000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:51 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:18:51 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="240000002d00000001000100493b170000000080", @ANYRES32=r5, @ANYBLOB="000000000000000000001000"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c4, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x480b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa28}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0fe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1010000}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x265d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcad1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8dfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4}, 0x4004) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000080)='smaps_rollup\x00') timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)={0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x0, [{{r4}, 0xffffffff7fffffff}, {{r5}, 0x100}, {{r6}, 0x6}, {{}, 0x8}, {{}, 0x10001}, {{r1}, 0x3}, {{r7}, 0x6}, {{r8}, 0x391e}]}) userfaultfd(0x1f4f52f69bddd606) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x88080, 0x0) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000080)) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 08:18:51 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f000001bff4)) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x5, &(0x7f0000000440)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f11e931e7d6a4cf10ce619a25ac9fa07fdffed203782ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1003f5435282d27194a232de4acfd96ca06d6c6c2ec7937c23b418118d2e3f904c989499190019750a47e57192d77d68322761ecb212454c947f9af561badc0a2495be9d26b7747816be9b224", 0x121}], 0x4, 0x0) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/86) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) 08:18:54 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:18:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000), 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x2ace, 0x2, "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"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400000, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:54 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:54 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:18:54 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:18:54 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:18:54 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r0 = epoll_create1(0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x2, @rand_addr=0x6}], 0x20) ptrace$cont(0x18, r1, 0xa0ce, 0xff) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x18, 0x4, @thr={&(0x7f0000001140)="99a0f39abf8033d2770a04ff1e39a24e12732670d8b467ff98f07bc835778ee2a5b52b75d68ce8734fd93fc7564fad48b935b15b89318d5a5ba6fce07ad3613191b972c630eec7403b1bf8b161006e1adb7585218e05a04e664749b4a27bf5f459dfe00c51b6f9525e9e6bfb791946784ad587c6b10e795299726e9600ba6ac52b7c932a19f6a433462ce07f893e3c5f19c9b6b93fb94db4ca42196b0100c7f8eb668efefb01ecd6ed20", &(0x7f0000000140)="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"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 08:18:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={[0x1000000000000]}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x4a, 0x400, 0x6, 0x1, 0x8}) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000240)={0x8001, 0x8, 0x4, 0x2, 0x1, {r5, r6/1000+10000}, {0x4, 0x4, 0x1f, 0x3, 0x1, 0x3, "0f648b22"}, 0x4, 0x3, @offset=0x4a, 0x80, 0x0, r0}) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f00000001c0)=0x4) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002440)='/dev/dlm_plock\x00', 0x0, 0x0) bind$nfc_llcp(r9, &(0x7f0000002480)={0x27, 0x1, 0x1, 0x0, 0x8, 0xbb, "6c91ea380be10f23755bfbe59f9d66d4b96003d391e49ebd4442e901313bae69e6bb058d389b50afec813bdad1d0fbb43d607ad11bc8db2fda5298d77370bc", 0x1c}, 0x60) r10 = accept$netrom(r8, &(0x7f0000000040)={{0x3, @default}, [@null, @default, @null, @remote, @netrom, @null, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8983, &(0x7f0000000140)={0x7, 'vxcan1\x00', {}, 0x100}) 08:18:54 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000000c0)) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x149500, 0x0) write$P9_RMKDIR(r5, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x8, 0x4, 0x3}}, 0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:55 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000040)={@remote, @multicast1}, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) [ 763.361199] NOHZ: local_softirq_pending 08 [ 763.365504] NOHZ: local_softirq_pending 08 08:18:57 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:18:57 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x34400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@acquire_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x800}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/38, 0x26, 0x2, 0x34}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/161, 0xa1, 0x0, 0x2e}, @fda={0x66646185, 0x4, 0x2, 0x2}, @fda={0x66646185, 0x9, 0x2, 0x1f}}, &(0x7f0000000340)={0x0, 0x28, 0x48}}}, @free_buffer={0x40086303, r5}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0xec4ceb5a12c49abd, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x1001, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/183, 0xb7, 0x0, 0x2}, @fda={0x66646185, 0xa, 0x2, 0x33}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}}], 0x67, 0x0, &(0x7f0000000600)="90b7be9a8aca0284f86b65c04445bb0d5dc6b9f0e8fc5ff191e5ece0926c17bfc8b3b045842c86d75db702ad7f94e5d38faf1eeca25337d498a7a45577372ce571bd7ee10c85f78c9a60685b0b195e8f188f59bcde2b1c55569e83547a42ee41b8f0bece778978"}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r6 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:57 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:18:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:57 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:18:57 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:18:57 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {r4, r5+30000000}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:18:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="240000002d0005000800"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000fcda1d83"], 0x24}}, 0x0) r3 = socket$isdn(0x22, 0x3, 0x25) r4 = signalfd4(r3, &(0x7f0000006000), 0x8, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28001) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0xfffffff8}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000140)="9632d93ca8eb97971588bd9edd79da8ebe83ef449c244ee656cdba417a60078478b6c9e3ceae545a69533a188a7f8212058fa27ce7617423fcd405dddd7be12a235e596609edd202f78051e81c1b29e30a56e8e3d03f1883f7c171c4ed9f45281a3ce209435d13fd79b0225e4bd462e0751024b433f31bee36b68569968957830271b8f9cd10bd06f0490a68af0c1ef712c7ff9285ae244ebe18a7876588513af66e08a7bd78de2698af106e4dd3f6601a523ee4f131ff2961beffee1356ec702b76b3684cc38316f75c6c8abb62a035f0a0f73041f61f326a02e8dcd4e9f7941d2fb33bdbef2bef846fb877aab898c4037d0657", &(0x7f0000000240)="65b33dfa45e3373774ba0df5fb6ea5c87cdd4ecd4b3c2aa7ca1efdbd0a82124956618298758e548d938744ab9e29d56a7abb1ae0e9851d864fba997b5321f99f2c6be4be28ef0a5c2d4b45bfd813fa60897ed6ff3ba437717b9d8861077e830d7b2e1bf9f0f9d4613102e9de0252df2142761237f7ebe25b5a03465afc4e33711ef682e129d09772458f300e717507f72730e74779c2fe0626a6e6c0ed9b0c7ba10ca3d3b1f6fbd24cfefe34c895d004cfee9b06fddf688e1d225c25283a24ce89bfc7f4a18f5961ad64c561a0c73057259022eff29fa6da"}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r7 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000040)=""/50) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r12, 0x202002) keyctl$chown(0x4, r12, r11, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r14) r15 = getpid() ptrace(0x10, r15) getpid() 08:18:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:58 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:18:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:00 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:00 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:00 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r6}, 0xfffffffffffeffff, 0x40, 0x1}) 08:19:01 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000001bff4)) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f0000000040)={0x8}) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:03 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:03 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mq_notify(r3, &(0x7f0000001140)={0x0, 0x14, 0x1, @thr={&(0x7f0000000140)="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", &(0x7f0000000080)="5cd5d53373ee34f5fb73cc306a05105cd367f93e419db2f4290c632e673eb2543a7efe97cebe19a2cda58452d370e96b614ad3df9f1a3a3fbcee625d748bac4f2c5fdfa48849965469b82997cb23d982c485fda90650dbf2cf85"}}) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000040)=""/47, &(0x7f0000000080)=0x2f) 08:19:03 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:03 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000040)=[{r1, 0x1020}], 0x1, 0x0) 08:19:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:06 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:06 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:06 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0xc8, 0x4, 0x4, 0x4000000, 0xfffff5ff, {r3, r4/1000+30000}, {0x5, 0x1, 0x4, 0x8, 0xf8, 0x9, "d3bcf8ff"}, 0x8, 0x4, @userptr=0x8, 0x10ef, 0x0, r5}) fstat(r8, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:06 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:06 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:06 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:06 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) fcntl$setpipe(r3, 0x407, 0x2) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:06 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:06 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:06 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x7f, 0x0, 0x3, 0x9, 0x0, 0x64, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x4, @perf_config_ext={0x10000, 0x8}, 0x2800, 0x0, 0x1000, 0x5, 0x5, 0x7, 0x3}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000400)={0x0, 0xfd88, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, r6, 0x401, 0x0, 0x0, {{}, {}, {0x8, 0x13, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x850) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:09 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:09 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x100, 0x0) read(r1, &(0x7f0000000080)=""/52, 0x34) r2 = signalfd4(r0, &(0x7f0000006000), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xffffffff, 0x9, 0xffff, 0x8, 0x0, 0xce}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000200)={r5, 0x18, 0x4}, 0x8) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f000001bff4)) r7 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x0) 08:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:09 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:12 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:12 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:12 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:12 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000040)={0x7f, 0x6, 0x1ff, 0x800, 0x1, 0x1, 0x7f}) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={0x0, 0x6}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000004c0)={r10, 0x20}, 0x8) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd53fe9c6c1b75991}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r7, 0x320, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="833ba29ca4824f7b8edf02997eb28afd"}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1752, 0x5, 0x3ff, 0xea2]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x20008880) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x7fff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r13, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x37}, 0xcfc4}}, 0x8000, 0x2c52}, 0x90) 08:19:12 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:12 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x0, 0x10000001, 0x8001, 0x1c32, 0xf03, 0x800000000, 0x6, 0x1, 0x1000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000140)={0x11}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040)=0x7f, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:12 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x412001, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r4}, 0x10) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:12 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000002100000129bd7000fbdbdf250a141409c7000008283f7ee22989d6db514dfd54bcc73114000169796a50449200005c0000000000000100000000000400000000000000000000756d0d9895bc5a969ea073d8776e0f7691cf4266337c0f54bf619773de8dcacca5c853f9908a535407000000bf59c3840bf9b4813cc1919e55ca441b27b0d74a7d1d6d18306539614eb5c108866a94fc18af2186ee17"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:13 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f00000004c0)={0x2, 0x200, 0x4, 0x39}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r8, 0x325, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x308, r8, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x98ee}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3101}]}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, [], 0x2b}, 0x80000000}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @rand_addr="dc293e6b077ec62a93137cd4e2fb4131", 0x678}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff8000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @local, 0xed5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:15 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000000c0)=0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0xa0c00, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000080)) 08:19:15 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:15 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:15 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:15 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() fanotify_init(0x4, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:15 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r3, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close(r0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f000001bff4)={0x4}) r5 = gettid() r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c001f00", @ANYRES16=r6, @ANYBLOB="00022abd7000fddfdf25010009000800010001000000"], 0x1c}}, 0x40000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r5}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) 08:19:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:18 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:18 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:18 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:18 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:19 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:19 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r4, 0x551f) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x20, 0x70bd68, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x200000d0) accept4$nfc_llcp(r4, &(0x7f0000000200), &(0x7f0000000280)=0x60, 0x800) 08:19:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x12) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x4c, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x8}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00', r8}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002d00050000000016000000000000000084b738f706cf894762be34fbc57f072762c07e32dee69b19a3c2545fd8fd95bd9cf4564a643334faa5bc423999c8216daacf1d478f72de051cb6f9f959916ee1005a7161114a97343ffb37d9d0ca2e091d5795d162b00f07de", @ANYRES32=r2, @ANYBLOB="000000000000000000001000"], 0x24}}, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x0, 0x80040) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r9, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r10 = signalfd4(r7, &(0x7f0000000480), 0x8, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f000001bff4)) r12 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) msgget(0x0, 0x488) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x100401, 0x0) clock_gettime(0x0, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {r13, r14+10000000}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r16, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r15, &(0x7f0000000080)={0x0, 0xfffffffffffffe8b, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) poll(&(0x7f0000000100)=[{r15}], 0x20000290, 0x0) 08:19:21 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:21 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000000c0)={0xa30000, 0x3, 0x10001, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0902, 0x7, [], @p_u32=&(0x7f0000000040)=0x9}}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000680)=0xe8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r14, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r17, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a40)={{{@in6=@local, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r21, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r22, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r20, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', 0x0}) r24 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r24, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f0000000c80)={'bridge_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002040)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000002140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'vxcan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r29 = fcntl$dupfd(r28, 0x0, r28) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) getsockopt$inet_mreqn(r29, 0x0, 0x20, &(0x7f0000003140)={@multicast1, @empty, 0x0}, &(0x7f0000003180)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f00000047c0)={0x11, 0x0, 0x0}, &(0x7f0000004800)=0x14, 0x80000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005e00)={0x0, @vsock={0x28, 0x0, 0x2710, @local}, @tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, @xdp={0x2c, 0x4, 0x0, 0x14}, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005dc0)='sit0\x00', 0x80, 0x1, 0x7f}) r33 = socket$netlink(0x10, 0x3, 0x0) r34 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r34, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r33, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r35, {}, {0xa}, {0x6, 0x10}}}, 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000005e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005ec0)=0x14) r37 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r37, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r38 = socket$netlink(0x10, 0x3, 0x0) r39 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r39, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r38, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r40, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r37, 0x8933, &(0x7f0000005f00)={'team0\x00', r40}) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r43, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r44, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000005f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005f80)=0x14, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000005fc0)={@empty, @rand_addr, 0x0}, &(0x7f0000007040)=0xc) r47 = socket$netlink(0x10, 0x3, 0x0) r48 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r48, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r47, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r49, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000007180)={'batadv0\x00', 0x0}) r51 = socket$netlink(0x10, 0x3, 0x0) r52 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r52, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r51, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r53, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000071c0)={'veth1_to_bond\x00', 0x0}) r55 = socket$netlink(0x10, 0x3, 0x0) r56 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r56, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r55, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r57, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r59 = fcntl$dupfd(r58, 0x0, r58) ioctl$PERF_EVENT_IOC_ENABLE(r59, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r59, 0x0, 0x10, &(0x7f00000072c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6=@remote}}, &(0x7f00000073c0)=0xe8) r61 = socket$netlink(0x10, 0x3, 0x0) r62 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r62, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r61, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r63, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000007400)={'team0\x00', r63}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r66 = fcntl$dupfd(r65, 0x0, r65) ioctl$PERF_EVENT_IOC_ENABLE(r66, 0x8912, 0x400200) getsockopt$inet6_mreq(r66, 0x29, 0x14, &(0x7f0000007440)={@mcast2, 0x0}, &(0x7f0000007480)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000074c0)={0x11, 0x0, 0x0}, &(0x7f0000007500)=0x14) r69 = socket$netlink(0x10, 0x3, 0x0) r70 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r70, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r69, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r71, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r72 = socket$netlink(0x10, 0x3, 0x0) r73 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r73, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r72, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r74, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000007540)={'batadv_slave_1\x00', r74}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007900)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000007a00)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000007a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007a80)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r79 = fcntl$dupfd(r78, 0x0, r78) ioctl$PERF_EVENT_IOC_ENABLE(r79, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r79, 0x0, 0x10, &(0x7f0000007ac0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000007bc0)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000008800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000087c0)={&(0x7f0000007c00)={0xb90, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x45}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xffffffe0}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r26}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r27}}}]}}, {{0x8, 0x1, r30}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r31}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r32}, {0x1d4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r35}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x297}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r41}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r44}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r45}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r46}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r49}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r50}}}]}}, {{0x8, 0x1, r53}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r54}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r57}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r60}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r64}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r67}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r68}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r71}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r75}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r76}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r77}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xb90}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) 08:19:21 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:21 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:22 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) fadvise64(r1, 0x5, 0x0, 0x2) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @thr={&(0x7f0000000140)="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", &(0x7f00000000c0)="02ee867dc68f3a8dd394288bc81668"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) 08:19:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]}, 0x78) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:22 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x10000, 0xfff00000, 0x800, 0x3f, 0x0, [{0xff, 0xb7, 0x8, [], 0x3}, {0x7f, 0x7, 0xff, [], 0x98}, {0x7, 0x9, 0x7f, [], 0x6}, {0x1, 0x4, 0x0, [], 0x2}, {0x82, 0x1, 0x0, [], 0x1}, {0x0, 0x1, 0x1, [], 0x4}, {0x80, 0x5, 0x9, [], 0x81}, {0xff, 0x6, 0x7, [], 0x4}, {0x7f, 0x9, 0x9, [], 0x4}, {0x1, 0x9, 0x8, [], 0x20}, {0x2, 0x4d, 0x58, [], 0x7}, {0x2, 0x7f, 0x1, [], 0x7}, {0x2, 0x1f, 0x1, [], 0xbc}, {0x1, 0x3, 0x9, [], 0x59}, {0x9, 0x80, 0x80, [], 0x37}, {0x3f, 0x0, 0xdd, [], 0xff}, {0x58, 0x0, 0x5, [], 0x9}, {0xb, 0x7f, 0x2}, {0x20, 0x1f, 0x1, [], 0x8}, {0x83, 0x9, 0x2, [], 0x7f}, {0xae, 0xf3, 0xa6, [], 0x9f}, {0xf9, 0x33, 0x93, [], 0x9}, {0x4, 0x9, 0xff, [], 0x5}, {0x80, 0x3f, 0x49, [], 0x4}]}}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vcs\x00', 0x280000, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004089}, 0x4000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000"]}, 0x110) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:22 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:19:24 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000"]}, 0x110) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:24 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x1a000, 0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:24 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:24 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:24 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x98, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000"]}, 0x110) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:25 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="240000002d000500"/20, @ANYRES32=r6, @ANYBLOB='\x00!\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0xee00) r11 = gettid() ptrace$setopts(0x4206, r11, 0x0, 0x0) tkill(r11, 0x3c) ptrace$cont(0x18, r11, 0x0, 0x0) ptrace$setregs(0xd, r11, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r11, 0x0, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r13, 0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) getresuid(&(0x7f0000002c80), &(0x7f0000002cc0)=0x0, &(0x7f0000002d00)) r16 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0}, &(0x7f0000002d80)=0xc) r18 = gettid() ptrace$setopts(0x4206, r18, 0x0, 0x0) tkill(r18, 0x3c) ptrace$cont(0x18, r18, 0x0, 0x0) ptrace$setregs(0xd, r18, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r18, 0x0, 0x0) r19 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r21) r22 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r24 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r24, 0x0) keyctl$chown(0x4, r24, r23, 0x0) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r26) r27 = getpid() rt_tgsigqueueinfo(r27, r27, 0x16, &(0x7f00000000c0)) ptrace(0x10, r27) r28 = getpid() rt_tgsigqueueinfo(r28, r28, 0x16, &(0x7f00000000c0)) ptrace(0x10, r28) ptrace$setregs(0xf, r28, 0x0, 0x0) shmctl$IPC_SET(r19, 0x1, &(0x7f0000000280)={{0x3, 0x0, r21, r23, r26, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r27, r28, 0x3}) sendmsg$netlink(r4, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000140)={0x320, 0x33, 0x20, 0x70bd26, 0x25dfdbfd, "", [@generic="0d9986305d17a19db2cc7d982c9d635d8f5b713a184e00c620ab6095d8fa6309a82ea0f46b9c06833acfdedd637ec05bbe40794f06f2e6d9ab3aad8fdbb65a3102dd77e419972904991274c3d8a47784fdf0dcc593402189de36", @nested={0x77, 0x8e, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@empty}, @generic="58bd512bf45ea860c2f17434692e4e52d484ce2316f6d52c7e40df6ede153bf433b04ac3d8aba280e4ca89ce3713b471a8e8cc", @typed={0x8, 0x78, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x10, 0x0, 0x0, @pid=r8}, @typed={0x11, 0x21, 0x0, 0x0, @str='selfvmnet1lo\x00'}]}, @generic="7419923012b3dc98e2cc8154e4b2b6fdb2c815debb74083b67792208d6a3fd5dbb956a9a3f20e13dafda8ec90c4f79d6bd25836c39b7721cef790686ec9d7df8113cc2a3bd0736ab43577873cbb92f91a841b78d4706df400421559093e5e00242e5f7ab05672b3c361ca9733aa6ea32747ef9fbc5ff939be4f8e00aee90b242cedf6db293df6a4f7ce447719683be4f13b3b9698fa9650479137aa1a4d4874ac1d284ebddaad7b662c6974921197dc354a3af8fdff3b2126ab55f79dbf2eb5dbdb150a35c742739", @nested={0x2e, 0x4e, 0x0, 0x1, [@typed={0x4, 0x36, 0x0, 0x0, @binary}, @generic="3d96e29fa3db4bb8aaf310f11e717278dac8a96af84f", @typed={0x8, 0x65, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x9}]}, @nested={0x141, 0x80, 0x0, 0x1, [@generic="7e7d98a8808111c52b0b6d60c57818f317c77cbf4f62d7dfa8151530a28330e6d27ec02d8d028fa07935290a7bf78d9e2c96f58b152c333ed2f37fae327c3677e2443dcc3352a17dbc2567099dd21afc1a0630ec803b1fb5295c43e08f91d8b057113d99e27af4789ebc5ebbdfa9e6a61abe81e48d38ab2a56e4ee58bec27dcf2d63257c65bf7e6602e52da37d7184ed5cf91c20a969c5538b3010070297936c771e5c6f60af7a8a0cee28ad21e55362", @generic="19d2a251b286e9da15420dd873ceb7b2e86ff1daf4edff60379db7295f63c836e952b4ce600688ea34b18c0bddf4c9c170f742f1ac", @generic="01261ee6c48123786b819647dc9e72d50d6791db5aaacf93b3ecbe7e1f06b4701648358659bd473c95f35078c0806176d93f59fdf134ee8e56526a33df7615373f3cc31061927610c093bbccdb6ae3160cd3436ba6305ca9"]}]}, 0x320}, {&(0x7f0000003500)={0x1594, 0x1d, 0x800, 0x70bd25, 0x25dfdbff, "", [@nested={0x329, 0x6a, 0x0, 0x1, [@typed={0x11, 0x93, 0x0, 0x0, @str='/selinux/mls\x00'}, @generic="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", @typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@broadcast}, @generic="e3a3a82e24f3c676e7b95e4991b54e774ef62278e324bfc84d03c486de7efe2380c5239d16e49f7cce7014f47fbf6a9bc93f3fdefa48cbe56223a30cc5d6f774332fc9d2bc62460acef051fdc14e304d751be9503e2051614eef52b4ad1accda6dd39c3221a743d5d5f4006f4e4a865ba2c40857ac9b45e158cde9f309649d94b99534e5163040e643384a3e528fe46d31ec07a09ed5686d4cbd66f82362", @generic="b0a559aa2c8e28e53092f61fddb1587292a2d43f4e6cb90896639257c1ea", @generic="a631735795278f5d0fdf215f51a2a5a31e7ba7ec2e8347b406dc291d3f999fc952f47e1960cfa0998e513f7d7f03478ca93f3eaa239df3b9bb5dd0aba7b3479de76619801023950639c6ffe68413a847985fce26ebde978eb48494c37709c6b9b502675f6da7446206b03fc44e3774ce54dd1352be550e02765c4c3819c346c12ea511734fe382b565c23daa64dfbca8d2386197c919266f9819c34065f357d8c50c941d69738c6cd917f9ca32f040cb91d98f8a10e8099a7e1053", @generic="014caeb7a25badbaddf385bb34ea6858a02fbe49e0a65647cbb145f606f910ffd072ed467ae472b65c6c60c374ae1a682a6b657431f6f49b8404c14696cd782378dc00ff3f8f61a3248a530646e24303509ebf58a6540622ab371232e9ce065dda99ee0bff848442a8c7a19998d51f6c23fb91e2eefc1f14df53093d113bb5e90c00ece79eb1c75ef9dfd19d09cb187825c884321e4d"]}, @nested={0x10ab, 0x6b, 0x0, 0x1, [@generic="c9d04a287af2218ae78ff06a4e54a6f4088c307381aae205103c576bca6bd778a7f3ff3a7b7983a9427f1e3fd16c82b1c4001ac7c7f64a1866da3d7439dfb3e9c2adb9460d16478fb56223089b86fcb9d30b0522d2d5fe8e6671182912b8afb69857d813ad8f78fd0e775f32ba9f6293561e291dced2724426cfb3a7987f2a0614c6097aead8761ced7a2c3fc9a32e4f8c85b26307592daef3c12435517aaa", @generic="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", @typed={0x8, 0x75, 0x0, 0x0, @uid=r10}]}, @nested={0xf8, 0x7f, 0x0, 0x1, [@generic="9e9d2d3b8c8a95a516d0e10be17dfe67b766e264cf9a8a0074e0956a222dd8316f6cb610390535e7029ef373c1cf72f403c02373c690afc5b473cd6ca1094884a033c0e9614bc702a1ece1130cd4ce96ed37dc0d077cdad02fca06684a761dfcc48d42f843106374fc85cc170c54ba6052df67f238b2f88860b0429d7aee7d4c09e6be5bcb0c962c1924c8e45b5f05629cc0d4623452278a5aebf2db17c795e4b5434cc9d29ea18bc66af2f3827bb02944d62402d89aa93ec7bc80eeb49a4c011404cedfb969a7d179b7244aa231ac8af885c3be1c0e565025b639bd8d13a8cea03260a9ff63776a70288a874a2d9cb299ce9f36"]}, @generic="bb57b4f5e2be28e0cfce98dc16ad5aa5bae86d9c85946c0a384ee2bf3b5f2c2062e05d52aeb7ce5a512816d256b6ce82a0ebec2bb0128786d9e69e2cae2cf9824de66c5ed8be7a7fcdd9f3603819fc9b426b1b639a9bbd50b1158d621405c3f7b6a1eb074f3c7c1b717bc00e73ca4e6376e859eaee5c02b2026dfaca0a948e4f83bb1acc07b4f853c467b3b9f5aadf7347ca160ead025dd6de262c136299a70da105b593cc", @nested={0xc, 0x73, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid=r11}]}]}, 0x1594}, {&(0x7f0000001a00)={0x1150, 0x1b, 0x400, 0x70bd27, 0x25dfdbfd, "", [@generic="17b8443b7ba861e8a458fc87d9cba29cd4cffb5825d85dffebae7f18b0f0249fe5774e8f7412ea84d32dbaf8613c32d0a8926dea5753ebf34d0b719a3055c7fdcd276efd059990f71e814a3a2cb88ff7eefadfc34c223697df0eb16c8ca64d586084871768a426590258c881f8b4094731f55c58fe8b8890579d3a1f18e20f690b5ca4017bd9d7498ab557a25dfb621538d754cd09f89bb5d60511e075ec9b3128bb982a262797746726b231a9df826ffb29977d1017aab8ee6ac64483d829d00e3d28b15c959e8654f3e1742129264f3abd7ba2175b", @nested={0x45, 0x29, 0x0, 0x1, [@typed={0x4, 0x46}, @generic="f1c019585800d43c1b61c8c5694f56a2fa33e9499f13d06e4db5c6681d0edb9d3a6bd9af12013e28dec9f44df4e9613e19fa28b01c5695e55cbea4ba47"]}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast2}, @generic="bf141618d5b2f3aa28c8c78771585b15b2a4a35bfb3a4003", @generic="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"]}, 0x1150}, {&(0x7f000000c780)={0x3330, 0x2c, 0x100, 0x70bd29, 0x25dfdbfb, "", [@generic="2fe75b74944ac78db676e9907bec76d8ca1847c4f4f9f477845cfee8225f07575742e1156f3645ac906f5b7a780f8c840fe6f52efafddc00e95a1ee5e03c27408084d943fcc8e71529e8bf3eab18b8de8e790b7833ccc6c82efea4dd1810e4193d1a53ed68ca03e42adbc866c8e736078978fa6d72779b692cfb1f45b1b9f5f65a807830ae878e55bf684946b1c6ed3950c2c0773480bbf8a8fdba3601d17216974e0280339b4dd375bf27ef0007127f5b5ae52cfb62a85de2bb21da183138", @nested={0x1137, 0x21, 0x0, 0x1, [@generic="a898a8412a75cd65b53781d2bb79daad133c320a0f74591a1e5cd26f248d4a84148688b8ee047f697eb8f038d8f4122e6c9c6ebdb5fb5c55cfb57253fc4ed71e96b4b54c0f6e1ca7edd9145da79b553cc68929da9093b3bc55c00d2847cd8651406e095447e557327fc0e81150b5ccf0c8b1af36e3e35a87d1c6282a227f6e40027d8ca967b5948959ac75c45542cb209b779684094b7072131647ba0a86c43135338548516875ca9762fd46229b74116eaab7c0d545d33fd676ef0f92ed41b9eca6e4bee9a7a8d28da09a589d813c01448ecbc27a580b2293be94eaf072e798d08013304f01040395c7708bfdde6ec979e252", @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x11, 0x1, 0x0, 0x0, @str='/selinux/mls\x00'}, @typed={0x4, 0x7c}, @typed={0x11, 0x19, 0x0, 0x0, @str='/selinux/mls\x00'}, @typed={0x4}, @generic="91fc8366c2fa221f0c2d15ff61f96dd0afddf260b22d1a5c137fe76deced22230c4c41a2bb7e4c520a77669ce5108471cdcbf323780cafc7ce10f229b1dc05181474fdac24075a5969c17a2057e4661b0cdd3dbc91c22928d3213a2c3a3fd2470c1250619d500f646b088ecb16096fe7913c8add8a327de500dc0f8db57d15ed21fb2ec6a6ca73ce3db377d969b1d222f513e76443c2eba59a74b5c4405cc0e71afd6c593c85d03eee5987c2e89450ffa9b49a514aa3ef6cce98ac9b66c64536b1b0eadc90dabbde49e5c4db875be37bf994bf87773771f8da18b6822541fc9db6859a5b8ac296673fd693c64364f74b145d42778cfe01a2c0b0094a65966080c9598982d6a560c0200243dd79e6b2551ec9cd5faa4e6a83bf3502165de7ed1569581e1dd68092d0949551a2e6c79a36603f57511714996baedde78a2a309498f75583e127f8762d7fbe49ca1ec40a71b48231b2a8815c290edb15766e2f03fcd0c1294c2aad691702e87ee1c78f7b98d135ede1f5510d65247930d5999c5aaf559a90d1c2e165fda5e9ed5f43816ede9fd03212aa0051449465dd9a58d7f1d5a081bc4e19d74c455210390b060c7d5b5eb08175a5acf7e45536149249adc686322ffdebb9c06d86cecbdfce36dbd7b4e06970bf216319925538f557c8c814cf22dd52a92e2009fe99747154046143412b814814b495e52926d3c084392bfdc7cc288e92799002976a313b0629d360d9621b7168d04377aa1ccf8d7f7b4226501e4ac18c9ff4a0f4e382f1facc49d784767420203b0a3eae6bb2dbfb63300a8461407d52d18639fba1838356fbaaf1dba21ed14416ecb5cf13797c0ea35bb19c6e37e8f4adcba0695624da7670dc00b3d9c222dc7a450a7d96e9566bcfeab288e512d8a85f41a317dd8a1615e61d0d287a48be09de71a8340e98129f3b489982529c7d56190459bb050e85357fbef3feb2dd3e4e10430020668c3c734ad954896dae121ec6b41063ece4012b9bb89457c2bd0c871e37a56e62de59944c4cc9f9af0e30178a94325646cd115e089bea09e30941956b1ac6a3734f39b2b1c4485d3e98db849a85d4d382ad95a9198a2aa77c6679d83568fdd03016cca2cc6e0a118a4df801428c21c18fe0ab14da5ebe1fe5ddd139c310ec7b0d9905163cc9e68d0a11d0aae3d1727d85fe781e605a7c1fe2a3b80a51d329faacaacee9ed5c2abb342ca1a7e976add5d15757f5f455b0cf663c969342174e609e583a385d5ef2690bf8e0f95c0d159e12e88c3d32692013c73c63efbcf9ad51f4c41540457bb6057dfe2ae501549e28f35762316346ba4e04834f26d7762d68961a85f46583bac3c0db2a68fb795a0208e46e0403c67125bf5a8f0770d41a35dc1cba9ac7f668eaf2538fce6884354b574f3d9d16ba2a68c9e121da18dbd8c6bb23686a36fa708a8b9f575b6db85f18b4ac5a40bf2e20a70ec00e8030916929099740df57df105dd679523399a3eecc9c0fe5037ea422ea7afb0d19655b1f77fa843874ddee2ee0fd3786005acd0f86f07fee09787f0a110f52258440c8fb98504683b2495e2249477036329a536a942be7b1f7bd4d358dd7a59472ea6120c9a55fd6d2381ba6ce1a28c93687e30c32e39053078135e369de2b181c049bbb8050ede3ef6d3dee8153448f3576f6f44ed5781b11eb375659244e4240d2b723b2a26f65068c14e22986ed77fcf278df838d7190f6d166369486e3b8a4ae06f6f1ec5f4f3deeb64e57389703ef4913ebf8bff232a0b7d51ee333b05c6d4011b843e36aee79e6af3c7d0447373bde7296ded54159e7282af92268c9ee689e6dd8c6a5f020a51913b78e5520ded43540f5560e0bc2db97eb37d21ae200716a3f1251aaf6a33250479dd2f9ab1397ae97b265450ce3410fc8f711e93fcdf21b207082d529319fcec0dc49aaead6bf09149b7e46e6ef9c3c74059fafc1496b9b98239babf7897d66c75fc0dacfa7d7fe0c22b0aa5074b031f73a8bacec618d47745e1acce8a78fd068c2ed7aaed6fbee7619407fc90c434aea5dd0250c4fe009a0f0a1f9a361086d15f28b85c5f62cb77f8cf50af9655a5b3ce448661d81ba1440d87ddcc7a9ee54c3d0418c66dd14b2c3a409d9789c82a70ec915939c86c0e8f665e0bcd533781b6edb9be15e965ec1df3aab9a469c52c0a0fe4100546e0eb10bda2df85b36bf6be3eebafe9232e9e2f970e1ab14f5236b8b3876e9e5274fa84f75d172c8a58ad200d52925aab169f5a08a69a1e893baec7aaf66b31a852b73875e6e89ae761a3c805383b1419a3aab7b39252f3069f0cdee67ea09b86a0751733ea51587c6467c4cd2dc1802f4e20f8a64c0aa90fb082188b1dabce7e90c331e841c35e2c5519e5fd737c333ecbb5a56fa4f99baf11f0fdb7ad13fa03316c3e90f6a86027c56a26d33a5415b3ee93374341c88aa9b1f55a3a3c9311937e18dd7483254e0cb9e75020afe713053089e2072bb0e2fce2b23372dae6da583e1b06d44f5f7bd680ac095901d5a22d2fcb6dd453a59d7e61eaf72c7ffea249f6815e591dc1bff4c2867a2ca842f78506086908f679e89510826a177759db637e0f0d9ea5c40fa52e3d9b9e2710eecd47162944735c4a5695d60f0e309da8217f27baee36dd49061796929f8b4aeea55639d0a6533b0e3959e4535a2bb4c9faa38a88441df164fd58303847dbd0ae88c9f4846c94cb0d7625d32b41fedbf19735f2121db0eb74ec34b4fbe5aab85cf7f97a3e583ca281824d4199671c176902608dccbd9d078ca59bfe0eb2424bb16603c2a5f675650769fb8caa70ce3668ac7d981570fe014122701e6b5637d98d8f136edaf88f283c891fd95b08eb6ebd2bd9a7cfd3b3ea3b5bf9e93e625a75d43a17157c9aec3bf0301b3f41d66b629a903db9da77e3edebae05334a2fd4cc5e05056e7a2da9bd6815aa8654ceb31a1b03364a05f0e6b2f4778a6cbf6e304dc7acbe9a495e2c4d5dc7df9f2a3cf760d94acbc67c775040af71d85cb3b8cc56770e0d9d1b55a7db370e2211a686af8081cf9076e78375e8ee6a3008133efa14e7e898c321865ecf30b72400e3cfb66a2323735efbe183c155662355e08de449770836900ab8b7cf64a08afc6ff250ec60afaf21e01540d789e3360556c19220311cbd18316f00800e2ba26ae48d62ddc261db1b069057cdd17bc1c049d8324e55b6dd763e518ba710f1a498a988f206582e4245472ccbdd5481a305c6de751ead78e17f1774cd4f895d4cf7a0db765489159655a663334c63b59a32028c2a7116793374fd2c406e879da36f6d86b2f66fcc1de2e30d42f7ca220cfaa6f4b5c61f4b8d185131b1c9bfd729bddf9a550aa5f5c7b57e88ad9813ee63d8f83c02a98df916399ac02cedcf016cdf7923b77e906d8f5be6392767dff994ac4e5ec9a71597c8098fee0d6e8e0eec9a2f9a98d57855f79651c75a6e746ef4cfaf1ad095276a399ca37f3dce17eb3c2254111b8c7af62fe18e319600c58c472d9beb4d4f91c6d98fc843504f00e3d7996f72866c2ad4a7355c4f50657d666beaa2b05e11569c666f779b6b5543f75eed0248a433e59bb8ef83ff4cf09345b6a08e54314efe419880ad83cf4d6f91d34c7cd2e5ee210df6be2ca48c59e5255b4bb9e32737ba8ce84c4c1bc84aa65f4244b2c0b2932d940158f5fb2d819107ac0eb5a5504075733af8db62258f70d9fb67f3926362f1e8f35cfc052bed25b9c068103a003934bd0b34405ac4add82f1db5bf539e9d49cbb2f0a17ebe089bc444b6ff5df00583a5cc09898fe68f8d7a7fe96b0168e4aa4be1de0a6690f1e6086bac085fe8508236f030e48e14b82643fe2f0c967bb9eff330b61403cfed4ff047ffeb2067828a78834b47361ccd0ef7adfdb44b6bcf0f223dc1034e3c4ea940ebeac869976e54b397c8cbab1e911ca1674faa692a8144c9eb52410b5cc0cb675d3f6ae6921b3c1c2bb3a84bbea1a11e421692ef30a1ee9d738895ee6b4920a5972a1e0f0316fade16381d2d348a7597803fd91cb0e9a99597eedca3e999b6781f9c1cf51f1849fb0a4fba71923e8335905597a7abb86ec7b88225974f7a0123efb23678b110ebd3681ac1b944b54a62a16143968e994edb12b1978397286372611031d9c4b5068d30b01ce1ed35963f23a23da2445fd1a188bf16dc77b0a18a7526ee10c778303764331fbc3050d90fc64b365d5a8e4649fc6ec9922628969a2cf65b0f4009b3062cdb8630e18efebccfb12392af07f019d469747e9dfcc69393ec5c7de28166d73bbdaf00acba4d95db1b85613f0fc44c59e990161983000171166a8b0e41fb7e669ed17ec964bbf799b14086630d116c0db9e53e4c842df84bddf1d02ec268c82d3bdbe62d7c2cf83f06ac947b2dfb921362777d92a1f0d18232f0273e17760ff51f7a47f93d91056521d4c128f4a402ea9e3ef772257439e61ea9d8e69a0a07485615e4e4af1bd4605c952c56d21ed29184cf4e1339da95be5b546ade491627176ecd6fce4d87a5c713e0e46cf25917d636ab3a737e3d424dd9479df2c9d30c9a64113c5bf89a9ce268b94173c951338450483ba9560aa977e67546969f4b517e4cb98e3ffe57b44fec49e9ac89c565f6ce4a34398d533363bf0f139822adcc235df96b0e1b77367cfeedb5529cdd48b53624400282c2b941d36b6db1b146b48d4e77a4de3fd70e207dacd644fe452c247a92916c1954f3f774d1b808fd7594a754e0020b5b7bcbf5f0196daf3df49689208a0824d6bd18e307603402cfe1836adf1d960eaf5358213c9c1ab872d16162461ad708b494ee34d00866ec5510dfb682d9fda91343b64078fdea7ad5377d9fee44713e1544a30e7e6b984351b0251aaeb1f3d888d15ac58778155477eeae15f402b70984c59731e409000cb6ed536790a84d6906b3dda7e580f34661818b9eb00b50b65d2c7a5f28e16a525facb94e56199cf0e3c8bc1abb8d03dfe57a5e0315c050a69370b8d481b61eaeb307061603b03769dfcc86e59161537379c4367b3a2a711bafa5ec6d5b0fb52d92c4318bc4f26490db9288f48830c5fc080b331356d09dcd64da03f48b7ceceff7f461f7aabb84205ac624a51b1780c009074a0e1bc38dfec1ff1fb8427e0bef06153044383136c2726c98247868af43c71c3b7cfaf527190eb0c47e9bb7aa6ca3e1480033b4e44bb4bc3e9f85567b63fdc11e89abc12681d71b9f9442592cbcd39d54b96bd461fd6b0d73b9ab12d6c63ef3c397922c44a5c96a539db5bea62cda77e3bd804c0be49a8a2ab906a521f4a0b9d7f196982a72ed3099ec41be678d5068c9e1a4a4e00fd2318cd6f455384c71323e4e0da42cc6cb7977076f165b4cf61c91ccd0859e9e2e4937dcb5762300f7caed4cc14e33b5a7221a502d2f541d46866e9a9c668679a64c985526ac737e8ec65891c4009bba9b850a7f79ded7653759797fccd5109c251929e03e752976a55dfb3041eef501739e29d3b43eafa37dc52aa7f776c19966087c0ea5f7d098bc5eca76787843b9852bae6b9fd61a508a7ba979e49fc366e00ce1321b620c98a1c015c292d520fd90a8b3b3714d6f78d992686379adcc720da3018fadaff85aa16a268533740938aa73f07b19ef15a6a7c25e92b5282af3f9219b8029c067190e3bea29d85744c08978cf0ac16d81871580605acb94313db6a38112ea3c293cb4ce08a82625e2f54475400b328ca89a0c964ced0ff18cb5a8264f0e8f746ad32b942295cf878f1363c57b1bd5b572e9f", @typed={0x8, 