638.485424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.494787] Call Trace: [ 638.497396] dump_stack+0x138/0x197 [ 638.501037] ? put_pid_ns+0x100/0x110 [ 638.504921] print_address_description.cold+0x7c/0x1dc [ 638.510187] ? put_pid_ns+0x100/0x110 [ 638.513970] kasan_report.cold+0xa9/0x2af [ 638.518203] __asan_report_load8_noabort+0x14/0x20 [ 638.523114] put_pid_ns+0x100/0x110 [ 638.526768] free_nsproxy+0x103/0x200 [ 638.530552] switch_task_namespaces+0x98/0xb0 [ 638.535030] exit_task_namespaces+0x18/0x20 [ 638.539345] copy_process.part.0+0x3b59/0x6a00 [ 638.543908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.548650] ? check_preemption_disabled+0x3c/0x250 [ 638.553663] ? retint_kernel+0x2d/0x2d [ 638.557551] ? __f_unlock_pos+0x19/0x20 [ 638.561518] ? __cleanup_sighand+0x50/0x50 [ 638.565738] ? lock_downgrade+0x740/0x740 [ 638.569873] _do_fork+0x19e/0xce0 [ 638.573312] ? fork_idle+0x280/0x280 [ 638.577051] ? fput+0xd4/0x150 [ 638.580244] ? SyS_write+0x15e/0x230 [ 638.583951] SyS_clone+0x37/0x50 [ 638.587420] ? sys_vfork+0x30/0x30 [ 638.590951] do_syscall_64+0x1e8/0x640 [ 638.594819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 638.599663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 638.604850] RIP: 0033:0x459ef9 [ 638.608020] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 638.615728] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 638.622986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 638.630246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 638.637498] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 638.644751] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 638.652009] [ 638.653622] Allocated by task 31720: [ 638.657318] save_stack_trace+0x16/0x20 [ 638.661290] save_stack+0x45/0xd0 [ 638.664735] kasan_kmalloc+0xce/0xf0 [ 638.668441] kasan_slab_alloc+0xf/0x20 [ 638.672313] kmem_cache_alloc+0x12e/0x780 [ 638.676441] copy_pid_ns+0x1ae/0xa40 [ 638.680141] create_new_namespaces+0x267/0x720 [ 638.684722] copy_namespaces+0x284/0x310 [ 638.688768] copy_process.part.0+0x2603/0x6a00 [ 638.693340] _do_fork+0x19e/0xce0 [ 638.696778] SyS_clone+0x37/0x50 [ 638.700134] do_syscall_64+0x1e8/0x640 [ 638.704013] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 638.709187] [ 638.710800] Freed by task 6991: [ 638.714074] save_stack_trace+0x16/0x20 [ 638.718036] save_stack+0x45/0xd0 [ 638.721469] kasan_slab_free+0x75/0xc0 [ 638.725337] kmem_cache_free+0x83/0x2b0 [ 638.729293] delayed_free_pidns+0x89/0xb0 [ 638.733424] rcu_process_callbacks+0x7b8/0x12b0 [ 638.738086] __do_softirq+0x244/0x9a0 [ 638.741886] [ 638.743521] The buggy address belongs to the object at ffff888055f10bd8 [ 638.743521] which belongs to the cache pid_namespace of size 2264 [ 638.756679] The buggy address is located 2104 bytes inside of [ 638.756679] 2264-byte region [ffff888055f10bd8, ffff888055f114b0) [ 638.768733] The buggy address belongs to the page: [ 638.773644] page:ffffea000157c400 count:1 mapcount:0 mapping:ffff888055f10280 index:0x0 compound_mapcount: 0 [ 638.783595] flags: 0x1fffc0000008100(slab|head) [ 638.788344] raw: 01fffc0000008100 ffff888055f10280 0000000000000000 0000000100000003 [ 638.796221] raw: ffffea00024b45a0 ffffea0002290fa0 ffff8880a72d4840 0000000000000000 [ 638.804083] page dumped because: kasan: bad access detected [ 638.809773] [ 638.811380] Memory state around the buggy address: [ 638.816291] ffff888055f11300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 638.823631] ffff888055f11380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 638.830977] >ffff888055f11400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 638.838323] ^ [ 638.842189] ffff888055f11480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 638.849596] ffff888055f11500: fc fc fc fc fc fc fb fb fb fb fb fb fb fb fb fb [ 638.856931] ================================================================== [ 638.864278] Disabling lock debugging due to kernel taint [ 638.872666] Kernel panic - not syncing: panic_on_warn set ... [ 638.872666] [ 638.880139] CPU: 0 PID: 31720 Comm: syz-executor.0 Tainted: G B 4.14.150 #0 [ 638.888343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.897701] Call Trace: [ 638.900287] dump_stack+0x138/0x197 [ 638.903903] ? put_pid_ns+0x100/0x110 [ 638.907682] panic+0x1f9/0x42d [ 638.911134] ? add_taint.cold+0x16/0x16 [ 638.915087] ? ___preempt_schedule+0x16/0x18 [ 638.919489] kasan_end_report+0x47/0x4f [ 638.923441] kasan_report.cold+0x130/0x2af [ 638.927656] __asan_report_load8_noabort+0x14/0x20 [ 638.932563] put_pid_ns+0x100/0x110 [ 638.936180] free_nsproxy+0x103/0x200 [ 638.939969] switch_task_namespaces+0x98/0xb0 [ 638.944442] exit_task_namespaces+0x18/0x20 [ 638.948744] copy_process.part.0+0x3b59/0x6a00 [ 638.953650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 638.958385] ? check_preemption_disabled+0x3c/0x250 [ 638.963383] ? retint_kernel+0x2d/0x2d [ 638.967252] ? __f_unlock_pos+0x19/0x20 [ 638.971557] ? __cleanup_sighand+0x50/0x50 [ 638.975856] ? lock_downgrade+0x740/0x740 [ 638.979981] _do_fork+0x19e/0xce0 [ 638.983427] ? fork_idle+0x280/0x280 [ 638.987120] ? fput+0xd4/0x150 [ 638.990290] ? SyS_write+0x15e/0x230 [ 638.993985] SyS_clone+0x37/0x50 [ 638.997332] ? sys_vfork+0x30/0x30 [ 639.000849] do_syscall_64+0x1e8/0x640 [ 639.004712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 639.009533] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 639.014717] RIP: 0033:0x459ef9 [ 639.017897] RSP: 002b:00007f7d94401c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 639.025592] RAX: ffffffffffffffda RBX: 00007f7d94401c90 RCX: 0000000000459ef9 [ 639.032853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030020100 [ 639.040115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 639.047370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d944026d4 [ 639.054621] R13: 00000000004c055b R14: 00000000004d2970 R15: 0000000000000004 [ 639.063374] Kernel Offset: disabled [ 639.067019] Rebooting in 86400 seconds..