0xe, 0x0, 0x0, @uid=r13}]}, @nested={0x106c, 0x30, 0x0, 0x1, [@generic="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", @typed={0x35, 0x62, 0x0, 0x0, @binary="c11e25631e00d75cf596f612de5a9fa26c773bc434468f10f924b48097799797cc79e84f6e46106a8229152aa0b3adc880"}, @typed={0x11, 0x65, 0x0, 0x0, @str='/selinux/mls\x00'}, @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x10, 0x0, 0x0, @uid=r14}]}, @nested={0xaf, 0x4a, 0x0, 0x1, [@generic="24f87a61b16b652a52b65993ecfe056080d3a0c4e9b483847a66f22a2592b64f5c3d75b4d240f79ce9e797ef69dc535957816b0bd79651a03c26de9b390c3786710253eb560023d63226cb40c48475502c334cc7f9c03025269c7c5f03c55da033b90f07957ceed8b8e3c9f37de190ae750dc25a9fece853398d35e8fdea1abd2423e1e03dee96415d7dd59233c783577b713a70ac8077b266b1fe5b4155f4d3265cad43e49469fcf476e9"]}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=r15}, @generic="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", @typed={0x4, 0x28}]}, 0x3330}, {&(0x7f0000009380)={0x33e4, 0x38, 0x1, 0x70bd27, 0x25dfdbfc, "", [@nested={0x20da, 0x59, 0x0, 0x1, [@generic="81e989a696538f8c8c30a0e4f44e9689f1bab30f7387a15db9c9719adc6922962adc9c77f696211fb8ca7d1aae5e2f73dfd46fc8376db3c5ea46d79e677b0ffcf6a59e4de5bc81b86b80aa474f9416c8246febf07f253dd8ef72d0e58753f71082e5bf23d541c3656dd75bd2f2a2dcd6f1bf9467268e6827e7d124f719ed5eb0e70f0c881285647861b6709dcdbfc46e4108c282ad91cd608ee87185403932d39412a2b331d06a75900efe6e51af689caed2fa5557c441fe75af73b1eeab86ad7843cdb5496eaf8b363b7dff953ad2d6dbd519e1ff7e1f0ce2ad5b1d576dd348264988dd3fbd00e27abce52d12aa5794cc53612859e7f6a30ddef1ea7736a6fc70a9fc9e0f8621320caa24ee42f81977ce20ec370ba691b3fde8ecf734b3647f55a2ceda893ef2fee3324863a1fa0912b8451b92d9f2ce333da28fe2be010378a58bd32d92675627a043832bba84f7d8bb2d624fa61d658e2b61978c557921388e4906cb16f9f11bc33f40f29699c1b4b6eb875d1b79bec080950d0fd2452ff1a6c10656ecbfa069fc6abd30a868b318e35a2baeb63f77541cc9484531504dde2aceafaf406e8aaca7244658d01cbf154707c6b9f54fd0d56e1c670258cf4dda8a22dcb16891dfb248a746bf757b24938611894fb81b668e047e95926ef6f8df1193f8a78af399969e0fb144ae224c8eb08b750291ffa675b289e2b5c397ab8ecd6e46f99b529d4012ba2d89df02bc64fbaddc71379a219dd9eff222574f999e1573062bd2e781ed5ceeca55939cade13a65f806b7cfc3fabac61f4bc1be6783837f862269332746d099bb0d6d00275ef805e2f56c5585b705e75fdda6c10e79c245d4f8a236aaf2bfcc468cdbeb0313f241587a53b857aae435da1c5bb830ec9052637df33c99768bfeb0bb6e01b90fc616893ec3a0848bb0d40925abb765a9bd81a7106b37f8e2d5c61097da4719724e15bf2ed57e477a1f7809cdabc72c42fb072a9bfab9b53eadcaee5aa435a53e991e8a023fd0b9c7836c9f60add42b0ca2939a9cd51c94c745751b635232653ae7d416a6385853277e0f94f27de0f5e1a0523fa7d3fb743784b0f734652b335a61c8c39ebedc5013f0856c1b3565af34a7c96325e0e72558d957ee885d2a2674732e5506a9f1f3639ab70c21c267e5d42bc24337c3b7b23eb79ff431f5185334d6e5a7df0a60d73525c184334414fc9708f5a3f27b8e88926129d6a2d6bf39dd99ae7ce09f34e9a8dbacc37a3f406a59b5c11ce1b845b63add2d987b1765cbe831abe43d70c170d6181be06fbc72795e9a9a441ca51ac824cf3300c3a9a39021d720d04e2ed1c623436c536511fb7fa7bb54e1d528c69a0aba5f6ba0676c7ce22e83644514b97936d3badac0a0d4274b009f7577c1e03ab631419d47c860ec0e66ce4150dc4c71b0918ebb4cb39f118f0897835715c305fb4bc567650e3df63de8660b34f6a3d1e354ebb25003b206be7c3d792c2f9e8f98ba3645e19759f9364631181c4146762ad66fe95d7f550937086cd6e0f9428792724bfbba440ff5955fa1c4d4376a2d65c79a55b7c9a0a720a31dde4331a7a0eaf0524a64350078f845e567da8c9d2c6281544c2df16f5d4e50a0d94fc720214697a6015717ec21a4bfadc7d3b17c407101fc78593a7ee84f67b8ce4d719808416fd3284e6fe4d172647d8fb0712bd2cd0c2f11a685b81d5366ab197384d9c386ef89f82e51150f71e914ce348d80717f3f957cc75997590c3491015882ad2f0534847649c259e3ed628add3917466bea8a3b6649ff2d0aa9900edfad88d42e4676a1269593cc125fa5c7c559d65c3d24735593132d3a7ff245120206edace27fad42465785a8f19fdc0640b8fde96513055996f2b5c2659bc9e0cded38d50ebba0f1d23b90e490f10b1f120f384c6906a2073e799b3af096e79e4898d0aba2b115bfcebbe3fdfa08e866bb9d2081ba916f5c6e80cae43520c1a90b47c2b2f605b970dca95817e4d17da5a68240bb84bcfda3c8c4befcc04c6702e58a8b64baf711f52e6e728db2bf340f97d8ae48cd2e02f4076d636c7cd968076f0b3efabd33f7e2d1e766be95b601e38bb8a86e819f33b304386ebb6ec43205f5877a44bb4eacd811932c25808bb818ce711af383472015f333bb3cb87e88a6a68353e06a3b1e8aff10ec904fe2ca615d0d7e4ff772b3c90738911374ceb4879dee1f7067f884dff5fa80a91dad75aa5816c067e3b6398803e62bacf4f23f517e0299379f9654a2a15f53a2d1cc6a0b31a93aaa869f4a5b3e85dba17398888f7627d23e48b5cc0a6d4cb69278d9fdf3d33f3ca28ef69dc80fd26ee9bb77456193eb3baf1a75c8b53d05d9c31b7b51dac54d8e38dccc74a3cd5bff614fed3d5385a0c5c84df708f95e0cd4b49220ed2cd71cf5b8c9829266adf70e19ad55dc1352c9804e32bd814d583d6ddb64c1bfcfe2fba86a5d3f884310c357c40de557db3253d9cab41845350a1c2490602d72f9d8a703bab5bd4b25314b121575e74386663f092234f31b496462178caf1cfc175718ae25ad776a2f3084c80ae3b58de3d5e2e742d5e7fbacf8594da1845de282bc2b6e90efa78d01a64f92d9b6513e7702dbc4ef6c183ab0d1c6400f9a577c1d8a9648042229d2bbeba08d5e4c62db49b8ba7e68f1fc4170f1d252ee0119604ee84c831062bc0a5f1d9b873684beecfffac1eb1e213c39e31f957a5f89987d861a90d4a0c220cf5fa7f3c83f5fe45c1fc8fd229df47dbe46df5d3f8f535a0c5062beed2ecfefff4672fa47c54b7abf35c4a8c8976ade41612290f5092296bc97b0734b3ae0a219efcd2222a3fb266aca17a4ad9e6f16af64ec68db3c958a8bfd5e730e5e87b2bc0dfac819e5ddc7305884630bbeb2c6b27994a4d8c4d4a9f6db5e1488d75137e823b6c7ce936617246b2296136c59a4593b1796425dc1e599199c7e5168e1099a00e46714bb65b763d80a366f29de9c7f9e95d37413646e690de91cce48378d2d2ee38c03f88e22fd23a0de76b33f40b4d1ccd830dc4016c33957370976daa5c649a983e5c7bdb5a0fe3c07bcea08e79b005a9d44a4e3fa684416ba28ced45bc53dca4b426f52c8eafb88b3c8733617c270befb959a0bc9f08dc902a8a93d3ed8fdccbbfeb328dbea827735fc35e49bfa6c93298cbf9e486d9275004a568e07a65133907ab08067f85082eb2365b0a85757f5a7e63d1e4d002f17a6dd8a6be4ba7cbfecca2a29d2de119d233c5c568fac1b1ace7dab06cbf30774791cd441442d6071a3bd861ab1bd49a4de63bb95d284406024a3335525e70667cb0070abe2e869ff6f5a4f4318c0cc6d76480681273ea41c09f875e9d7b03b7f0ef025e62ac1b0e9a7e9e9faa8f4d04df23f033c53d69291fb19b3158b3a553b4f04232aaa70e55594e31492cef9991b3e79df5dd651bfa2f6246a249f385c29ab98ac9195e8414fed76faf522716b20dba995e60f0b96030b5bdcc6cee57591d0b8ea9d09d3ae114c5ae2fce712a847476a99a57eafcacf1fa900cd892ad2cefb455ff1effa17081a5f107e8a486753601e6b93c7ebc6e6aef00348feee13e1568be6857f08ff4bbee645217a6cc92d3a43d1072a2b99d9ff7b1d85352241d08a520b4c55d51f156293c825c501b7af3d1086b382a64ff167acdf1cd7486dbcef19435dafc2526382c79e59c0f0feab156a70875a46d5d2daacf0dacf151f3f7cd4cfb83e35386d35efd53d192f349f8acca3eb99a45655c26cbd93f08353e4d5ca903a24768c595f8f7fcb39f75deb4fbb5ec883e5887c98f2a4f92be895176ca75be8f8d73626b7b289218778429399d4774811337d15c400db695f305a88ef23e122143dee230703eaffc4f286530884f82b51daa08742299af8c0206ae050bd453e6cc8584eb5e667b56d8766da8be64d468cef55b44cbf430be7cf5e227c2ff3c65804b611281e42cc32fa76c7a9cac2fe48f0c7fbe159f20e120835cbd6e3800fe027f854d8b3a4f86fb89a77cdc037a746c26948a2223211935776b8fa949e8e59d3d9df6b172d471527cb59df54caecb506b7f949bfe6eb5af008a488a0d65541d706c19c05d5c3b9e1b3437bd92a5f65595007ebe1f5a03120a4aebb5f0de819f916f91248866f513a273248905f62bf64d6b1fc93e4a5b2405e28ecbf6640b0ede5f8d6e736bcb9f8550b60722982269df4401e2c9b61d2c3f75084bebba10ac21d25feaefa835d2f7d4dc8f25f34f9a7ceea3dbb1975391a2dd6582baea29c362f356a56bb69f1593ba959301b1c902b6b4e721f0b06edcab112723877e32fce3f422b47b5667c52ef3acb121602d1ef08c16c04e411b1a88c477f9467cbd1f7011355c355d921bb507c366f89ffbeabf718fed9802d22428795bc2cb126a25eca84a8b3a0bd59faabd7d66527667a1fb988cf6f602b35280822e5c5da49f5b55276df8ee16158231e42e759a70081dab0063db98a0be6fbb13e9587258035846fb29ab406bba1e9d0e2be4212908e68eb7da5f2655db7bef6164c8cee0e2411c859799beda596b1eb74925d46c18785c0c0a4c7c206d2d937d2e0302b67b75f0b2930f46ab4910762821d27aa55456017df91bc41eb06b1145217582d84aa86002e79bd86526c96057d91b7f4328824b2c7270e4fe7518771a850b41813f4c7522200fc40937f305e4ae6e9808816ade3034207b11496d6dbdf5dad352b40c01210c55604a90338fb94cb78c0b8a5717e433cefbc16f98b9ba13a7caef5c716f9acff658eeeb5891d137b0a733e15f7121743ebbe878cb81d2806c92b806a3031e2a6123b9325acefb2eca8c32339bcb033cfd19df3698deff42668698828792f89b9e1b2fac380727ffecc2e6c429ecc12d4cdc5991317a1ca765dd06c6468475795d3397a848318d66b1678a415dc0b11195f8748959e55741469b387988d465cc5798a7ce7851cb3ab0b8f90c10866f60a26949bd436b51ee22b0fc34f5c592927172b92252ee35ce377bbece98137fdc15e633992cbbff23cf8f7a4206d1c89af5ecb09dfa793d11a79373fb0e807714f9b5e13577781e209a28b8a4b34d2e2b23c8b0e441324a3d2bde12ed20faa50cbdecb3dc3310e54c07a1b5ceed5a7e99af858ae703435f4d155983e2133656bcb0a6c7cb9669b904bf3eda20c55393e5ff8513bda7cf2e83b1dccfd6f73f29ee78b23ed3bb2f36f475473951a3bcf05f725abbeafba0a2564b06727331f912d623a0fd53d4b162fabaff3d0ca0c2274c5748a1f94beee77309dc34a8c1ef117c6f5fe6fa28da5fd9c465f6d596853eba0fac1e06bb3e13dcebc6a3462499383165085707799c3b13ad18bc41531ba01aa11e13684a5187360f5bc9e2b3ad9ff1c8c75e3511c442fe9d186e0fdb1dbb199af03f9ea7e3f515083b97f2ae02ec05072649de21779730146e1ef9fbc113865b94fef1ab9fa9e0ab4f7d1eb6213639ef42891c059663cfcff418cb5d33d240d513138d4c9aea00bb4aca381a19dcef7e9dfaa35e1dc85a9ea688c05735566680c9eebac17b1827acb7c034ff0597b46100de712b55c509570480dbe8284b7f4eb3426263746bfe8070c1907987f0cf5b33ba44a4a5b44a112a52f3e2ccc9093f128c45f5b5e92391fed08c7dd24656083fc16d8b1e7f5415b1d2e7bbd0097290289241b923f92a56069992a099b22bd3dee2b6d5ba808a6374592ad91d34d65c84b48f1ea18c27e683dcd63e1438ece70abf44e25708ed13061200673916ed25607fa66", @generic="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", @typed={0xe, 0x9, 0x0, 0x0, @str='\'userem1/\x00'}, @typed={0x8, 0x26, 0x0, 0x0, @u32=0x6bff}, @generic="bf1afb981c5888624210b6e0968f16d44086498862dcd2add9d842e8167929924ec5631eda9df461ce06169b6211fcdb27a5465ae28128a645de34f767ae9511051f5625bb818921e0ed5fd18c0e33301e15c5fc50ddc9b6fe9562c6a81331654984a74e5bc5d676bbb1da600c408759ed1c20608fadc96366166318f0cfb3d70910cf82c7237680297469ab7463d47aab850d588c8213c327516bd7a742523a183851a991ed68df408c6c74f48bc75d023b", @typed={0x4, 0x17}, @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@empty}]}, @nested={0x44, 0x5d, 0x0, 0x1, [@generic="949325cac614184be11f2eec647591f48b95762576cc7100f46be54086d17b78096e7cbd4a370324774d553a6312864a43120bac94cd178258d9e1682e5513e9"]}, @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x7}, @generic="ed7ecbd83841dbecc5b43a4ff3515c4d5ef133884834249c878ffc81eae5b3f68f8e73d7e0604319dd9e4ffd678b294ff6bc99b199ef60814c9415c6b351f23f0ba540007f97ef7a594787a5849f958447a974578c775bf9ff68ee3be6b5df08b70a741ff35efe2acf47edcaa6b9b33fd2533fc6d886fe032df96bdb4953a774a40ecdc5ad4f02f9fe68183f44d1781df213", @generic="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", @nested={0x11e, 0x2c, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @ipv4=@local}, @typed={0x11, 0x2e, 0x0, 0x0, @str='/selinux/mls\x00'}, @typed={0x8, 0x8f, 0x0, 0x0, @uid=r16}, @typed={0x4, 0x7a}, @typed={0x3c, 0x4e, 0x0, 0x0, @str='wlan1self])em0+security}em0cgroup[!-!:eth1ppp0mime_type\x00'}, @generic="68381e89c568766408dba7fc830b5c0b21e231a22e43d0a1044269c9ad3b4b20eda7e2324727aef815c096cef351c94f502098495f39dd93199a2897d7e919733d1540a0dead823b78cb633b1ed30ea815c6cb0eb68db7007145468ac4ee9c918a0fa7b7afffa58909d555e2791c7c37231ed7add37c42ef870aa22e4665da3286d403053e71ec7a8e13aa1fc8ad20e152a46197383f9d1e7516f518e8409d1036ffaa91dc90111813b9071b56a5f4325e8ad54af4c2"]}, @generic="bd9036efd5def1d9afd3c1c65c9ef028a18799fcef0efc9901da614bea6ab32b1ffd70275db4837c32e1941f7fba62635db750c873606781a973a4818246761829cbd58f25ad82b9ddf1cd26ac84d1aca1a895d833f8366688967b23d177e61f54c9b10fd3cceebb3de1d69d4dd46e8e5448c3424ee6256b4e6621a63e25b040d2d5e44eac34d5054cbbc6dc9a48cfcbd73aeb4a5371f63f5faf73d5bc31973ee5006962a912960aa94506a208050742d776e764bcb3d44d1689823c9d2a12050dbc0aa96ab3d6344438d9c57b9127cf24e7ade776db928e93dbccbf7299130d2b35a1335a0e1e29816fcdbbdada91afca38ed2da88141e492"]}, 0x33e4}, {&(0x7f0000003280)=ANY=[@ANYBLOB="340100001e0000032abd7000fddbdf2508002f00", @ANYRES32=r17, @ANYBLOB="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"], 0x3}], 0x6, &(0x7f0000002f80)=[@cred={{0x1c, 0x1, 0x2, {r18, 0xffffffffffffffff, r26}}}], 0x20, 0x800}, 0x10) write$P9_RAUTH(r3, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x40, 0x1, 0x5}}, 0x14) 08:19:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b000000000000000500"]}, 0x15c) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:25 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100), 0x0, 0x40) 08:19:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b000000000000000500"]}, 0x15c) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0xe4, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b000000000000000500"]}, 0x15c) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:28 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:28 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x7, @thr={&(0x7f0000000140)="6ca26cca0946368d8c405d472e2acc4d6a4df406e1a8d68c6cfaac113053864705da8d02fd31771fe55ccda16ab19a179ef56f7e2b719b20cf8d017f00b654388ba4b24f0a676f3b2eabdbfc9d8c43f83fcc1dda58bf4c224c4358c23bf7f5a6f06cf4b837b2485ffc2371a0f57f83af727d32", &(0x7f00000001c0)="2e84d9356e7ae433e777775a4406772637d1055ebf004f3ab4ed0b60a00a740988f6d4022133b21aa9526808b8859e08ccf8b8d0f885ae723550b7f947b500ed6cdec0f4dfe3d4bab83c"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:19:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:28 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) 08:19:28 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:28 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:28 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:28 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {r4, r5+30000000}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x10a, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x182) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:28 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {r4, r5+10000000}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:31 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x2, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/285]}, 0x195) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r6 = getpid() tkill(r6, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40) splice(r2, 0x0, r4, 0x0, 0x8800000, 0x0) fcntl$setpipe(r3, 0x407, 0x100000) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) r7 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nfc_llcp(r9, &(0x7f0000001340)={&(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x8d, 0x20, "f0faf32b80b52ecf1eea56bc8d393dc978fadbaac03ccc17e882aee7c907bd18e9c55b2c926c735101649063c69a3ff054e4b76968d0d9b6fc191f09a1a337", 0x28}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f00000000c0)="80e4a15133fed59dc121d2dcfa0dd90ee350a8b97043", 0x16}, {&(0x7f0000001140)="dcb7e0d196b5bbb692837896064c6e43a8bcf151acc5e89d714ba5ebe471ae5e17971b9f41b3aad8bae244c106ab3cf59dc94987ba75da66a6a87a7bd44806856d093967f749af0d60ad06ca3ed650df77dc0dbe130fac4a11bbfe256336e2f78de75020592b622a763dcdd1f566e7d6a6d038e4f17fd6ff0680c30ce802b5628d7f90c7288051ebaf6487799ab64c87337b623559eee581bda6ec5b25bb40181eb8bb6f6b584cfe18adcefb09449e4464841144f2d0b0ae85b9ec1f86b9e086296be9a7767f6e9bf440ee7e9eb0e05b", 0xd0}], 0x3, &(0x7f0000001280)={0xc0, 0x1e8, 0xf5b2, "b51e5772cb3abc942c9862d8978de679bf7b2e163ccc0e3a064bc4b2bc05c7798252522e4528f52b1dfa09c75fc1a0e07d3c4643fd56a4558b153e425d4bea3eca4b6444680c47c625d0b9d7a7442615611a3613e7e007aa7250a6d7104a0c80daea4b090fba4bd72f71801834b6817ecad6bc3442a19be3dc80438b0ebc6fa0dd223da4278e664adcc25044c7ff38c428d786536fbc731c8bf81ef887c55d950ed63a9680526e5d6d69a1f121"}, 0xc0, 0x40000}, 0x4000) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:31 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a0000000415544495400"/285]}, 0x195) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x11d, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/285]}, 0x195) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x19f) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d"]}, 0x19f) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x127, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x19f) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:34 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000"]}, 0x1a4) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:34 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)={0x3, 0x6, 0x4, 0x80000000, 0x400, {0x0, 0x7530}, {0x3, 0xc, 0x4, 0x20, 0x1, 0xdf, "fd83e95e"}, 0xff, 0x4, @offset=0xd6, 0x5, 0x0, 0xffffffffffffffff}) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000040)="80d0fd64122399bbe19512efc1e607c8df9b682508219625e2be3b1be021b68a5519a2cb613bed973438ab90414dc7b1b71d9581f4cdebff4d3acdb22eca93723b577de537cb63948b60564175a6b4bfe6f388799851b99c62eebfed6e697de095dac5e2db66d77d6ba7096438e76b1702128e6bf359f7049a32ae8d5aa66f5d563947249eb98deb8803a272d847e10f1bcb273d263756829bcf77ef13bdc3643348", 0xa2, 0x7ff, 0x0, 0x3, r7}, &(0x7f0000000200)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f000001bff4)) r9 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r9}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r8}], 0x1, 0x0) 08:19:34 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x7) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:34 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:34 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000040)={0x0, "8f1103c7c283ebd105e080b9be39ca0d010f4f03a60e08d6ff696777b89e7dda2f268a99a8682402eaedd0ff43fe3fdf4fb05b47cb5bf48b0fac2b048321146c", {0x4, 0x7f}}) 08:19:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a4) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:34 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000001bff4)) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSTI(r6, 0x5412, 0x80) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) 08:19:34 executing program 3 (fault-call:3 fault-nth:0): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:34 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:34 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x34, 0x1, @tid=r2}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{r3, r4+30000000}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12c, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a4) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:37 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a6) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:37 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000180)=0x6) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:37 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x1, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:37 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:37 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000040)=""/35) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000080)={0x2, 0xffffffff}) 08:19:37 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x1, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) fcntl$addseals(r5, 0x409, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000040)) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d00000000000000"]}, 0x1a6) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 804.692735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pig=30943 comm=syz-executor.3 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12e, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a6) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:37 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d0000000000000000"]}, 0x1a7) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a7) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x12f, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a7) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 805.444044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pig=30970 comm=syz-executor.3 08:19:40 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:40 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4028110}, 0x4) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:40 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:40 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x2c2400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffffffff801) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r12, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x80) r14 = socket$vsock_stream(0x28, 0x1, 0x0) r15 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r15, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$FICLONERANGE(r15, 0x4020940d, &(0x7f00000001c0)={{r12}, 0xda, 0x9, 0x80}) getsockname(r14, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r13, @ANYRESOCT=r14], 0x3}}, 0x810) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r11, &(0x7f0000000040)) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:40 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:40 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_create(0x1, &(0x7f0000000040)={0x0, 0x27, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f00009c8000)={{}, {r4, r5+10000000}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:19:43 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x4, @thr={&(0x7f00000000c0)="03a7587ca1ccfdf6c5c150ac8b96907edb49d44bc9077de70c6f9b94f11db513a33662de032cd70b54ed5d60a2da71", &(0x7f0000000100)="fc375b989fe6fca1965e53eb627fa7a7d7ec9c52bd1c3885e69f3e2950b8df116b4584524063e54a6adea5a8e695d79acee537ee6dab5179cbdffdfd9a0f0571d9c323ebbd721a680aee3e242b558a75453b3cedec929457e02fad5cda70f472c4b84263987cff85453ef88807c228cb5cac45605d479b5683fd623772ee965222b0ab4aa79c2898bfc147a37a157d97a582acdbe5b755fc100a86d0ca4de16613e957b4c41b62edd0986afe4724afefbae6e4dabe859f17099df0a2533d7840ddc0d9e56535"}}, &(0x7f0000044000)) msgget$private(0x0, 0x80) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000040)=[{r1, 0x159c}], 0x1, 0xfffffc01) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x602083, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f00000000c0)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:43 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, 0x0, 0x0, 0x0) 08:19:46 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:19:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, 0x0, 0x0, 0x0) 08:19:46 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x2, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x7fffffff, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x40) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x13, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() ptrace$setopts(0x4200, r2, 0xfffffffffffffffe, 0x100050) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f00000003c0)="90a255873867eb0627e59a31f0c95c30d08eb9319d8abeecac96316ce71c9a40bae36ac53ea945f5e1397814b48f66583e443b89ba3491c47a4b3f590a206d00599a0300000000000000b0f5f9349956d83d6f0c64") ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0xfffffffffffffe00, 0x6) openat(r1, &(0x7f0000000140)='./file0\x00', 0x840, 0x103) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="82b455f0a5dfd8ea", 0x8}, {&(0x7f0000000240)="6a8716a064b4f3b1457704f01233fb47974ee31faa90d5b8e981e6725b6ab328885fe87e54362aa7a10e6793d6e4b69d77fd6d200cc52b8f857e293f817351170e84502781c10650fbe3729bc8e6ed811d6f5ddb1f73c0bfa7279064096f987e2d725a06a90964fbdb047a6aa61a8ab115c32a2693b165a81cf22f2a1d2b8693f6438de06b98dd8ce0ea0d87139c9bd0b13c6ee30b3f3d17f8aa2f527a7c41de3586d8216a29c0212d191ab3433e71", 0xaf}, {&(0x7f0000000180)}], 0x3, 0x0) shmget(0x0, 0x2000, 0x400, &(0x7f000090b000/0x2000)=nil) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300)='NLBL_CIPSOv4\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x202800, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)="9ef4b59c", {0xffffffff, 0x5, 0x3031334d, 0x5, 0x7f, 0xff, 0x7, 0x800}}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:46 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, 0x0, 0x0, 0x0) 08:19:46 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f000090a000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) socket$inet(0x2, 0x6, 0x5) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:46 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:19:46 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:46 executing program 2 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 813.986555] FAULT_INJECTION: forcing a failure. [ 813.986555] name failslab, interval 1, probability 0, space 0, times 0 [ 813.998650] CPU: 1 PID: 31090 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 814.006552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.016015] Call Trace: [ 814.018608] dump_stack+0x13e/0x194 [ 814.022257] should_fail.cold+0x10a/0x14b [ 814.026415] should_failslab+0xd6/0x130 [ 814.030392] kmem_cache_alloc_node+0x288/0x7a0 [ 814.034979] ? find_held_lock+0x2d/0x110 [ 814.039159] ? lock_sock_nested+0x98/0x100 [ 814.043467] __alloc_skb+0x9a/0x4c0 [ 814.047354] ? skb_trim+0x160/0x160 [ 814.051412] ? mark_held_locks+0xa6/0xf0 [ 814.055523] sock_wmalloc+0xa5/0xf0 [ 814.059333] pppoe_sendmsg+0x269/0x710 [ 814.063236] ? pppoe_getname+0x130/0x130 [ 814.067391] ? security_socket_sendmsg+0x83/0xb0 [ 814.072148] ? pppoe_getname+0x130/0x130 [ 814.076210] sock_sendmsg+0xc5/0x100 [ 814.079936] ___sys_sendmsg+0x349/0x840 [ 814.083920] ? trace_hardirqs_on+0x10/0x10 [ 814.088157] ? copy_msghdr_from_user+0x380/0x380 [ 814.093023] ? save_trace+0x290/0x290 [ 814.096823] ? find_held_lock+0x2d/0x110 [ 814.101395] ? __fget+0x201/0x360 [ 814.104844] ? lock_downgrade+0x6e0/0x6e0 [ 814.109143] ? __fget+0x228/0x360 [ 814.112676] ? __fget_light+0x199/0x1f0 [ 814.116712] ? sockfd_lookup_light+0xb2/0x160 [ 814.121255] __sys_sendmmsg+0x129/0x330 [ 814.125496] ? SyS_sendmsg+0x40/0x40 [ 814.129215] ? SyS_write+0x1b7/0x210 [ 814.133052] ? __mutex_unlock_slowpath+0x75/0x780 [ 814.138281] ? wait_for_completion+0x390/0x390 [ 814.143396] ? vfs_write+0xff/0x4e0 [ 814.147214] ? fput+0xb/0x140 [ 814.150323] ? SyS_write+0x14d/0x210 [ 814.154034] ? SyS_read+0x210/0x210 [ 814.157658] SyS_sendmmsg+0x2f/0x50 [ 814.161292] ? __sys_sendmmsg+0x330/0x330 [ 814.165432] do_syscall_64+0x1d5/0x640 [ 814.169360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 814.174740] RIP: 0033:0x45c479 [ 814.178023] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:19:46 executing program 2 (fault-call:7 fault-nth:1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 814.185732] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 814.193083] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 814.200393] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 814.207758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 814.215024] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000000 [ 814.252791] FAULT_INJECTION: forcing a failure. [ 814.252791] name failslab, interval 1, probability 0, space 0, times 0 [ 814.265386] CPU: 0 PID: 31096 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 814.273274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.282739] Call Trace: [ 814.285336] dump_stack+0x13e/0x194 [ 814.288965] should_fail.cold+0x10a/0x14b [ 814.293135] should_failslab+0xd6/0x130 [ 814.297557] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 814.302704] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 814.308153] ? __alloc_skb+0x9a/0x4c0 [ 814.311962] __kmalloc_node_track_caller+0x38/0x70 [ 814.317144] __kmalloc_reserve.isra.0+0x35/0xd0 [ 814.321820] __alloc_skb+0xca/0x4c0 [ 814.325448] ? skb_trim+0x160/0x160 [ 814.329092] ? mark_held_locks+0xa6/0xf0 [ 814.333989] sock_wmalloc+0xa5/0xf0 [ 814.337637] pppoe_sendmsg+0x269/0x710 [ 814.341535] ? pppoe_getname+0x130/0x130 [ 814.345606] ? security_socket_sendmsg+0x83/0xb0 [ 814.350385] ? pppoe_getname+0x130/0x130 [ 814.354461] sock_sendmsg+0xc5/0x100 [ 814.358189] ___sys_sendmsg+0x349/0x840 [ 814.362248] ? trace_hardirqs_on+0x10/0x10 [ 814.366494] ? copy_msghdr_from_user+0x380/0x380 [ 814.371266] ? save_trace+0x290/0x290 [ 814.375167] ? find_held_lock+0x2d/0x110 [ 814.379264] ? __fget+0x201/0x360 [ 814.382724] ? lock_downgrade+0x6e0/0x6e0 [ 814.386874] ? __fget+0x228/0x360 [ 814.390329] ? __fget_light+0x199/0x1f0 [ 814.394327] ? sockfd_lookup_light+0xb2/0x160 [ 814.398818] __sys_sendmmsg+0x129/0x330 [ 814.402796] ? SyS_sendmsg+0x40/0x40 [ 814.406521] ? SyS_write+0x1b7/0x210 [ 814.410361] ? __mutex_unlock_slowpath+0x75/0x780 [ 814.415225] ? wait_for_completion+0x390/0x390 [ 814.419920] ? vfs_write+0xff/0x4e0 [ 814.423540] ? fput+0xb/0x140 [ 814.426633] ? SyS_write+0x14d/0x210 [ 814.430376] ? SyS_read+0x210/0x210 [ 814.434011] SyS_sendmmsg+0x2f/0x50 [ 814.437703] ? __sys_sendmmsg+0x330/0x330 [ 814.441868] do_syscall_64+0x1d5/0x640 [ 814.445769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 08:19:47 executing program 2 (fault-call:7 fault-nth:2): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 814.450959] RIP: 0033:0x45c479 [ 814.454150] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 814.461860] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 814.469268] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 814.476540] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 814.483805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 814.491215] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000001 [ 814.532556] FAULT_INJECTION: forcing a failure. [ 814.532556] name failslab, interval 1, probability 0, space 0, times 0 [ 814.544312] CPU: 1 PID: 31099 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 814.552207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.561582] Call Trace: [ 814.564177] dump_stack+0x13e/0x194 [ 814.567806] should_fail.cold+0x10a/0x14b [ 814.571956] should_failslab+0xd6/0x130 [ 814.575937] kmem_cache_alloc+0x44/0x770 [ 814.580005] ? __lock_acquire+0x5f7/0x4620 [ 814.584312] ? br_allowed_egress+0x3c2/0x6d0 [ 814.588796] skb_clone+0x11c/0x310 [ 814.592360] deliver_clone+0x3f/0xb0 [ 814.596165] br_flood+0x3d2/0x550 [ 814.599632] br_dev_xmit+0x8b5/0xd20 [ 814.603343] ? br_poll_controller+0x10/0x10 [ 814.607761] dev_hard_start_xmit+0x186/0x890 [ 814.612210] __dev_queue_xmit+0x1d91/0x25c0 [ 814.616549] ? find_held_lock+0x2d/0x110 [ 814.620735] ? netdev_pick_tx+0x2e0/0x2e0 [ 814.624912] ? iov_iter_advance+0x8a/0xc70 [ 814.629167] ? memcpy+0x35/0x50 [ 814.632493] ? pppoe_sendmsg+0x5c1/0x710 [ 814.636679] pppoe_sendmsg+0x5c1/0x710 [ 814.640656] ? ether_setup+0x2d0/0x2d0 [ 814.644561] ? pppoe_getname+0x130/0x130 [ 814.648839] ? security_socket_sendmsg+0x83/0xb0 [ 814.653842] ? pppoe_getname+0x130/0x130 [ 814.657939] sock_sendmsg+0xc5/0x100 [ 814.661670] ___sys_sendmsg+0x349/0x840 [ 814.665668] ? trace_hardirqs_on+0x10/0x10 [ 814.669921] ? copy_msghdr_from_user+0x380/0x380 [ 814.674761] ? save_trace+0x290/0x290 [ 814.678606] ? find_held_lock+0x2d/0x110 [ 814.682729] ? __fget+0x201/0x360 [ 814.686193] ? lock_downgrade+0x6e0/0x6e0 [ 814.690380] ? __fget+0x228/0x360 [ 814.693851] ? __fget_light+0x199/0x1f0 [ 814.697839] ? sockfd_lookup_light+0xb2/0x160 [ 814.702449] __sys_sendmmsg+0x129/0x330 [ 814.706433] ? SyS_sendmsg+0x40/0x40 [ 814.710157] ? SyS_write+0x1b7/0x210 [ 814.713918] ? __mutex_unlock_slowpath+0x75/0x780 [ 814.718904] ? wait_for_completion+0x390/0x390 [ 814.723501] ? vfs_write+0xff/0x4e0 [ 814.727146] ? fput+0xb/0x140 [ 814.730301] ? SyS_write+0x14d/0x210 [ 814.734025] ? SyS_read+0x210/0x210 [ 814.737676] SyS_sendmmsg+0x2f/0x50 [ 814.741318] ? __sys_sendmmsg+0x330/0x330 [ 814.745488] do_syscall_64+0x1d5/0x640 [ 814.749394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 814.754592] RIP: 0033:0x45c479 [ 814.757787] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 814.765512] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 814.772789] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:19:47 executing program 2 (fault-call:7 fault-nth:3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 814.780341] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 814.787737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 814.795017] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000002 08:19:47 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0xcad4, 0xe, [{0x4}, {0xb, 0x1}, {0x2, 0x1}, {0x9}, {0x6, 0x1}, {0x9}, {0xc, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x8}, {0xe, 0x1}, {0x7, 0x1}, {0xc}]}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 814.858497] FAULT_INJECTION: forcing a failure. [ 814.858497] name failslab, interval 1, probability 0, space 0, times 0 [ 814.876382] CPU: 1 PID: 31107 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 814.884618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.894182] Call Trace: [ 814.896876] dump_stack+0x13e/0x194 [ 814.900518] should_fail.cold+0x10a/0x14b [ 814.904684] should_failslab+0xd6/0x130 [ 814.908846] kmem_cache_alloc_node+0x288/0x7a0 [ 814.913430] ? find_held_lock+0x2d/0x110 [ 814.917496] ? lock_sock_nested+0x98/0x100 [ 814.921742] __alloc_skb+0x9a/0x4c0 [ 814.925445] ? skb_trim+0x160/0x160 [ 814.929229] ? mark_held_locks+0xa6/0xf0 [ 814.933300] sock_wmalloc+0xa5/0xf0 [ 814.936932] pppoe_sendmsg+0x269/0x710 [ 814.940820] ? pppoe_getname+0x130/0x130 [ 814.944880] ? security_socket_sendmsg+0x83/0xb0 [ 814.949640] ? pppoe_getname+0x130/0x130 [ 814.953707] sock_sendmsg+0xc5/0x100 [ 814.957435] ___sys_sendmsg+0x349/0x840 [ 814.961434] ? trace_hardirqs_on+0x10/0x10 [ 814.965697] ? copy_msghdr_from_user+0x380/0x380 [ 814.970473] ? trace_hardirqs_on+0x10/0x10 [ 814.974719] ? find_held_lock+0x2d/0x110 [ 814.978795] ? __fget+0x201/0x360 [ 814.982270] ? save_trace+0x290/0x290 [ 814.986089] ? find_held_lock+0x2d/0x110 [ 814.990253] ? __might_fault+0x104/0x1b0 [ 814.994427] __sys_sendmmsg+0x129/0x330 [ 814.998524] ? SyS_sendmsg+0x40/0x40 [ 815.002257] ? SyS_write+0x1b7/0x210 [ 815.006002] ? __mutex_unlock_slowpath+0x75/0x780 [ 815.010882] ? wait_for_completion+0x390/0x390 [ 815.015517] ? vfs_write+0xff/0x4e0 [ 815.019255] ? fput+0xb/0x140 [ 815.022467] ? SyS_write+0x14d/0x210 [ 815.026193] ? SyS_read+0x210/0x210 [ 815.029834] SyS_sendmmsg+0x2f/0x50 [ 815.033475] ? __sys_sendmmsg+0x330/0x330 [ 815.037750] do_syscall_64+0x1d5/0x640 [ 815.041659] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 815.047059] RIP: 0033:0x45c479 [ 815.050383] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 815.058097] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 815.065376] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 815.072788] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 815.080264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 815.087549] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000003 08:19:49 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:49 executing program 2 (fault-call:7 fault-nth:4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:49 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:49 executing program 3: r0 = userfaultfd(0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x400, 0x9, {}, {0x1, 0x2, 0x9, 0x0, 0x0, 0x8, "862b6531"}, 0x1000, 0x4, @planes=&(0x7f0000000000)={0x0, 0x9, @mem_offset=0x1, 0x7}, 0xfff, 0x0, r0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x48}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x8001, 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x28) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 816.745692] FAULT_INJECTION: forcing a failure. [ 816.745692] name failslab, interval 1, probability 0, space 0, times 0 [ 816.773676] CPU: 1 PID: 31119 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 816.781617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.790985] Call Trace: [ 816.793594] dump_stack+0x13e/0x194 [ 816.797252] should_fail.cold+0x10a/0x14b [ 816.801517] should_failslab+0xd6/0x130 [ 816.805514] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 816.810765] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 816.816235] ? __alloc_skb+0x9a/0x4c0 [ 816.820053] __kmalloc_node_track_caller+0x38/0x70 [ 816.825002] __kmalloc_reserve.isra.0+0x35/0xd0 [ 816.829690] __alloc_skb+0xca/0x4c0 [ 816.833460] ? skb_trim+0x160/0x160 [ 816.836129] ptrace attach of "/root/syz-executor.4"[31127] was attempted by "/root/syz-executor.4"[31128] [ 816.837128] ? mark_held_locks+0xa6/0xf0 [ 816.837160] sock_wmalloc+0xa5/0xf0 [ 816.854691] pppoe_sendmsg+0x269/0x710 [ 816.858775] ? pppoe_getname+0x130/0x130 [ 816.862861] ? security_socket_sendmsg+0x83/0xb0 [ 816.867634] ? pppoe_getname+0x130/0x130 [ 816.871720] sock_sendmsg+0xc5/0x100 [ 816.875458] ___sys_sendmsg+0x349/0x840 [ 816.879454] ? trace_hardirqs_on+0x10/0x10 [ 816.883707] ? copy_msghdr_from_user+0x380/0x380 [ 816.888697] ? trace_hardirqs_on+0x10/0x10 08:19:49 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 816.892952] ? find_held_lock+0x2d/0x110 [ 816.897034] ? __fget+0x201/0x360 [ 816.900504] ? save_trace+0x290/0x290 [ 816.904357] ? find_held_lock+0x2d/0x110 [ 816.908441] ? __might_fault+0x104/0x1b0 [ 816.912529] __sys_sendmmsg+0x129/0x330 [ 816.916555] ? SyS_sendmsg+0x40/0x40 [ 816.920389] ? SyS_write+0x1b7/0x210 [ 816.924146] ? __mutex_unlock_slowpath+0x75/0x780 [ 816.929006] ? wait_for_completion+0x390/0x390 [ 816.933605] ? vfs_write+0xff/0x4e0 [ 816.937256] ? fput+0xb/0x140 [ 816.940374] ? SyS_write+0x14d/0x210 [ 816.944230] ? SyS_read+0x210/0x210 [ 816.947870] SyS_sendmmsg+0x2f/0x50 [ 816.951515] ? __sys_sendmmsg+0x330/0x330 [ 816.955687] do_syscall_64+0x1d5/0x640 [ 816.959647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 816.964850] RIP: 0033:0x45c479 [ 816.968087] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 816.976490] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 816.983881] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:19:49 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:49 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:49 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000001c0)={{0x3, 0x1, 0x3, 0x3, 0xfffffff7}, 0x2, 0x100000000}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x46, 0x4, 0x7, "03ad6592c72eb68e8842333c60bf1c56", "9b82e3eddc17cc578c743867b70b250b4765cb8396223f033be1a072d92d5d3f60e31e4d8b3a910443581c899900100ddd"}, 0x46, 0x0) [ 816.991262] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 816.998550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 817.005835] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000004 08:19:49 executing program 2 (fault-call:7 fault-nth:5): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 817.107186] FAULT_INJECTION: forcing a failure. [ 817.107186] name failslab, interval 1, probability 0, space 0, times 0 [ 817.119136] CPU: 0 PID: 31147 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 817.127215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.136575] Call Trace: [ 817.139219] dump_stack+0x13e/0x194 [ 817.143012] should_fail.cold+0x10a/0x14b [ 817.147326] should_failslab+0xd6/0x130 [ 817.151421] kmem_cache_alloc+0x44/0x770 08:19:49 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) r9 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000000040)=""/50) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r14, 0x202002) keyctl$chown(0x4, r14, r13, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r16) r17 = getpid() ptrace(0x10, r17) r18 = getpid() rt_tgsigqueueinfo(r18, r18, 0x16, &(0x7f00000000c0)) ptrace(0x10, r18) ptrace$setregs(0xf, r18, 0x0, 0x0) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000280)={{0x3, 0x0, r11, r13, r16, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r17, r18, 0x3}) setgroups(0x2, &(0x7f0000000580)=[0x0, r11]) r19 = openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x149300, 0xe0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r21, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r22, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r24, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r23, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r25, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r26 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r26, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r27 = socket$netlink(0x10, 0x3, 0x0) r28 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r28, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r27, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r29, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r30 = socket$netlink(0x10, 0x3, 0x0) r31 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r31, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r30, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r32, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r33 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r33, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r34 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000840)='/dev/nullb0\x00', 0x101200, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="fe647205cbc60d3ad205fcd91804065c8327bb27eab293471a5251246fbb3d4335af9279427fa1ff85ede7231cf6c5fa136e5e2f9085d5", 0x37}], 0x1, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r11}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x70, 0x4c841}, {&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="b139ae2d997c3fca68523553dda5c1f125e224297ea358047cf5e9fb75ba9278878e51113a11a55c735aef740e9838fa88a6386d4a8fb47b296e3a09cb97a368fffafe2dbead6d70c2cfe64d68b443debdd34b25753eba82aec161798bc8c7356c8df294bc8a246ef32869a9fed3ceed07bd3e5e717331cb38b664bae571ce9c2e85fca28b1d35749390c70af490e61478e3c0ec4a794a10f5f7cfb066cd1b1a882fa455beb678f06434057b303d6510f9443de86b3dc1d12913cc719addd48f7d8bcd2235c4184357a92d1de954f182a7a57a8f5ca300", 0xd7}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000006c0)="ddfd9759d3dc498adc4d669c448169fe1f092d9212668f5f7b59206b5afeb8d9dbb566423768e107f50e6b7287ab3f5aecd1c540045b86b327ea", 0x3a}, {&(0x7f0000000700)="98097bfd4f027080729bbc81474005eee7d3e46c8bfd129dcf0710910e3b655bdae3a9d61d739a42c8ab6d42b7acedbd703e88b9d4f2ad4dedf414331f281c358494e1c0ff826ee9a593cb2db142996edfae2177395416865a54e7a23d14c6d3f7bdc843ba0101c5c3d7b50ec3302baf88cb1cba6b3fa37765c33b522545ff3402e99479289099", 0x87}], 0x2, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [r19, r20, 0xffffffffffffffff, r23, r26, r27]}}, @rights={{0x28, 0x1, 0x1, [r30, r33, r34, r0, r1, r1]}}], 0x50}], 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r35 = gettid() rt_sigprocmask(0x1, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r35}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) [ 817.156041] ? __lock_acquire+0x5f7/0x4620 [ 817.160294] ? br_allowed_egress+0x3c2/0x6d0 [ 817.165162] skb_clone+0x11c/0x310 [ 817.168822] deliver_clone+0x3f/0xb0 [ 817.172646] br_flood+0x3d2/0x550 [ 817.176114] br_dev_xmit+0x8b5/0xd20 [ 817.179843] ? br_poll_controller+0x10/0x10 [ 817.184192] dev_hard_start_xmit+0x186/0x890 [ 817.188623] __dev_queue_xmit+0x1d91/0x25c0 [ 817.192970] ? find_held_lock+0x2d/0x110 [ 817.197056] ? netdev_pick_tx+0x2e0/0x2e0 [ 817.201228] ? iov_iter_advance+0x8a/0xc70 [ 817.205599] ? memcpy+0x35/0x50 [ 817.208890] ? pppoe_sendmsg+0x5c1/0x710 [ 817.213051] pppoe_sendmsg+0x5c1/0x710 [ 817.216968] ? ether_setup+0x2d0/0x2d0 [ 817.220869] ? pppoe_getname+0x130/0x130 [ 817.224939] ? security_socket_sendmsg+0x83/0xb0 [ 817.229817] ? pppoe_getname+0x130/0x130 [ 817.233912] sock_sendmsg+0xc5/0x100 [ 817.237626] ___sys_sendmsg+0x349/0x840 [ 817.241598] ? trace_hardirqs_on+0x10/0x10 [ 817.245913] ? copy_msghdr_from_user+0x380/0x380 [ 817.250815] ? trace_hardirqs_on+0x10/0x10 [ 817.255320] ? find_held_lock+0x2d/0x110 [ 817.259394] ? __fget+0x201/0x360 [ 817.262876] ? save_trace+0x290/0x290 [ 817.266859] ? find_held_lock+0x2d/0x110 [ 817.271028] ? __might_fault+0x104/0x1b0 [ 817.275108] __sys_sendmmsg+0x129/0x330 [ 817.279101] ? SyS_sendmsg+0x40/0x40 [ 817.282917] ? SyS_write+0x1b7/0x210 [ 817.286653] ? __mutex_unlock_slowpath+0x75/0x780 [ 817.291526] ? wait_for_completion+0x390/0x390 [ 817.296139] ? vfs_write+0xff/0x4e0 [ 817.299772] ? fput+0xb/0x140 [ 817.302940] ? SyS_write+0x14d/0x210 [ 817.306671] ? SyS_read+0x210/0x210 [ 817.310293] SyS_sendmmsg+0x2f/0x50 [ 817.313919] ? __sys_sendmmsg+0x330/0x330 [ 817.318290] do_syscall_64+0x1d5/0x640 [ 817.322538] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 817.327786] RIP: 0033:0x45c479 [ 817.331143] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.339267] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 817.346579] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:19:49 executing program 2 (fault-call:7 fault-nth:6): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 817.353843] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 817.361949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 817.369221] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000005 [ 817.426379] FAULT_INJECTION: forcing a failure. [ 817.426379] name failslab, interval 1, probability 0, space 0, times 0 [ 817.437811] CPU: 0 PID: 31153 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 817.446084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.455522] Call Trace: [ 817.458129] dump_stack+0x13e/0x194 [ 817.462056] should_fail.cold+0x10a/0x14b [ 817.466215] should_failslab+0xd6/0x130 [ 817.470219] kmem_cache_alloc_node+0x288/0x7a0 [ 817.474803] ? find_held_lock+0x2d/0x110 [ 817.478863] ? lock_sock_nested+0x98/0x100 [ 817.483199] __alloc_skb+0x9a/0x4c0 [ 817.486864] ? skb_trim+0x160/0x160 [ 817.490940] ? mark_held_locks+0xa6/0xf0 [ 817.495075] sock_wmalloc+0xa5/0xf0 [ 817.498935] pppoe_sendmsg+0x269/0x710 [ 817.502834] ? pppoe_getname+0x130/0x130 [ 817.506896] ? security_socket_sendmsg+0x83/0xb0 [ 817.511651] ? pppoe_getname+0x130/0x130 [ 817.515834] sock_sendmsg+0xc5/0x100 [ 817.519543] ___sys_sendmsg+0x349/0x840 [ 817.523598] ? trace_hardirqs_on+0x10/0x10 [ 817.527836] ? copy_msghdr_from_user+0x380/0x380 [ 817.532592] ? trace_hardirqs_on+0x10/0x10 [ 817.537347] ? find_held_lock+0x2d/0x110 [ 817.541409] ? __fget+0x201/0x360 [ 817.544863] ? save_trace+0x290/0x290 [ 817.548673] ? find_held_lock+0x2d/0x110 [ 817.552759] ? __might_fault+0x104/0x1b0 [ 817.556828] __sys_sendmmsg+0x129/0x330 [ 817.560810] ? SyS_sendmsg+0x40/0x40 [ 817.564535] ? SyS_write+0x1b7/0x210 [ 817.568283] ? __mutex_unlock_slowpath+0x75/0x780 [ 817.573237] ? wait_for_completion+0x390/0x390 [ 817.577832] ? vfs_write+0xff/0x4e0 [ 817.581482] ? fput+0xb/0x140 [ 817.584609] ? SyS_write+0x14d/0x210 [ 817.588479] ? SyS_read+0x210/0x210 [ 817.592122] SyS_sendmmsg+0x2f/0x50 [ 817.595760] ? __sys_sendmmsg+0x330/0x330 [ 817.599919] do_syscall_64+0x1d5/0x640 [ 817.603828] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 817.609024] RIP: 0033:0x45c479 [ 817.612221] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:19:50 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x42, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0x2) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:50 executing program 2 (fault-call:7 fault-nth:7): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 817.620388] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 817.627668] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 817.635036] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 817.642918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 817.650192] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000006 [ 817.705688] FAULT_INJECTION: forcing a failure. [ 817.705688] name failslab, interval 1, probability 0, space 0, times 0 [ 817.717635] CPU: 1 PID: 31161 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 817.725748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.735214] Call Trace: [ 817.738416] dump_stack+0x13e/0x194 [ 817.742345] should_fail.cold+0x10a/0x14b [ 817.746714] should_failslab+0xd6/0x130 [ 817.750956] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 817.756532] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 817.762693] ? __alloc_skb+0x9a/0x4c0 [ 817.766540] __kmalloc_node_track_caller+0x38/0x70 [ 817.771473] __kmalloc_reserve.isra.0+0x35/0xd0 [ 817.776148] __alloc_skb+0xca/0x4c0 [ 817.779886] ? skb_trim+0x160/0x160 [ 817.783540] ? mark_held_locks+0xa6/0xf0 [ 817.787628] sock_wmalloc+0xa5/0xf0 [ 817.791305] pppoe_sendmsg+0x269/0x710 [ 817.795215] ? pppoe_getname+0x130/0x130 [ 817.799284] ? security_socket_sendmsg+0x83/0xb0 [ 817.804137] ? pppoe_getname+0x130/0x130 [ 817.808260] sock_sendmsg+0xc5/0x100 [ 817.812238] ___sys_sendmsg+0x349/0x840 [ 817.816331] ? trace_hardirqs_on+0x10/0x10 [ 817.820591] ? copy_msghdr_from_user+0x380/0x380 [ 817.825366] ? trace_hardirqs_on+0x10/0x10 [ 817.829606] ? find_held_lock+0x2d/0x110 [ 817.833713] ? __fget+0x201/0x360 [ 817.837190] ? save_trace+0x290/0x290 [ 817.841473] ? find_held_lock+0x2d/0x110 [ 817.845550] ? __might_fault+0x104/0x1b0 [ 817.849641] __sys_sendmmsg+0x129/0x330 [ 817.853692] ? SyS_sendmsg+0x40/0x40 [ 817.857403] ? SyS_write+0x1b7/0x210 [ 817.861143] ? __mutex_unlock_slowpath+0x75/0x780 [ 817.866042] ? wait_for_completion+0x390/0x390 [ 817.870637] ? vfs_write+0xff/0x4e0 [ 817.874267] ? fput+0xb/0x140 [ 817.878186] ? SyS_write+0x14d/0x210 [ 817.882337] ? SyS_read+0x210/0x210 [ 817.886069] SyS_sendmmsg+0x2f/0x50 [ 817.889829] ? __sys_sendmmsg+0x330/0x330 [ 817.894029] do_syscall_64+0x1d5/0x640 [ 817.897920] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 817.903122] RIP: 0033:0x45c479 08:19:50 executing program 2 (fault-call:7 fault-nth:8): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 817.906313] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 817.914064] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 817.921348] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 817.928633] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 817.935908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 817.943184] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000007 [ 817.999042] FAULT_INJECTION: forcing a failure. [ 817.999042] name failslab, interval 1, probability 0, space 0, times 0 [ 818.010378] CPU: 0 PID: 31165 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 818.018465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.028013] Call Trace: [ 818.030621] dump_stack+0x13e/0x194 [ 818.034309] should_fail.cold+0x10a/0x14b [ 818.038587] should_failslab+0xd6/0x130 [ 818.042579] kmem_cache_alloc+0x44/0x770 [ 818.046662] ? __lock_acquire+0x5f7/0x4620 [ 818.050916] ? br_allowed_egress+0x3c2/0x6d0 [ 818.055352] skb_clone+0x11c/0x310 [ 818.058962] deliver_clone+0x3f/0xb0 [ 818.062696] br_flood+0x3d2/0x550 [ 818.066177] br_dev_xmit+0x8b5/0xd20 [ 818.069910] ? br_poll_controller+0x10/0x10 [ 818.074265] dev_hard_start_xmit+0x186/0x890 [ 818.078783] __dev_queue_xmit+0x1d91/0x25c0 [ 818.083119] ? find_held_lock+0x2d/0x110 [ 818.087194] ? netdev_pick_tx+0x2e0/0x2e0 [ 818.091342] ? iov_iter_advance+0x8a/0xc70 [ 818.096020] ? memcpy+0x35/0x50 [ 818.099310] ? pppoe_sendmsg+0x5c1/0x710 [ 818.103381] pppoe_sendmsg+0x5c1/0x710 [ 818.107394] ? ether_setup+0x2d0/0x2d0 [ 818.111303] ? pppoe_getname+0x130/0x130 [ 818.115376] ? security_socket_sendmsg+0x83/0xb0 [ 818.120132] ? pppoe_getname+0x130/0x130 [ 818.124298] sock_sendmsg+0xc5/0x100 [ 818.128013] ___sys_sendmsg+0x349/0x840 [ 818.132128] ? trace_hardirqs_on+0x10/0x10 [ 818.136718] ? copy_msghdr_from_user+0x380/0x380 [ 818.141977] ? trace_hardirqs_on+0x10/0x10 [ 818.146205] ? find_held_lock+0x2d/0x110 [ 818.150271] ? __fget+0x201/0x360 [ 818.153817] ? save_trace+0x290/0x290 [ 818.157619] ? find_held_lock+0x2d/0x110 [ 818.161811] ? __might_fault+0x104/0x1b0 [ 818.165945] __sys_sendmmsg+0x129/0x330 [ 818.170045] ? SyS_sendmsg+0x40/0x40 [ 818.173764] ? SyS_write+0x1b7/0x210 [ 818.177489] ? __mutex_unlock_slowpath+0x75/0x780 [ 818.182342] ? wait_for_completion+0x390/0x390 [ 818.186938] ? vfs_write+0xff/0x4e0 [ 818.190581] ? fput+0xb/0x140 [ 818.193695] ? SyS_write+0x14d/0x210 [ 818.197431] ? SyS_read+0x210/0x210 [ 818.201073] SyS_sendmmsg+0x2f/0x50 [ 818.204839] ? __sys_sendmmsg+0x330/0x330 [ 818.209113] do_syscall_64+0x1d5/0x640 [ 818.213016] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 818.218350] RIP: 0033:0x45c479 [ 818.221540] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 818.229354] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 818.236619] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:19:50 executing program 2 (fault-call:7 fault-nth:9): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 818.243883] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 818.251162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 818.258538] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000008 [ 818.319332] FAULT_INJECTION: forcing a failure. [ 818.319332] name failslab, interval 1, probability 0, space 0, times 0 [ 818.331343] CPU: 1 PID: 31168 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 818.339238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.348769] Call Trace: [ 818.351369] dump_stack+0x13e/0x194 [ 818.355021] should_fail.cold+0x10a/0x14b [ 818.359285] should_failslab+0xd6/0x130 [ 818.363263] kmem_cache_alloc_node+0x288/0x7a0 [ 818.368488] ? find_held_lock+0x2d/0x110 [ 818.372555] ? lock_sock_nested+0x98/0x100 [ 818.376797] __alloc_skb+0x9a/0x4c0 [ 818.380425] ? skb_trim+0x160/0x160 [ 818.384280] ? mark_held_locks+0xa6/0xf0 [ 818.388350] sock_wmalloc+0xa5/0xf0 [ 818.391994] pppoe_sendmsg+0x269/0x710 [ 818.395895] ? pppoe_getname+0x130/0x130 [ 818.400053] ? security_socket_sendmsg+0x83/0xb0 [ 818.404818] ? pppoe_getname+0x130/0x130 [ 818.408902] sock_sendmsg+0xc5/0x100 [ 818.412725] ___sys_sendmsg+0x349/0x840 [ 818.416903] ? trace_hardirqs_on+0x10/0x10 [ 818.421166] ? copy_msghdr_from_user+0x380/0x380 [ 818.425957] ? trace_hardirqs_on+0x10/0x10 [ 818.430202] ? find_held_lock+0x2d/0x110 [ 818.434389] ? __fget+0x201/0x360 [ 818.437991] ? save_trace+0x290/0x290 [ 818.441793] ? find_held_lock+0x2d/0x110 [ 818.445859] ? __might_fault+0x104/0x1b0 [ 818.449949] __sys_sendmmsg+0x129/0x330 [ 818.453957] ? SyS_sendmsg+0x40/0x40 [ 818.457787] ? SyS_write+0x1b7/0x210 [ 818.461512] ? __mutex_unlock_slowpath+0x75/0x780 [ 818.466383] ? wait_for_completion+0x390/0x390 [ 818.471066] ? vfs_write+0xff/0x4e0 [ 818.474698] ? fput+0xb/0x140 [ 818.477922] ? SyS_write+0x14d/0x210 [ 818.481989] ? SyS_read+0x210/0x210 [ 818.485623] SyS_sendmmsg+0x2f/0x50 [ 818.489272] ? __sys_sendmmsg+0x330/0x330 [ 818.493437] do_syscall_64+0x1d5/0x640 [ 818.497347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 818.500195] FAULT_FLAG_ALLOW_RETRY missing 30 [ 818.502544] RIP: 0033:0x45c479 [ 818.502550] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:19:51 executing program 2 (fault-call:7 fault-nth:10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 818.502560] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 818.502566] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 818.502571] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 818.502577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 818.502583] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000009 [ 818.556458] CPU: 0 PID: 31162 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 818.564362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.571966] FAULT_INJECTION: forcing a failure. [ 818.571966] name failslab, interval 1, probability 0, space 0, times 0 [ 818.573806] Call Trace: [ 818.573871] dump_stack+0x13e/0x194 [ 818.573903] handle_userfault.cold+0x3b/0x4b [ 818.573923] ? userfaultfd_ioctl+0x2f80/0x2f80 [ 818.600415] ? trace_hardirqs_on+0x10/0x10 [ 818.604671] ? find_held_lock+0x2d/0x110 [ 818.608742] ? __handle_mm_fault+0x29b8/0x3280 [ 818.613355] ? lock_acquire+0x170/0x3f0 [ 818.617484] ? lock_downgrade+0x6e0/0x6e0 [ 818.621643] __handle_mm_fault+0x29c7/0x3280 [ 818.626084] ? copy_page_range+0x1d70/0x1d70 [ 818.630612] ? find_held_lock+0x2d/0x110 [ 818.634695] handle_mm_fault+0x288/0x7a0 [ 818.638770] __do_page_fault+0x4bc/0xb40 [ 818.642935] ? vmalloc_fault+0xdf0/0xdf0 [ 818.647164] ? do_page_fault+0x60/0x4f2 [ 818.651186] page_fault+0x25/0x50 [ 818.654663] RIP: 0010:iov_iter_fault_in_readable+0x2f0/0x390 [ 818.660466] RSP: 0018:ffff888056b5fa50 EFLAGS: 00010246 [ 818.665830] RAX: 0000000000000000 RBX: 00000000000003ff RCX: 000000002090a1ff [ 818.673731] RDX: 0000000000040000 RSI: ffffffff82fbce23 RDI: ffff888056b5fd50 [ 818.681051] RBP: 1ffff1100ad6bf4b R08: 0000000000000001 R09: 0000000000000003 [ 818.688414] R10: ffff88809eaf2bb8 R11: ffff88809eaf22c0 R12: 0000000000001000 [ 818.695697] R13: 0000000000001000 R14: ffff888056b5fd48 R15: 0000000000000000 [ 818.702986] ? iov_iter_fault_in_readable+0x2e3/0x390 [ 818.708193] ? _copy_from_iter_flushcache+0x9c0/0x9c0 [ 818.713639] ? balance_dirty_pages_ratelimited+0x8a9/0x17e0 [ 818.719388] generic_perform_write+0x14a/0x420 [ 818.724001] ? page_endio+0x520/0x520 [ 818.727814] ? current_time+0xb0/0xb0 [ 818.731692] ? ext4_file_write_iter+0x1d5/0xdc0 [ 818.736382] __generic_file_write_iter+0x227/0x590 [ 818.741325] ext4_file_write_iter+0x281/0xdc0 [ 818.745831] ? ext4_file_mmap+0x2b0/0x2b0 [ 818.750198] ? trace_hardirqs_on+0x10/0x10 [ 818.754503] ? iov_iter_init+0xa6/0x1c0 [ 818.758500] __vfs_write+0x44e/0x630 [ 818.762252] ? kernel_read+0x110/0x110 [ 818.766174] ? rcu_read_lock_sched_held+0x10a/0x130 [ 818.771198] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 818.775960] vfs_write+0x192/0x4e0 [ 818.779604] SyS_write+0xf2/0x210 [ 818.783062] ? SyS_read+0x210/0x210 [ 818.786716] ? SyS_clock_settime+0x1a0/0x1a0 [ 818.791136] ? do_syscall_64+0x4c/0x640 [ 818.795227] ? SyS_read+0x210/0x210 [ 818.798858] do_syscall_64+0x1d5/0x640 [ 818.802914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 818.808114] RIP: 0033:0x45c479 [ 818.811303] RSP: 002b:00007fc8be0dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.819009] RAX: ffffffffffffffda RBX: 00007fc8be0df6d4 RCX: 000000000045c479 [ 818.826365] RDX: 00000000175d900f RSI: 0000000020000200 RDI: 0000000000000005 [ 818.833865] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 818.841135] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 818.848410] R13: 0000000000000ce2 R14: 00000000004cec77 R15: 000000000076bfcc [ 818.857324] CPU: 1 PID: 31172 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 818.865234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.874596] Call Trace: [ 818.877199] dump_stack+0x13e/0x194 [ 818.881285] should_fail.cold+0x10a/0x14b [ 818.885455] should_failslab+0xd6/0x130 [ 818.889440] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 818.894558] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 818.900019] ? __alloc_skb+0x9a/0x4c0 [ 818.903935] __kmalloc_node_track_caller+0x38/0x70 [ 818.908962] __kmalloc_reserve.isra.0+0x35/0xd0 [ 818.913648] __alloc_skb+0xca/0x4c0 [ 818.917568] ? skb_trim+0x160/0x160 [ 818.921326] ? mark_held_locks+0xa6/0xf0 [ 818.925397] sock_wmalloc+0xa5/0xf0 [ 818.929044] pppoe_sendmsg+0x269/0x710 [ 818.933124] ? pppoe_getname+0x130/0x130 [ 818.937197] ? security_socket_sendmsg+0x83/0xb0 [ 818.941952] ? pppoe_getname+0x130/0x130 [ 818.946139] sock_sendmsg+0xc5/0x100 [ 818.949942] ___sys_sendmsg+0x349/0x840 [ 818.954027] ? trace_hardirqs_on+0x10/0x10 [ 818.958385] ? copy_msghdr_from_user+0x380/0x380 [ 818.963154] ? trace_hardirqs_on+0x10/0x10 [ 818.967480] ? find_held_lock+0x2d/0x110 [ 818.971584] ? __fget+0x201/0x360 [ 818.975161] ? save_trace+0x290/0x290 [ 818.979131] ? find_held_lock+0x2d/0x110 [ 818.983306] ? __might_fault+0x104/0x1b0 [ 818.987496] __sys_sendmmsg+0x129/0x330 [ 818.991528] ? SyS_sendmsg+0x40/0x40 [ 818.995231] ? SyS_write+0x1b7/0x210 [ 818.998948] ? __mutex_unlock_slowpath+0x75/0x780 [ 819.003981] ? wait_for_completion+0x390/0x390 [ 819.008731] ? vfs_write+0xff/0x4e0 [ 819.012447] ? fput+0xb/0x140 [ 819.015565] ? SyS_write+0x14d/0x210 [ 819.019286] ? SyS_read+0x210/0x210 [ 819.022956] SyS_sendmmsg+0x2f/0x50 [ 819.026597] ? __sys_sendmmsg+0x330/0x330 [ 819.030740] do_syscall_64+0x1d5/0x640 [ 819.034621] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 819.039808] RIP: 0033:0x45c479 [ 819.043101] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.050816] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 819.058248] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 819.065729] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 819.072993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 819.080257] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000a 08:19:52 executing program 2 (fault-call:7 fault-nth:11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 819.955934] FAULT_INJECTION: forcing a failure. [ 819.955934] name failslab, interval 1, probability 0, space 0, times 0 [ 819.967484] CPU: 0 PID: 31177 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 819.975405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.984764] Call Trace: [ 819.987350] dump_stack+0x13e/0x194 [ 819.990977] should_fail.cold+0x10a/0x14b [ 819.995199] should_failslab+0xd6/0x130 [ 819.999184] kmem_cache_alloc+0x44/0x770 [ 820.003293] ? __lock_acquire+0x5f7/0x4620 [ 820.007529] ? br_allowed_egress+0x3c2/0x6d0 [ 820.011940] skb_clone+0x11c/0x310 [ 820.015520] deliver_clone+0x3f/0xb0 [ 820.019239] br_flood+0x3d2/0x550 [ 820.022703] br_dev_xmit+0x8b5/0xd20 [ 820.027021] ? br_poll_controller+0x10/0x10 [ 820.031345] dev_hard_start_xmit+0x186/0x890 [ 820.035752] __dev_queue_xmit+0x1d91/0x25c0 [ 820.040077] ? find_held_lock+0x2d/0x110 [ 820.044155] ? netdev_pick_tx+0x2e0/0x2e0 [ 820.048316] ? iov_iter_advance+0x8a/0xc70 [ 820.052575] ? memcpy+0x35/0x50 08:19:52 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:52 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:52 executing program 3: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0x400, 0x4, 0x4, 0x1000000, 0x20, {r3, r4/1000+10000}, {0x3, 0xc, 0x3f, 0x83, 0x8, 0x1, "c6a06f43"}, 0x8, 0x3, @planes=&(0x7f00000000c0)={0x7, 0x4, @fd, 0x1}, 0xfffffffe, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETBLKSIZE(r5, 0xc0045004, &(0x7f0000000180)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(0xffffffffffffffff, &(0x7f00000003c0)=""/104, 0x68) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:52 executing program 1 (fault-call:12 fault-nth:0): r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 820.055866] ? pppoe_sendmsg+0x5c1/0x710 [ 820.059935] pppoe_sendmsg+0x5c1/0x710 [ 820.063923] ? ether_setup+0x2d0/0x2d0 [ 820.067832] ? pppoe_getname+0x130/0x130 [ 820.071906] ? security_socket_sendmsg+0x83/0xb0 [ 820.076776] ? pppoe_getname+0x130/0x130 [ 820.081488] sock_sendmsg+0xc5/0x100 [ 820.085217] ___sys_sendmsg+0x349/0x840 [ 820.089204] ? trace_hardirqs_on+0x10/0x10 [ 820.093452] ? copy_msghdr_from_user+0x380/0x380 [ 820.098229] ? trace_hardirqs_on+0x10/0x10 [ 820.102474] ? find_held_lock+0x2d/0x110 [ 820.106553] ? __fget+0x201/0x360 [ 820.110015] ? save_trace+0x290/0x290 [ 820.113833] ? find_held_lock+0x2d/0x110 [ 820.117907] ? __might_fault+0x104/0x1b0 [ 820.122105] __sys_sendmmsg+0x129/0x330 [ 820.126093] ? SyS_sendmsg+0x40/0x40 [ 820.129813] ? SyS_write+0x1b7/0x210 [ 820.133556] ? __mutex_unlock_slowpath+0x75/0x780 [ 820.138413] ? wait_for_completion+0x390/0x390 [ 820.143107] ? vfs_write+0xff/0x4e0 [ 820.146748] ? fput+0xb/0x140 [ 820.149863] ? SyS_write+0x14d/0x210 08:19:52 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0x7c, "e936e0e4117b03e697e630a7f96ea94048b7e79fed8a9c9cc4167e794bed777f", 0x8, 0x1f, 0x7, 0x10, 0x5}) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) [ 820.153581] ? SyS_read+0x210/0x210 [ 820.157223] SyS_sendmmsg+0x2f/0x50 [ 820.160853] ? __sys_sendmmsg+0x330/0x330 [ 820.165020] do_syscall_64+0x1d5/0x640 [ 820.168932] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 820.174172] RIP: 0033:0x45c479 [ 820.177366] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 820.185080] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 820.192410] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 820.199688] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 820.206968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 820.214246] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000b 08:19:52 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000040)="a4", &(0x7f0000000140)="1e0517f4eae78628fc8aed323b15929f75a3738f731ea41461f7bece69200c42ab3d43915a6229db204df02ddc4af48f4c3289d08ed5cbd182adcfa84b44c7c2d858f3c368612357722989967e7f6e06c7339bafa6b5a33112fbd2d14ab7625839c693e58ef5f132f288d8fd2fbc21e07d8158a6b62a7c249ee166f492a2e7df14ad47e2a2e793f68b5c6efd19f9e2523b978f537a216fe34adfb5bf2022cdd762b71534c464de2d4a1f74de1c436434730463b3fdd917bb504c1f2ca6e95f3000ee90cf007ac2ebaa8701a4faf7ce77"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:52 executing program 2 (fault-call:7 fault-nth:12): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:52 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={[0x5]}, 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6ad5aca79dc5050000005d475209129f3c0f738d6870de9567b4562ddf639db302e08222be7cafdc8c57c8c21c1ed7a01234dc5757bcbace9f4e553005c64ed532029ac5f7c6c1ecafdd4c7a3df5527746887e55c93c232d01fbf957d17fb20b28521962eb771be70739e8143be3276e10572c7a4a1892d951ef2642d4c7b39ff59b0492938ff2791a9f32b2d7d7e095b017", @ANYRES32=r7, @ANYBLOB="000000000000000000001000"], 0x3}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) poll(&(0x7f0000000040)=[{r8, 0x52}], 0x1, 0x1000) [ 820.351558] FAULT_INJECTION: forcing a failure. [ 820.351558] name failslab, interval 1, probability 0, space 0, times 0 [ 820.367350] CPU: 1 PID: 31201 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 820.375280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.384646] Call Trace: [ 820.387249] dump_stack+0x13e/0x194 [ 820.390894] should_fail.cold+0x10a/0x14b [ 820.395068] should_failslab+0xd6/0x130 [ 820.399065] kmem_cache_alloc_node+0x288/0x7a0 [ 820.406351] ? find_held_lock+0x2d/0x110 [ 820.410416] ? lock_sock_nested+0x98/0x100 [ 820.414647] __alloc_skb+0x9a/0x4c0 [ 820.418289] ? skb_trim+0x160/0x160 [ 820.421916] ? mark_held_locks+0xa6/0xf0 [ 820.426327] sock_wmalloc+0xa5/0xf0 [ 820.430132] pppoe_sendmsg+0x269/0x710 [ 820.434026] ? pppoe_getname+0x130/0x130 [ 820.438110] ? security_socket_sendmsg+0x83/0xb0 [ 820.442863] ? pppoe_getname+0x130/0x130 [ 820.446937] sock_sendmsg+0xc5/0x100 [ 820.450642] ___sys_sendmsg+0x349/0x840 [ 820.454602] ? trace_hardirqs_on+0x10/0x10 [ 820.458848] ? copy_msghdr_from_user+0x380/0x380 [ 820.463602] ? trace_hardirqs_on+0x10/0x10 [ 820.467821] ? find_held_lock+0x2d/0x110 [ 820.471885] ? __fget+0x201/0x360 [ 820.475337] ? save_trace+0x290/0x290 [ 820.479134] ? find_held_lock+0x2d/0x110 [ 820.483645] ? __might_fault+0x104/0x1b0 [ 820.487699] __sys_sendmmsg+0x129/0x330 [ 820.491670] ? SyS_sendmsg+0x40/0x40 [ 820.495386] ? SyS_write+0x1b7/0x210 [ 820.499092] ? __mutex_unlock_slowpath+0x75/0x780 [ 820.504195] ? wait_for_completion+0x390/0x390 [ 820.508759] ? vfs_write+0xff/0x4e0 [ 820.512393] ? fput+0xb/0x140 [ 820.515743] ? SyS_write+0x14d/0x210 [ 820.519462] ? SyS_read+0x210/0x210 [ 820.523078] SyS_sendmmsg+0x2f/0x50 [ 820.526692] ? __sys_sendmmsg+0x330/0x330 [ 820.530907] do_syscall_64+0x1d5/0x640 [ 820.534800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 820.540166] RIP: 0033:0x45c479 [ 820.543357] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:19:53 executing program 2 (fault-call:7 fault-nth:13): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 820.551062] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 820.558324] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 820.565848] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 820.573221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 820.580518] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000c [ 820.626448] FAULT_INJECTION: forcing a failure. [ 820.626448] name failslab, interval 1, probability 0, space 0, times 0 [ 820.638354] CPU: 1 PID: 31208 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 820.646245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.656647] Call Trace: [ 820.659256] dump_stack+0x13e/0x194 [ 820.662880] should_fail.cold+0x10a/0x14b [ 820.667020] should_failslab+0xd6/0x130 [ 820.670989] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 820.676144] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 820.681593] ? __alloc_skb+0x9a/0x4c0 [ 820.685402] __kmalloc_node_track_caller+0x38/0x70 [ 820.690339] __kmalloc_reserve.isra.0+0x35/0xd0 [ 820.695020] __alloc_skb+0xca/0x4c0 [ 820.698654] ? skb_trim+0x160/0x160 [ 820.702361] ? mark_held_locks+0xa6/0xf0 [ 820.706431] sock_wmalloc+0xa5/0xf0 [ 820.710055] pppoe_sendmsg+0x269/0x710 [ 820.713956] ? pppoe_getname+0x130/0x130 [ 820.718016] ? security_socket_sendmsg+0x83/0xb0 [ 820.722768] ? pppoe_getname+0x130/0x130 [ 820.726840] sock_sendmsg+0xc5/0x100 [ 820.730588] ___sys_sendmsg+0x349/0x840 [ 820.734563] ? trace_hardirqs_on+0x10/0x10 [ 820.738912] ? copy_msghdr_from_user+0x380/0x380 [ 820.743663] ? trace_hardirqs_on+0x10/0x10 [ 820.747909] ? find_held_lock+0x2d/0x110 [ 820.751991] ? __fget+0x201/0x360 [ 820.755515] ? save_trace+0x290/0x290 [ 820.759318] ? find_held_lock+0x2d/0x110 [ 820.763406] ? __might_fault+0x104/0x1b0 [ 820.767489] __sys_sendmmsg+0x129/0x330 [ 820.771481] ? SyS_sendmsg+0x40/0x40 [ 820.775199] ? SyS_write+0x1b7/0x210 [ 820.778916] ? __mutex_unlock_slowpath+0x75/0x780 [ 820.783761] ? wait_for_completion+0x390/0x390 [ 820.788345] ? vfs_write+0xff/0x4e0 [ 820.791982] ? fput+0xb/0x140 [ 820.795092] ? SyS_write+0x14d/0x210 [ 820.798833] ? SyS_read+0x210/0x210 [ 820.802453] SyS_sendmmsg+0x2f/0x50 [ 820.806065] ? __sys_sendmmsg+0x330/0x330 [ 820.810211] do_syscall_64+0x1d5/0x640 [ 820.814111] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 820.819292] RIP: 0033:0x45c479 08:19:53 executing program 2 (fault-call:7 fault-nth:14): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 820.822468] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 820.830164] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 820.837479] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 820.844737] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 820.852102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 820.859371] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000d [ 820.904411] FAULT_INJECTION: forcing a failure. [ 820.904411] name failslab, interval 1, probability 0, space 0, times 0 [ 820.915681] CPU: 1 PID: 31211 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 820.923665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.927564] FAULT_FLAG_ALLOW_RETRY missing 30 [ 820.933027] Call Trace: [ 820.933069] dump_stack+0x13e/0x194 [ 820.933092] should_fail.cold+0x10a/0x14b [ 820.933108] should_failslab+0xd6/0x130 [ 820.933117] kmem_cache_alloc+0x44/0x770 [ 820.933128] ? __lock_acquire+0x5f7/0x4620 [ 820.933139] ? br_allowed_egress+0x3c2/0x6d0 [ 820.933153] skb_clone+0x11c/0x310 [ 820.933164] deliver_clone+0x3f/0xb0 [ 820.933175] br_flood+0x3d2/0x550 [ 820.933192] br_dev_xmit+0x8b5/0xd20 [ 820.933201] ? br_poll_controller+0x10/0x10 [ 820.933220] dev_hard_start_xmit+0x186/0x890 [ 820.988137] __dev_queue_xmit+0x1d91/0x25c0 [ 820.992456] ? find_held_lock+0x2d/0x110 [ 820.996527] ? netdev_pick_tx+0x2e0/0x2e0 [ 821.000710] ? iov_iter_advance+0x8a/0xc70 [ 821.004968] ? memcpy+0x35/0x50 [ 821.008278] ? pppoe_sendmsg+0x5c1/0x710 [ 821.012337] pppoe_sendmsg+0x5c1/0x710 [ 821.016249] ? ether_setup+0x2d0/0x2d0 [ 821.020140] ? pppoe_getname+0x130/0x130 [ 821.024205] ? security_socket_sendmsg+0x83/0xb0 [ 821.029072] ? pppoe_getname+0x130/0x130 [ 821.033146] sock_sendmsg+0xc5/0x100 [ 821.036859] ___sys_sendmsg+0x349/0x840 [ 821.040836] ? trace_hardirqs_on+0x10/0x10 [ 821.045095] ? copy_msghdr_from_user+0x380/0x380 [ 821.049859] ? trace_hardirqs_on+0x10/0x10 [ 821.054091] ? find_held_lock+0x2d/0x110 [ 821.058155] ? __fget+0x201/0x360 [ 821.061613] ? save_trace+0x290/0x290 [ 821.065419] ? find_held_lock+0x2d/0x110 [ 821.069473] ? __might_fault+0x104/0x1b0 [ 821.073536] __sys_sendmmsg+0x129/0x330 [ 821.077547] ? SyS_sendmsg+0x40/0x40 [ 821.081261] ? SyS_write+0x1b7/0x210 [ 821.084985] ? __mutex_unlock_slowpath+0x75/0x780 [ 821.089823] ? wait_for_completion+0x390/0x390 [ 821.094405] ? vfs_write+0xff/0x4e0 [ 821.098041] ? fput+0xb/0x140 [ 821.101148] ? SyS_write+0x14d/0x210 [ 821.104854] ? SyS_read+0x210/0x210 [ 821.108484] SyS_sendmmsg+0x2f/0x50 [ 821.112106] ? __sys_sendmmsg+0x330/0x330 [ 821.116275] do_syscall_64+0x1d5/0x640 [ 821.120166] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 821.125356] RIP: 0033:0x45c479 [ 821.128531] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.136246] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 821.143506] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 821.150780] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 821.158048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 821.165328] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000e [ 821.172793] CPU: 0 PID: 31183 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 821.180688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.190041] Call Trace: [ 821.192647] dump_stack+0x13e/0x194 [ 821.196276] handle_userfault.cold+0x3b/0x4b [ 821.200752] ? userfaultfd_ioctl+0x2f80/0x2f80 [ 821.205349] ? trace_hardirqs_on+0x10/0x10 [ 821.209578] ? find_held_lock+0x2d/0x110 [ 821.213639] ? __handle_mm_fault+0x29b8/0x3280 [ 821.218219] ? lock_acquire+0x170/0x3f0 [ 821.222206] ? lock_downgrade+0x6e0/0x6e0 [ 821.226447] __handle_mm_fault+0x29c7/0x3280 [ 821.230864] ? copy_page_range+0x1d70/0x1d70 [ 821.235297] ? find_held_lock+0x2d/0x110 [ 821.239351] handle_mm_fault+0x288/0x7a0 [ 821.243400] __do_page_fault+0x4bc/0xb40 [ 821.247445] ? vmalloc_fault+0xdf0/0xdf0 [ 821.251488] ? do_page_fault+0x60/0x4f2 [ 821.255466] page_fault+0x25/0x50 [ 821.258919] RIP: 0010:iov_iter_fault_in_readable+0x2f0/0x390 [ 821.264769] RSP: 0018:ffff88804b9cfa50 EFLAGS: 00010246 [ 821.270135] RAX: 0000000000000000 RBX: 00000000000003ff RCX: 000000002090a1ff [ 821.277404] RDX: 0000000000040000 RSI: ffffffff82fbce23 RDI: ffff88804b9cfd50 [ 821.284687] RBP: 1ffff11009739f4b R08: 0000000000000001 R09: 0000000000000003 [ 821.291945] R10: ffff8880579beaf8 R11: ffff8880579be200 R12: 0000000000001000 [ 821.299210] R13: 0000000000001000 R14: ffff88804b9cfd48 R15: 0000000000000000 [ 821.306489] ? iov_iter_fault_in_readable+0x2e3/0x390 [ 821.311673] ? _copy_from_iter_flushcache+0x9c0/0x9c0 [ 821.316861] ? balance_dirty_pages_ratelimited+0x8a9/0x17e0 [ 821.322746] generic_perform_write+0x14a/0x420 [ 821.327336] ? page_endio+0x520/0x520 [ 821.331143] ? current_time+0xb0/0xb0 [ 821.335068] ? ext4_file_write_iter+0x1d5/0xdc0 [ 821.339749] __generic_file_write_iter+0x227/0x590 [ 821.344692] ext4_file_write_iter+0x281/0xdc0 [ 821.349320] ? ext4_file_mmap+0x2b0/0x2b0 [ 821.353478] ? trace_hardirqs_on+0x10/0x10 [ 821.357715] ? iov_iter_init+0xa6/0x1c0 [ 821.361689] __vfs_write+0x44e/0x630 [ 821.365458] ? kernel_read+0x110/0x110 [ 821.369388] ? rcu_read_lock_sched_held+0x10a/0x130 [ 821.374401] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 821.379204] vfs_write+0x192/0x4e0 [ 821.382789] SyS_write+0xf2/0x210 [ 821.386325] ? SyS_read+0x210/0x210 [ 821.389950] ? SyS_clock_settime+0x1a0/0x1a0 [ 821.394356] ? do_syscall_64+0x4c/0x640 [ 821.398381] ? SyS_read+0x210/0x210 [ 821.402001] do_syscall_64+0x1d5/0x640 [ 821.405930] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 821.411114] RIP: 0033:0x45c479 [ 821.414287] RSP: 002b:00007fc8be0ffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.421985] RAX: ffffffffffffffda RBX: 00007fc8be1006d4 RCX: 000000000045c479 [ 821.429246] RDX: 00000000175d900f RSI: 0000000020000200 RDI: 0000000000000007 [ 821.436571] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 821.443865] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 08:19:54 executing program 0: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x1, 0xffff, {r0, r1/1000+10000}, {0x2, 0xc, 0x6, 0x81, 0x2, 0xcb, "b41e4126"}, 0x7, 0x7, @planes=&(0x7f00000000c0)={0x1, 0xfffffffd, @mem_offset=0xffffffff, 0x1f}, 0x3, 0x0, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000200)={0x6, 0x7, 0xffffe262, 0x80000, r3}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) fcntl$dupfd(r5, 0x0, r2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000001bff4)={0x10}) rt_sigpending(&(0x7f0000000040), 0x8) r7 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r7}, &(0x7f0000044000)) fchdir(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r6}], 0x1, 0x0) [ 821.451126] R13: 0000000000000ce2 R14: 00000000004cec77 R15: 000000000076bf2c 08:19:54 executing program 2 (fault-call:7 fault-nth:15): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 821.534199] FAULT_INJECTION: forcing a failure. [ 821.534199] name failslab, interval 1, probability 0, space 0, times 0 [ 821.546975] CPU: 0 PID: 31223 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 821.555016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.564397] Call Trace: [ 821.567011] dump_stack+0x13e/0x194 [ 821.570671] should_fail.cold+0x10a/0x14b [ 821.574838] should_failslab+0xd6/0x130 [ 821.578847] kmem_cache_alloc_node+0x288/0x7a0 [ 821.583445] ? find_held_lock+0x2d/0x110 [ 821.587511] ? lock_sock_nested+0x98/0x100 [ 821.591748] __alloc_skb+0x9a/0x4c0 [ 821.595379] ? skb_trim+0x160/0x160 [ 821.599009] ? mark_held_locks+0xa6/0xf0 [ 821.603072] sock_wmalloc+0xa5/0xf0 [ 821.606706] pppoe_sendmsg+0x269/0x710 [ 821.610652] ? pppoe_getname+0x130/0x130 [ 821.614714] ? security_socket_sendmsg+0x83/0xb0 [ 821.619513] ? pppoe_getname+0x130/0x130 [ 821.623666] sock_sendmsg+0xc5/0x100 [ 821.627476] ___sys_sendmsg+0x349/0x840 [ 821.631448] ? trace_hardirqs_on+0x10/0x10 [ 821.635686] ? copy_msghdr_from_user+0x380/0x380 [ 821.640442] ? trace_hardirqs_on+0x10/0x10 [ 821.644678] ? find_held_lock+0x2d/0x110 [ 821.648787] ? __fget+0x201/0x360 [ 821.652229] ? save_trace+0x290/0x290 [ 821.656082] ? find_held_lock+0x2d/0x110 [ 821.660557] ? __might_fault+0x104/0x1b0 [ 821.664642] __sys_sendmmsg+0x129/0x330 [ 821.668622] ? SyS_sendmsg+0x40/0x40 [ 821.672358] ? SyS_write+0x1b7/0x210 [ 821.676280] ? __mutex_unlock_slowpath+0x75/0x780 [ 821.681116] ? wait_for_completion+0x390/0x390 [ 821.685695] ? vfs_write+0xff/0x4e0 [ 821.689416] ? fput+0xb/0x140 [ 821.692509] ? SyS_write+0x14d/0x210 [ 821.696215] ? SyS_read+0x210/0x210 [ 821.700099] SyS_sendmmsg+0x2f/0x50 [ 821.703817] ? __sys_sendmmsg+0x330/0x330 [ 821.708080] do_syscall_64+0x1d5/0x640 [ 821.711995] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 821.717196] RIP: 0033:0x45c479 [ 821.720376] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.728083] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 821.735347] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 821.742608] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 821.749870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 821.757175] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000000f 08:19:55 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:55 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x440, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[]}}, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0xf2, 0x7, 0x4, 0x400, 0x7fffffff, {}, {0x2, 0x2, 0x2, 0xff, 0x40, 0x9, "36ba6c01"}, 0x40, 0x3, @userptr=0x9, 0x9, 0x0, r2}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:55 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) getrlimit(0x2, &(0x7f0000000040)) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:55 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:55 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)) 08:19:55 executing program 2 (fault-call:7 fault-nth:16): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:19:55 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101300, 0x0) sendto$l2tp(r3, &(0x7f0000000140)="58106822d27ef4e74db5af3afa793bb523ac5bb5b2ab5aefb6133eafa8424eaf54afdedd5898b60f24c2f0db4b56b369e7f0feb29f84b6500ca511399c8b054a6b13c7a7b40213e0925e3bee7e2a85f35e8bc22fefa8d11e78c2f91bdeec0455d74c5ff816ec78cae1709fa58b5266583bc855fa93f688764b30796a5f157ac75954", 0x82, 0x40004, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) [ 823.273731] FAULT_INJECTION: forcing a failure. [ 823.273731] name failslab, interval 1, probability 0, space 0, times 0 [ 823.295381] CPU: 0 PID: 31245 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 823.303309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.312670] Call Trace: [ 823.315272] dump_stack+0x13e/0x194 [ 823.319008] should_fail.cold+0x10a/0x14b 08:19:55 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x2, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 823.323173] should_failslab+0xd6/0x130 [ 823.327156] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 823.332412] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 823.337867] ? __alloc_skb+0x9a/0x4c0 [ 823.341676] __kmalloc_node_track_caller+0x38/0x70 [ 823.346619] __kmalloc_reserve.isra.0+0x35/0xd0 [ 823.351308] __alloc_skb+0xca/0x4c0 [ 823.354940] ? skb_trim+0x160/0x160 [ 823.358574] ? mark_held_locks+0xa6/0xf0 [ 823.362645] sock_wmalloc+0xa5/0xf0 [ 823.366280] pppoe_sendmsg+0x269/0x710 08:19:55 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000000)=0x1) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$selinux_create(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:pam_console_exec_t:s0 /usr/sbin/cups-b2owsed 00000000000000000731 ./file0\x00'], 0x5c) getsockname$netlink(r5, &(0x7f0000000040), &(0x7f0000000140)=0xc) ptrace$cont(0x7, 0x0, 0xb9, 0x0) [ 823.368001] ptrace attach of "/root/syz-executor.1"[31260] was attempted by "/root/syz-executor.1"[31262] [ 823.370174] ? pppoe_getname+0x130/0x130 [ 823.370188] ? security_socket_sendmsg+0x83/0xb0 [ 823.370197] ? pppoe_getname+0x130/0x130 [ 823.370206] sock_sendmsg+0xc5/0x100 [ 823.370215] ___sys_sendmsg+0x349/0x840 [ 823.370225] ? trace_hardirqs_on+0x10/0x10 [ 823.370235] ? copy_msghdr_from_user+0x380/0x380 [ 823.370249] ? trace_hardirqs_on+0x10/0x10 [ 823.370259] ? find_held_lock+0x2d/0x110 [ 823.418517] ? __fget+0x201/0x360 08:19:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x1, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 823.421978] ? save_trace+0x290/0x290 [ 823.425793] ? find_held_lock+0x2d/0x110 [ 823.429876] ? __might_fault+0x104/0x1b0 [ 823.433966] __sys_sendmmsg+0x129/0x330 [ 823.437963] ? SyS_sendmsg+0x40/0x40 [ 823.441683] ? SyS_write+0x1b7/0x210 [ 823.445421] ? __mutex_unlock_slowpath+0x75/0x780 [ 823.450281] ? wait_for_completion+0x390/0x390 [ 823.454892] ? vfs_write+0xff/0x4e0 [ 823.458529] ? fput+0xb/0x140 [ 823.461638] ? SyS_write+0x14d/0x210 [ 823.465362] ? SyS_read+0x210/0x210 [ 823.469001] SyS_sendmmsg+0x2f/0x50 08:19:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8fc579ca9f7640519d0f496d36460234432479aed75d492b41fd983f79e65199614804db87a5633c5871902f5fae0f2875e107717dc26574276938a0d13ec33b617a81f14e2cbdba4630ed135825c046d424893c5028e55a06e25fc8628a042269d53e782ccd36dec67c2168b8092c0c485695772a112b8c484215f4089f40aa2224db89e9c97a50241dbcd8a6908457b80ab278f54303715db48116ec1a85c004a6", 0xce}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe27, 0x0, 0x317, 0x0, 0xfffffffffffffd10}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/netlink\x00') sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x40}, 0xc4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000000)=0x8bb4) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xbc30, 0x2080) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1, 0x9, 0x102, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002884}, 0x80) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) ptrace$cont(0x20, r6, 0x3, 0x2) [ 823.472630] ? __sys_sendmmsg+0x330/0x330 [ 823.476783] do_syscall_64+0x1d5/0x640 [ 823.480682] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 823.485877] RIP: 0033:0x45c479 [ 823.489065] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 823.496762] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 823.504147] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 823.511421] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 823.518695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 823.525973] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000010 08:19:58 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:58 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000140)=0x64, 0x4) r7 = accept4$llc(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) connect$llc(r7, &(0x7f00000000c0)={0x1a, 0x7, 0x1, 0x6, 0x4, 0x0, @broadcast}, 0x10) 08:19:58 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ptrace$cont(0x20, r5, 0x9, 0xfffffffffffffffc) 08:19:58 executing program 2 (fault-call:7 fault-nth:17): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 826.201561] FAULT_INJECTION: forcing a failure. [ 826.201561] name failslab, interval 1, probability 0, space 0, times 0 [ 826.213029] CPU: 1 PID: 31287 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 826.220943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.230635] Call Trace: [ 826.233255] dump_stack+0x13e/0x194 [ 826.236905] should_fail.cold+0x10a/0x14b [ 826.241208] should_failslab+0xd6/0x130 [ 826.245195] kmem_cache_alloc+0x44/0x770 [ 826.249264] ? __lock_acquire+0x5f7/0x4620 [ 826.253510] ? br_allowed_egress+0x3c2/0x6d0 [ 826.258114] skb_clone+0x11c/0x310 [ 826.261666] deliver_clone+0x3f/0xb0 [ 826.265512] br_flood+0x3d2/0x550 [ 826.269107] br_dev_xmit+0x8b5/0xd20 [ 826.272836] ? br_poll_controller+0x10/0x10 [ 826.277280] dev_hard_start_xmit+0x186/0x890 [ 826.281826] __dev_queue_xmit+0x1d91/0x25c0 [ 826.286169] ? find_held_lock+0x2d/0x110 [ 826.290449] ? netdev_pick_tx+0x2e0/0x2e0 [ 826.294776] ? iov_iter_advance+0x8a/0xc70 [ 826.299146] ? memcpy+0x35/0x50 [ 826.302446] ? pppoe_sendmsg+0x5c1/0x710 [ 826.306541] pppoe_sendmsg+0x5c1/0x710 [ 826.310440] ? ether_setup+0x2d0/0x2d0 [ 826.314449] ? pppoe_getname+0x130/0x130 [ 826.318533] ? security_socket_sendmsg+0x83/0xb0 [ 826.323302] ? pppoe_getname+0x130/0x130 [ 826.327371] sock_sendmsg+0xc5/0x100 [ 826.331101] ___sys_sendmsg+0x349/0x840 [ 826.335187] ? trace_hardirqs_on+0x10/0x10 [ 826.339631] ? copy_msghdr_from_user+0x380/0x380 [ 826.344403] ? trace_hardirqs_on+0x10/0x10 08:19:58 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090b000/0x1000)=nil, 0x1000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:19:58 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0xffffffff, 0x400000000000003, 0x2a, r1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:58 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) getpgid(r2) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 08:19:58 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:19:58 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x0, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00009c8000)={{}, {0x0, 0x9}}, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r3, 0x8}, {r0, 0x201}], 0x2, &(0x7f00000000c0)={r4, r5+30000000}, &(0x7f0000000140)={[0x3]}, 0x8) [ 826.348645] ? find_held_lock+0x2d/0x110 [ 826.352851] ? __fget+0x201/0x360 [ 826.356319] ? save_trace+0x290/0x290 [ 826.360137] ? find_held_lock+0x2d/0x110 [ 826.364253] ? __might_fault+0x104/0x1b0 [ 826.368342] __sys_sendmmsg+0x129/0x330 [ 826.372330] ? SyS_sendmsg+0x40/0x40 [ 826.376482] ? SyS_write+0x1b7/0x210 [ 826.380352] ? __mutex_unlock_slowpath+0x75/0x780 [ 826.385297] ? wait_for_completion+0x390/0x390 [ 826.389889] ? vfs_write+0xff/0x4e0 [ 826.393616] ? fput+0xb/0x140 [ 826.396731] ? SyS_write+0x14d/0x210 08:19:58 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000000)=[0x3, 0x3ff]) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @local}, &(0x7f0000000140)=0xc) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x3}, {0x0, 0x10}}}, 0x24}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r13, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r16, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r18}, @NL80211_ATTR_WIPHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000445}, 0x40800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 826.400454] ? SyS_read+0x210/0x210 [ 826.404364] SyS_sendmmsg+0x2f/0x50 [ 826.408004] ? __sys_sendmmsg+0x330/0x330 [ 826.412164] do_syscall_64+0x1d5/0x640 [ 826.416074] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 826.421274] RIP: 0033:0x45c479 [ 826.424464] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 826.432195] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 826.439584] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:19:59 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 826.446976] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 826.454502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 826.461891] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000011 08:19:59 executing program 2 (fault-call:7 fault-nth:18): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 826.569609] FAULT_INJECTION: forcing a failure. [ 826.569609] name failslab, interval 1, probability 0, space 0, times 0 [ 826.585584] CPU: 0 PID: 31325 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 826.593506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.602876] Call Trace: [ 826.605502] dump_stack+0x13e/0x194 [ 826.609592] should_fail.cold+0x10a/0x14b [ 826.613794] should_failslab+0xd6/0x130 [ 826.617771] kmem_cache_alloc_node+0x288/0x7a0 [ 826.622352] ? find_held_lock+0x2d/0x110 [ 826.626445] ? lock_sock_nested+0x98/0x100 [ 826.630815] __alloc_skb+0x9a/0x4c0 [ 826.634452] ? skb_trim+0x160/0x160 [ 826.638093] ? mark_held_locks+0xa6/0xf0 [ 826.642162] sock_wmalloc+0xa5/0xf0 [ 826.645806] pppoe_sendmsg+0x269/0x710 [ 826.649695] ? pppoe_getname+0x130/0x130 [ 826.653885] ? security_socket_sendmsg+0x83/0xb0 [ 826.658668] ? pppoe_getname+0x130/0x130 [ 826.662732] sock_sendmsg+0xc5/0x100 [ 826.666465] ___sys_sendmsg+0x349/0x840 [ 826.670471] ? trace_hardirqs_on+0x10/0x10 [ 826.674805] ? copy_msghdr_from_user+0x380/0x380 [ 826.679563] ? trace_hardirqs_on+0x10/0x10 [ 826.683796] ? find_held_lock+0x2d/0x110 [ 826.687869] ? __fget+0x201/0x360 [ 826.691309] ? save_trace+0x290/0x290 [ 826.695139] ? find_held_lock+0x2d/0x110 [ 826.699209] ? __might_fault+0x104/0x1b0 [ 826.703271] __sys_sendmmsg+0x129/0x330 [ 826.707236] ? SyS_sendmsg+0x40/0x40 [ 826.710968] ? SyS_write+0x1b7/0x210 [ 826.714696] ? __mutex_unlock_slowpath+0x75/0x780 [ 826.719566] ? wait_for_completion+0x390/0x390 [ 826.724161] ? vfs_write+0xff/0x4e0 [ 826.727883] ? fput+0xb/0x140 [ 826.730982] ? SyS_write+0x14d/0x210 [ 826.734701] ? SyS_read+0x210/0x210 [ 826.738392] SyS_sendmmsg+0x2f/0x50 [ 826.742017] ? __sys_sendmmsg+0x330/0x330 [ 826.746190] do_syscall_64+0x1d5/0x640 [ 826.750085] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 826.755362] RIP: 0033:0x45c479 [ 826.758660] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 826.766360] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 826.773624] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 826.780991] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 826.788265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 826.795643] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000012 08:20:01 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10003, 0x6}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000040)={r4, 0xffff}) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x38) ptrace$cont(0x18, r6, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) 08:20:01 executing program 2 (fault-call:7 fault-nth:19): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:01 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x20) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 829.226403] FAULT_INJECTION: forcing a failure. [ 829.226403] name failslab, interval 1, probability 0, space 0, times 0 [ 829.239071] CPU: 0 PID: 31336 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 829.247074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.256424] Call Trace: [ 829.259024] dump_stack+0x13e/0x194 [ 829.262653] should_fail.cold+0x10a/0x14b [ 829.266812] should_failslab+0xd6/0x130 [ 829.270783] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 829.275899] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 829.281362] ? __alloc_skb+0x9a/0x4c0 [ 829.285165] __kmalloc_node_track_caller+0x38/0x70 [ 829.290108] __kmalloc_reserve.isra.0+0x35/0xd0 [ 829.294795] __alloc_skb+0xca/0x4c0 [ 829.298428] ? skb_trim+0x160/0x160 [ 829.302053] ? mark_held_locks+0xa6/0xf0 [ 829.306126] sock_wmalloc+0xa5/0xf0 [ 829.309772] pppoe_sendmsg+0x269/0x710 [ 829.313665] ? pppoe_getname+0x130/0x130 [ 829.317789] ? security_socket_sendmsg+0x83/0xb0 [ 829.322549] ? pppoe_getname+0x130/0x130 [ 829.326603] sock_sendmsg+0xc5/0x100 [ 829.330318] ___sys_sendmsg+0x349/0x840 [ 829.334643] ? trace_hardirqs_on+0x10/0x10 [ 829.338913] ? copy_msghdr_from_user+0x380/0x380 [ 829.343687] ? trace_hardirqs_on+0x10/0x10 [ 829.347922] ? find_held_lock+0x2d/0x110 [ 829.351984] ? __fget+0x201/0x360 [ 829.355459] ? save_trace+0x290/0x290 [ 829.359558] ? find_held_lock+0x2d/0x110 [ 829.363630] ? __might_fault+0x104/0x1b0 [ 829.367707] __sys_sendmmsg+0x129/0x330 [ 829.371692] ? SyS_sendmsg+0x40/0x40 [ 829.375396] ? SyS_write+0x1b7/0x210 [ 829.379117] ? __mutex_unlock_slowpath+0x75/0x780 [ 829.384018] ? wait_for_completion+0x390/0x390 [ 829.388611] ? vfs_write+0xff/0x4e0 [ 829.392225] ? fput+0xb/0x140 [ 829.395347] ? SyS_write+0x14d/0x210 [ 829.399105] ? SyS_read+0x210/0x210 [ 829.402735] SyS_sendmmsg+0x2f/0x50 [ 829.406361] ? __sys_sendmmsg+0x330/0x330 [ 829.410512] do_syscall_64+0x1d5/0x640 [ 829.414417] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 829.419736] RIP: 0033:0x45c479 08:20:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:02 executing program 2 (fault-call:7 fault-nth:20): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 829.422932] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 829.430762] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 829.438034] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 829.445308] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.452729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 829.459995] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000013 08:20:02 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x8021b030177f, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) ptrace$cont(0x7, 0x0, 0x10000000000002, 0xfffffffffffffffe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 829.577878] FAULT_INJECTION: forcing a failure. [ 829.577878] name failslab, interval 1, probability 0, space 0, times 0 [ 829.589499] CPU: 0 PID: 31351 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 829.597395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.606756] Call Trace: [ 829.609388] dump_stack+0x13e/0x194 [ 829.613042] should_fail.cold+0x10a/0x14b [ 829.617233] should_failslab+0xd6/0x130 [ 829.621322] kmem_cache_alloc+0x44/0x770 [ 829.625400] ? __lock_acquire+0x5f7/0x4620 [ 829.629656] ? br_allowed_egress+0x3c2/0x6d0 [ 829.634085] skb_clone+0x11c/0x310 [ 829.635418] ptrace attach of "/root/syz-executor.0"[31356] was attempted by "/root/syz-executor.0"[31357] [ 829.637635] deliver_clone+0x3f/0xb0 [ 829.637648] br_flood+0x3d2/0x550 [ 829.637665] br_dev_xmit+0x8b5/0xd20 [ 829.658791] ? br_poll_controller+0x10/0x10 [ 829.663218] dev_hard_start_xmit+0x186/0x890 [ 829.667648] __dev_queue_xmit+0x1d91/0x25c0 [ 829.671988] ? find_held_lock+0x2d/0x110 08:20:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x4, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:02 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 829.676103] ? netdev_pick_tx+0x2e0/0x2e0 [ 829.680410] ? iov_iter_advance+0x8a/0xc70 [ 829.684669] ? memcpy+0x35/0x50 [ 829.687973] ? pppoe_sendmsg+0x5c1/0x710 [ 829.692041] pppoe_sendmsg+0x5c1/0x710 [ 829.696049] ? ether_setup+0x2d0/0x2d0 [ 829.699949] ? pppoe_getname+0x130/0x130 [ 829.704018] ? security_socket_sendmsg+0x83/0xb0 [ 829.708784] ? pppoe_getname+0x130/0x130 [ 829.712855] sock_sendmsg+0xc5/0x100 [ 829.716576] ___sys_sendmsg+0x349/0x840 [ 829.720558] ? trace_hardirqs_on+0x10/0x10 08:20:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$rds(0x15, 0x5, 0x0) fchdir(r3) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x509c, 0x2800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 829.724801] ? copy_msghdr_from_user+0x380/0x380 [ 829.729574] ? trace_hardirqs_on+0x10/0x10 [ 829.733821] ? find_held_lock+0x2d/0x110 [ 829.737919] ? __fget+0x201/0x360 [ 829.741389] ? save_trace+0x290/0x290 [ 829.745200] ? find_held_lock+0x2d/0x110 [ 829.749271] ? __might_fault+0x104/0x1b0 [ 829.753383] __sys_sendmmsg+0x129/0x330 [ 829.757373] ? SyS_sendmsg+0x40/0x40 [ 829.761102] ? SyS_write+0x1b7/0x210 [ 829.764842] ? __mutex_unlock_slowpath+0x75/0x780 [ 829.769700] ? wait_for_completion+0x390/0x390 [ 829.774907] ? vfs_write+0xff/0x4e0 08:20:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x37}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x3, "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", 0x0, 0x54, 0x1, 0x3, 0xff, 0x81, 0x0, 0x1}, r6}}, 0x128) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 829.778705] ? fput+0xb/0x140 [ 829.781820] ? SyS_write+0x14d/0x210 [ 829.785544] ? SyS_read+0x210/0x210 [ 829.789181] SyS_sendmmsg+0x2f/0x50 [ 829.792821] ? __sys_sendmmsg+0x330/0x330 [ 829.796983] do_syscall_64+0x1d5/0x640 [ 829.800888] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 829.806085] RIP: 0033:0x45c479 [ 829.809347] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 829.817079] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 829.824568] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 829.831952] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.839306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 829.846684] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000014 08:20:04 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x3}) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 08:20:04 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:04 executing program 2 (fault-call:7 fault-nth:21): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:04 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000090b000/0x4000)=nil, 0x4000}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0xc000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x0, 'tunl0\x00', {}, 0x8}) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$cgroup_type(r9, &(0x7f0000000140)='threaded\x00', 0x9) [ 832.252311] FAULT_INJECTION: forcing a failure. [ 832.252311] name failslab, interval 1, probability 0, space 0, times 0 [ 832.265395] CPU: 0 PID: 31390 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 832.273522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.283059] Call Trace: [ 832.285666] dump_stack+0x13e/0x194 [ 832.289317] should_fail.cold+0x10a/0x14b [ 832.293482] should_failslab+0xd6/0x130 [ 832.297495] kmem_cache_alloc_node+0x288/0x7a0 08:20:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4200, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) wait4(r0, 0x0, 0x80000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0xfffffff7, 0x9, 0x4, 0x1000000, 0x10001, {0x0, 0x2710}, {0x1, 0x1, 0x9, 0x2, 0x0, 0x7f, "57d076cc"}, 0x8, 0x4, @fd=r7, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000300)={@isdn={0x22, 0x8, 0x28, 0x4, 0xff}, {&(0x7f00000001c0)=""/188, 0xbc}, &(0x7f0000000080), 0x64}, 0xa0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x84, 0x81, 0x0, 0x3, 0x2a, r2}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="fec48bc0ece3561264dbd38b1874222081414769c1aedfdcc503973b249eae52154eda85e69e929b97aef325a1db73b681ea35841ece8a5118c4818ed0e8942965022ee0080107f3da1f163cccf39483be634843b3d1fb19e54a7a813078e7e52592978a41e2db48e84b1e9b71cf5a7dd6725fada047664304fae99afaa616fe33710a901c108597d730c46ef83673b439482cc38cad22355dac9501fb57fc44064c03a5cd504c72dbe63bda5256e8c7d63d00ff8e0a3d8c3ef4d6310247e13a7407d0c07a74877a31a366153869d26b666fa7457799b20b62c58587d39e5f903b63a04d23b062267478616227728c182b766fbd") tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) r5 = socket(0x2000000000000022, 0x2, 0x11) close(r5) r6 = socket$inet(0x2, 0x4000000805, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0x80000001, &(0x7f0000000300)="5e6872a234dc0a0b3745639b4d50f46d92f8174af64b04de73a8253193560ed83f817acf39c54da6d6ea23cdd3eadcb005eb9e246e451a0e6cdfcea07f4995c0f7dd4d977a0a5c5aa2bdaeed3677224c1ea5888d193e5209d75849121d659e7250afdb0bf9f6023eea49a3f92bbf6689e8d5a73005d3f913d45af2be854a8df3391de7803623d9d0c7fc974e3f5f39f9a54dba558aa8dc65e9cb325b88c37ad23a3c85f88f86afcd603db495ff58667656ce1042992558c9ffea2ace") r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x80000001, @mcast1, 0x1000}], 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000780)={r8, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000840)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r8, 0x8}, 0x8) [ 832.302184] ? find_held_lock+0x2d/0x110 [ 832.306260] ? lock_sock_nested+0x98/0x100 [ 832.310517] __alloc_skb+0x9a/0x4c0 [ 832.314160] ? skb_trim+0x160/0x160 [ 832.317795] ? mark_held_locks+0xa6/0xf0 [ 832.321868] sock_wmalloc+0xa5/0xf0 [ 832.325672] pppoe_sendmsg+0x269/0x710 [ 832.329586] ? pppoe_getname+0x130/0x130 [ 832.333671] ? security_socket_sendmsg+0x83/0xb0 [ 832.338444] ? pppoe_getname+0x130/0x130 [ 832.342512] sock_sendmsg+0xc5/0x100 [ 832.346375] ___sys_sendmsg+0x349/0x840 [ 832.350360] ? trace_hardirqs_on+0x10/0x10 [ 832.354607] ? copy_msghdr_from_user+0x380/0x380 [ 832.354753] delete_channel: no stack [ 832.359384] ? trace_hardirqs_on+0x10/0x10 [ 832.359394] ? find_held_lock+0x2d/0x110 [ 832.359406] ? __fget+0x201/0x360 [ 832.359416] ? save_trace+0x290/0x290 [ 832.359431] ? find_held_lock+0x2d/0x110 [ 832.359443] ? __might_fault+0x104/0x1b0 [ 832.359466] __sys_sendmmsg+0x129/0x330 [ 832.391035] ? SyS_sendmsg+0x40/0x40 [ 832.394865] ? SyS_write+0x1b7/0x210 08:20:04 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x4}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x65b}, @in6={0xa, 0x4e20, 0xf8000000, @empty, 0xffffffff}, @in6={0xa, 0x4e20, 0xe5a6bdec, @ipv4={[], [], @multicast2}, 0x9}, @in6={0xa, 0x4e23, 0x8001, @mcast1, 0x8}], 0x80) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, r3, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) tkill(r3, 0x38) socket$inet_dccp(0x2, 0x6, 0x0) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000180)) ptrace$cont(0x9, r3, 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) poll(&(0x7f0000000240)=[{r7, 0x2004}, {r8, 0x2004}], 0x2, 0x401) [ 832.398696] ? __mutex_unlock_slowpath+0x75/0x780 [ 832.403661] ? wait_for_completion+0x390/0x390 [ 832.408256] ? vfs_write+0xff/0x4e0 [ 832.411898] ? fput+0xb/0x140 [ 832.415111] ? SyS_write+0x14d/0x210 [ 832.418850] ? SyS_read+0x210/0x210 [ 832.422582] SyS_sendmmsg+0x2f/0x50 [ 832.426232] ? __sys_sendmmsg+0x330/0x330 [ 832.430463] do_syscall_64+0x1d5/0x640 [ 832.434354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 832.439563] RIP: 0033:0x45c479 [ 832.443181] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:05 executing program 2 (fault-call:7 fault-nth:22): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 832.451135] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 832.458404] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 832.465678] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 832.466701] ptrace attach of "/root/syz-executor.1"[31411] was attempted by "/root/syz-executor.1"[31412] [ 832.472969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 832.472975] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000015 [ 832.528915] FAULT_INJECTION: forcing a failure. [ 832.528915] name failslab, interval 1, probability 0, space 0, times 0 [ 832.541404] CPU: 1 PID: 31416 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 832.549628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.558975] Call Trace: [ 832.561704] dump_stack+0x13e/0x194 [ 832.565515] should_fail.cold+0x10a/0x14b [ 832.569685] should_failslab+0xd6/0x130 [ 832.573663] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 832.578767] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 832.584345] ? __alloc_skb+0x9a/0x4c0 [ 832.588160] __kmalloc_node_track_caller+0x38/0x70 [ 832.593783] __kmalloc_reserve.isra.0+0x35/0xd0 [ 832.598621] __alloc_skb+0xca/0x4c0 [ 832.602252] ? skb_trim+0x160/0x160 [ 832.606685] ? mark_held_locks+0xa6/0xf0 [ 832.610751] sock_wmalloc+0xa5/0xf0 [ 832.614391] pppoe_sendmsg+0x269/0x710 [ 832.618287] ? pppoe_getname+0x130/0x130 [ 832.622344] ? security_socket_sendmsg+0x83/0xb0 [ 832.627092] ? pppoe_getname+0x130/0x130 [ 832.631154] sock_sendmsg+0xc5/0x100 [ 832.634884] ___sys_sendmsg+0x349/0x840 [ 832.638846] ? trace_hardirqs_on+0x10/0x10 [ 832.643127] ? copy_msghdr_from_user+0x380/0x380 [ 832.647876] ? trace_hardirqs_on+0x10/0x10 [ 832.652112] ? find_held_lock+0x2d/0x110 [ 832.656191] ? __fget+0x201/0x360 [ 832.659635] ? save_trace+0x290/0x290 [ 832.663583] ? find_held_lock+0x2d/0x110 [ 832.668074] ? __might_fault+0x104/0x1b0 [ 832.672147] __sys_sendmmsg+0x129/0x330 [ 832.676128] ? SyS_sendmsg+0x40/0x40 [ 832.679831] ? SyS_write+0x1b7/0x210 [ 832.683558] ? __mutex_unlock_slowpath+0x75/0x780 [ 832.688393] ? wait_for_completion+0x390/0x390 [ 832.692968] ? vfs_write+0xff/0x4e0 [ 832.696588] ? fput+0xb/0x140 [ 832.699688] ? SyS_write+0x14d/0x210 [ 832.703391] ? SyS_read+0x210/0x210 [ 832.707010] SyS_sendmmsg+0x2f/0x50 [ 832.710635] ? __sys_sendmmsg+0x330/0x330 [ 832.714877] do_syscall_64+0x1d5/0x640 [ 832.718770] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 832.724093] RIP: 0033:0x45c479 08:20:05 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000000), 0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:05 executing program 2 (fault-call:7 fault-nth:23): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 832.727273] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 832.734980] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 832.742281] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 832.749599] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 832.756999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 832.764264] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000016 [ 832.830610] FAULT_INJECTION: forcing a failure. [ 832.830610] name failslab, interval 1, probability 0, space 0, times 0 [ 832.842141] CPU: 1 PID: 31424 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 832.850049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.859409] Call Trace: [ 832.862119] dump_stack+0x13e/0x194 [ 832.865809] should_fail.cold+0x10a/0x14b [ 832.869964] should_failslab+0xd6/0x130 [ 832.873935] kmem_cache_alloc+0x44/0x770 [ 832.878007] ? __lock_acquire+0x5f7/0x4620 [ 832.882244] ? br_allowed_egress+0x3c2/0x6d0 [ 832.886947] skb_clone+0x11c/0x310 [ 832.890671] deliver_clone+0x3f/0xb0 [ 832.894429] br_flood+0x3d2/0x550 [ 832.897902] br_dev_xmit+0x8b5/0xd20 [ 832.901625] ? br_poll_controller+0x10/0x10 [ 832.905973] dev_hard_start_xmit+0x186/0x890 [ 832.910499] __dev_queue_xmit+0x1d91/0x25c0 [ 832.914819] ? find_held_lock+0x2d/0x110 [ 832.918898] ? netdev_pick_tx+0x2e0/0x2e0 [ 832.923061] ? iov_iter_advance+0x8a/0xc70 [ 832.927308] ? memcpy+0x35/0x50 [ 832.930646] ? pppoe_sendmsg+0x5c1/0x710 [ 832.934709] pppoe_sendmsg+0x5c1/0x710 [ 832.938595] ? ether_setup+0x2d0/0x2d0 [ 832.942525] ? pppoe_getname+0x130/0x130 [ 832.946943] ? security_socket_sendmsg+0x83/0xb0 [ 832.951727] ? pppoe_getname+0x130/0x130 [ 832.955783] sock_sendmsg+0xc5/0x100 [ 832.959507] ___sys_sendmsg+0x349/0x840 [ 832.963523] ? trace_hardirqs_on+0x10/0x10 [ 832.967790] ? copy_msghdr_from_user+0x380/0x380 [ 832.972613] ? trace_hardirqs_on+0x10/0x10 [ 832.976895] ? find_held_lock+0x2d/0x110 [ 832.981077] ? __fget+0x201/0x360 [ 832.984575] ? save_trace+0x290/0x290 [ 832.988390] ? find_held_lock+0x2d/0x110 [ 832.992467] ? __might_fault+0x104/0x1b0 [ 832.996537] __sys_sendmmsg+0x129/0x330 [ 833.000640] ? SyS_sendmsg+0x40/0x40 [ 833.004371] ? SyS_write+0x1b7/0x210 [ 833.008132] ? __mutex_unlock_slowpath+0x75/0x780 [ 833.013000] ? wait_for_completion+0x390/0x390 [ 833.017590] ? vfs_write+0xff/0x4e0 [ 833.021227] ? fput+0xb/0x140 [ 833.024342] ? SyS_write+0x14d/0x210 [ 833.028054] ? SyS_read+0x210/0x210 [ 833.031688] SyS_sendmmsg+0x2f/0x50 [ 833.035325] ? __sys_sendmmsg+0x330/0x330 [ 833.039482] do_syscall_64+0x1d5/0x640 [ 833.043414] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 833.048902] RIP: 0033:0x45c479 [ 833.052104] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 833.059825] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 833.067118] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 833.074397] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.081678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 833.089077] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000017 08:20:07 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x0, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:07 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x0, 0x6, 0x4, 0xe000, 0x7, {0x77359400}, {0x5, 0x1, 0x3, 0x0, 0x9, 0x1, "bb8f0390"}, 0xfffffff8, 0x3, @offset=0x8000, 0xd84, 0x0, r2}) recvfrom$unix(r3, &(0x7f0000000700)=""/162, 0xa2, 0x40002001, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="480e003f0000007e5bc5795eca00000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) 08:20:07 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0xc0, 0x20, 0x1, 0x6, 0xcc, 0xfffffff7, 0x40, 0x7}, &(0x7f00000000c0)=0x20) 08:20:07 executing program 2 (fault-call:7 fault-nth:24): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:07 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 835.347805] FAULT_INJECTION: forcing a failure. [ 835.347805] name failslab, interval 1, probability 0, space 0, times 0 [ 835.359125] CPU: 0 PID: 31442 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 835.367242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.376611] Call Trace: [ 835.379219] dump_stack+0x13e/0x194 [ 835.382866] should_fail.cold+0x10a/0x14b [ 835.387123] should_failslab+0xd6/0x130 [ 835.391111] kmem_cache_alloc+0x44/0x770 [ 835.395183] ? __lock_acquire+0x5f7/0x4620 [ 835.399429] ? br_allowed_egress+0x3c2/0x6d0 [ 835.403867] skb_clone+0x11c/0x310 [ 835.407418] deliver_clone+0x3f/0xb0 [ 835.411142] br_flood+0x3d2/0x550 [ 835.414822] br_dev_xmit+0x8b5/0xd20 [ 835.418566] ? br_poll_controller+0x10/0x10 [ 835.422905] dev_hard_start_xmit+0x186/0x890 [ 835.427324] __dev_queue_xmit+0x1d91/0x25c0 [ 835.431660] ? find_held_lock+0x2d/0x110 [ 835.435739] ? netdev_pick_tx+0x2e0/0x2e0 [ 835.439902] ? iov_iter_advance+0x8a/0xc70 [ 835.444250] ? memcpy+0x35/0x50 [ 835.447552] ? pppoe_sendmsg+0x5c1/0x710 [ 835.451623] pppoe_sendmsg+0x5c1/0x710 [ 835.455545] ? ether_setup+0x2d0/0x2d0 [ 835.459538] ? pppoe_getname+0x130/0x130 [ 835.463616] ? security_socket_sendmsg+0x83/0xb0 [ 835.468417] ? pppoe_getname+0x130/0x130 [ 835.472681] sock_sendmsg+0xc5/0x100 [ 835.476407] ___sys_sendmsg+0x349/0x840 [ 835.480400] ? trace_hardirqs_on+0x10/0x10 [ 835.484773] ? copy_msghdr_from_user+0x380/0x380 [ 835.489548] ? trace_hardirqs_on+0x10/0x10 [ 835.493811] ? find_held_lock+0x2d/0x110 [ 835.498091] ? __fget+0x201/0x360 [ 835.501572] ? save_trace+0x290/0x290 [ 835.505687] ? find_held_lock+0x2d/0x110 [ 835.509762] ? __might_fault+0x104/0x1b0 [ 835.513855] __sys_sendmmsg+0x129/0x330 [ 835.517994] ? SyS_sendmsg+0x40/0x40 [ 835.521721] ? SyS_write+0x1b7/0x210 [ 835.525465] ? __mutex_unlock_slowpath+0x75/0x780 [ 835.530427] ? wait_for_completion+0x390/0x390 [ 835.535029] ? vfs_write+0xff/0x4e0 [ 835.538664] ? fput+0xb/0x140 [ 835.541804] ? SyS_write+0x14d/0x210 [ 835.545553] ? SyS_read+0x210/0x210 [ 835.549193] SyS_sendmmsg+0x2f/0x50 [ 835.552831] ? __sys_sendmmsg+0x330/0x330 [ 835.556990] do_syscall_64+0x1d5/0x640 [ 835.560895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 835.566217] RIP: 0033:0x45c479 [ 835.569529] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 835.577544] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 835.584852] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 835.592181] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 835.599461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 835.606746] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000018 08:20:08 executing program 2 (fault-call:7 fault-nth:25): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 835.743904] FAULT_INJECTION: forcing a failure. [ 835.743904] name failslab, interval 1, probability 0, space 0, times 0 [ 835.760955] CPU: 0 PID: 31454 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 835.768869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.778530] Call Trace: [ 835.781150] dump_stack+0x13e/0x194 [ 835.784794] should_fail.cold+0x10a/0x14b [ 835.788964] should_failslab+0xd6/0x130 [ 835.792948] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 835.798198] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 835.803722] ? __alloc_skb+0x9a/0x4c0 [ 835.807545] __kmalloc_node_track_caller+0x38/0x70 [ 835.812582] __kmalloc_reserve.isra.0+0x35/0xd0 [ 835.817258] __alloc_skb+0xca/0x4c0 [ 835.820973] ? skb_trim+0x160/0x160 [ 835.824600] ? mark_held_locks+0xa6/0xf0 [ 835.828680] sock_wmalloc+0xa5/0xf0 [ 835.832672] pppoe_sendmsg+0x269/0x710 [ 835.836584] ? pppoe_getname+0x130/0x130 [ 835.840667] ? security_socket_sendmsg+0x83/0xb0 [ 835.845455] ? pppoe_getname+0x130/0x130 [ 835.849530] sock_sendmsg+0xc5/0x100 [ 835.853251] ___sys_sendmsg+0x349/0x840 [ 835.857239] ? trace_hardirqs_on+0x10/0x10 [ 835.861486] ? copy_msghdr_from_user+0x380/0x380 [ 835.866262] ? trace_hardirqs_on+0x10/0x10 [ 835.870512] ? find_held_lock+0x2d/0x110 [ 835.874729] ? __fget+0x201/0x360 [ 835.878202] ? save_trace+0x290/0x290 [ 835.882021] ? find_held_lock+0x2d/0x110 [ 835.886085] ? __might_fault+0x104/0x1b0 [ 835.890306] __sys_sendmmsg+0x129/0x330 [ 835.894315] ? SyS_sendmsg+0x40/0x40 [ 835.898057] ? SyS_write+0x1b7/0x210 [ 835.901802] ? __mutex_unlock_slowpath+0x75/0x780 [ 835.906661] ? wait_for_completion+0x390/0x390 [ 835.911257] ? vfs_write+0xff/0x4e0 [ 835.914896] ? fput+0xb/0x140 [ 835.918004] ? SyS_write+0x14d/0x210 [ 835.921713] ? SyS_read+0x210/0x210 [ 835.925355] SyS_sendmmsg+0x2f/0x50 [ 835.928982] ? __sys_sendmmsg+0x330/0x330 [ 835.933144] do_syscall_64+0x1d5/0x640 [ 835.937217] entry_SYSCALL_64_after_hwframe+0x42/0xb7 08:20:08 executing program 2 (fault-call:7 fault-nth:26): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) [ 835.942414] RIP: 0033:0x45c479 [ 835.945612] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 835.954811] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 835.962098] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 835.969386] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 835.976674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 835.983958] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000019 08:20:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x2000000000000022, 0x2, 0x11) close(r5) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000780)={r8, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000840)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000080)={r8, 0x3, 0x20, 0x9, 0x3ff}, &(0x7f0000000140)=0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000040), 0x4) r10 = gettid() ptrace$setopts(0x4206, r10, 0x0, 0x0) tkill(r10, 0x3c) ptrace$cont(0x18, r10, 0x0, 0x0) ptrace$setregs(0xd, r10, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r10, 0x0, 0x0) setpgid(r0, r10) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 836.069143] FAULT_INJECTION: forcing a failure. [ 836.069143] name failslab, interval 1, probability 0, space 0, times 0 [ 836.071129] delete_channel: no stack [ 836.080705] CPU: 0 PID: 31466 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 836.080713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.080717] Call Trace: [ 836.080739] dump_stack+0x13e/0x194 [ 836.080755] should_fail.cold+0x10a/0x14b [ 836.080771] should_failslab+0xd6/0x130 08:20:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) [ 836.080781] kmem_cache_alloc+0x44/0x770 [ 836.080801] ? __lock_acquire+0x5f7/0x4620 [ 836.080812] ? br_allowed_egress+0x3c2/0x6d0 [ 836.080826] skb_clone+0x11c/0x310 [ 836.080837] deliver_clone+0x3f/0xb0 [ 836.136828] br_flood+0x3d2/0x550 [ 836.140302] br_dev_xmit+0x8b5/0xd20 [ 836.144025] ? br_poll_controller+0x10/0x10 [ 836.148368] dev_hard_start_xmit+0x186/0x890 [ 836.152968] __dev_queue_xmit+0x1d91/0x25c0 [ 836.157304] ? find_held_lock+0x2d/0x110 [ 836.161555] ? netdev_pick_tx+0x2e0/0x2e0 [ 836.165708] ? iov_iter_advance+0x8a/0xc70 [ 836.169963] ? memcpy+0x35/0x50 [ 836.173268] ? pppoe_sendmsg+0x5c1/0x710 [ 836.177341] pppoe_sendmsg+0x5c1/0x710 [ 836.181239] ? ether_setup+0x2d0/0x2d0 [ 836.185143] ? pppoe_getname+0x130/0x130 [ 836.189220] ? security_socket_sendmsg+0x83/0xb0 [ 836.193984] ? pppoe_getname+0x130/0x130 [ 836.198066] sock_sendmsg+0xc5/0x100 [ 836.201794] ___sys_sendmsg+0x349/0x840 [ 836.206046] ? trace_hardirqs_on+0x10/0x10 [ 836.210297] ? copy_msghdr_from_user+0x380/0x380 [ 836.215071] ? trace_hardirqs_on+0x10/0x10 08:20:08 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000000)=""/207) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={[], 0x83, 0x0, 0x5, 0x4, 0x4, r5}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x5) [ 836.219323] ? find_held_lock+0x2d/0x110 [ 836.223395] ? __fget+0x201/0x360 [ 836.226859] ? save_trace+0x290/0x290 [ 836.230777] ? find_held_lock+0x2d/0x110 [ 836.234849] ? __might_fault+0x104/0x1b0 [ 836.238959] __sys_sendmmsg+0x129/0x330 [ 836.242948] ? SyS_sendmsg+0x40/0x40 [ 836.246712] ? SyS_write+0x1b7/0x210 [ 836.250460] ? __mutex_unlock_slowpath+0x75/0x780 [ 836.255307] ? wait_for_completion+0x390/0x390 [ 836.259900] ? vfs_write+0xff/0x4e0 [ 836.263547] ? fput+0xb/0x140 [ 836.266661] ? SyS_write+0x14d/0x210 [ 836.270431] ? SyS_read+0x210/0x210 [ 836.274332] SyS_sendmmsg+0x2f/0x50 [ 836.277973] ? __sys_sendmmsg+0x330/0x330 [ 836.282132] do_syscall_64+0x1d5/0x640 [ 836.286114] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 836.291309] RIP: 0033:0x45c479 [ 836.294504] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 836.302349] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 836.309622] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 836.317424] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 836.324698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 836.331984] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001a 08:20:10 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:10 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400001, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4008080) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) connect$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0xd1}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0xfffffffffffffffc, 0x200) 08:20:10 executing program 3: r0 = userfaultfd(0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x9) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:10 executing program 2 (fault-call:7 fault-nth:27): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:10 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 838.357480] FAULT_INJECTION: forcing a failure. [ 838.357480] name failslab, interval 1, probability 0, space 0, times 0 [ 838.382634] CPU: 0 PID: 31494 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 838.390818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.400167] Call Trace: [ 838.402820] dump_stack+0x13e/0x194 [ 838.406474] should_fail.cold+0x10a/0x14b [ 838.410712] should_failslab+0xd6/0x130 [ 838.414695] kmem_cache_alloc_node+0x288/0x7a0 [ 838.419293] ? find_held_lock+0x2d/0x110 [ 838.423368] ? lock_sock_nested+0x98/0x100 [ 838.427622] __alloc_skb+0x9a/0x4c0 [ 838.431370] ? skb_trim+0x160/0x160 [ 838.435028] ? mark_held_locks+0xa6/0xf0 [ 838.439105] sock_wmalloc+0xa5/0xf0 [ 838.442741] pppoe_sendmsg+0x269/0x710 [ 838.446657] ? pppoe_getname+0x130/0x130 [ 838.450733] ? security_socket_sendmsg+0x83/0xb0 [ 838.455516] ? pppoe_getname+0x130/0x130 [ 838.459589] sock_sendmsg+0xc5/0x100 [ 838.463318] ___sys_sendmsg+0x349/0x840 [ 838.467387] ? trace_hardirqs_on+0x10/0x10 [ 838.471632] ? copy_msghdr_from_user+0x380/0x380 [ 838.476551] ? trace_hardirqs_on+0x10/0x10 [ 838.480862] ? find_held_lock+0x2d/0x110 [ 838.484937] ? __fget+0x201/0x360 [ 838.488397] ? save_trace+0x290/0x290 [ 838.492217] ? find_held_lock+0x2d/0x110 [ 838.496287] ? __might_fault+0x104/0x1b0 [ 838.500481] __sys_sendmmsg+0x129/0x330 [ 838.504468] ? SyS_sendmsg+0x40/0x40 [ 838.508186] ? SyS_write+0x1b7/0x210 [ 838.511924] ? __mutex_unlock_slowpath+0x75/0x780 [ 838.516793] ? wait_for_completion+0x390/0x390 [ 838.521379] ? vfs_write+0xff/0x4e0 [ 838.525000] ? fput+0xb/0x140 [ 838.528098] ? SyS_write+0x14d/0x210 [ 838.531805] ? SyS_read+0x210/0x210 [ 838.535427] SyS_sendmmsg+0x2f/0x50 [ 838.539046] ? __sys_sendmmsg+0x330/0x330 [ 838.543182] do_syscall_64+0x1d5/0x640 [ 838.547588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 838.552772] RIP: 0033:0x45c479 08:20:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) ptrace$cont(0x18, r0, 0x5, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x9, 0x3, 0x8000029}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x8, 0x1, 0x4, 0x1000, 0x9, {r6, r7/1000+30000}, {0x5, 0x1, 0x0, 0x93, 0x2, 0x9, "9c2cb40c"}, 0x1ff, 0x3, @offset=0x1f, 0x3, 0x0, r1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x20, 0x2, 0x3, 0x1, 0xc55, 0x5}, &(0x7f00000001c0)=0x20) r9 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r9, 0x9201) 08:20:11 executing program 2 (fault-call:7 fault-nth:28): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 838.556069] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 838.563776] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 838.571084] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 838.578458] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 838.585719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 838.592994] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001b [ 838.656641] FAULT_INJECTION: forcing a failure. [ 838.656641] name failslab, interval 1, probability 0, space 0, times 0 [ 838.668172] CPU: 1 PID: 31512 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 838.676161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.685505] Call Trace: [ 838.688138] dump_stack+0x13e/0x194 [ 838.691776] should_fail.cold+0x10a/0x14b [ 838.695927] should_failslab+0xd6/0x130 [ 838.699896] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 838.704996] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 838.710507] ? __alloc_skb+0x9a/0x4c0 [ 838.714296] __kmalloc_node_track_caller+0x38/0x70 [ 838.719231] __kmalloc_reserve.isra.0+0x35/0xd0 [ 838.724011] __alloc_skb+0xca/0x4c0 [ 838.727796] ? skb_trim+0x160/0x160 [ 838.731434] ? mark_held_locks+0xa6/0xf0 [ 838.736107] sock_wmalloc+0xa5/0xf0 [ 838.739737] pppoe_sendmsg+0x269/0x710 [ 838.743760] ? pppoe_getname+0x130/0x130 [ 838.747916] ? security_socket_sendmsg+0x83/0xb0 [ 838.752659] ? pppoe_getname+0x130/0x130 [ 838.756719] sock_sendmsg+0xc5/0x100 [ 838.760446] ___sys_sendmsg+0x349/0x840 [ 838.764421] ? trace_hardirqs_on+0x10/0x10 [ 838.768657] ? copy_msghdr_from_user+0x380/0x380 [ 838.773411] ? trace_hardirqs_on+0x10/0x10 [ 838.777732] ? find_held_lock+0x2d/0x110 [ 838.781917] ? __fget+0x201/0x360 [ 838.785371] ? save_trace+0x290/0x290 [ 838.789318] ? find_held_lock+0x2d/0x110 [ 838.793433] ? __might_fault+0x104/0x1b0 [ 838.797495] __sys_sendmmsg+0x129/0x330 [ 838.801645] ? SyS_sendmsg+0x40/0x40 [ 838.805497] ? SyS_write+0x1b7/0x210 [ 838.809352] ? __mutex_unlock_slowpath+0x75/0x780 [ 838.814194] ? wait_for_completion+0x390/0x390 [ 838.818775] ? vfs_write+0xff/0x4e0 [ 838.822409] ? fput+0xb/0x140 [ 838.825552] ? SyS_write+0x14d/0x210 [ 838.829264] ? SyS_read+0x210/0x210 [ 838.832886] SyS_sendmmsg+0x2f/0x50 [ 838.836552] ? __sys_sendmmsg+0x330/0x330 [ 838.840706] do_syscall_64+0x1d5/0x640 [ 838.844740] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 838.849925] RIP: 0033:0x45c479 [ 838.853140] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 838.860869] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 838.868149] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 838.875414] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 838.882688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 838.890052] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001c 08:20:11 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:11 executing program 1: r0 = getpid() getpgrp(r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKRRPART(r5, 0x125f, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 08:20:11 executing program 2 (fault-call:7 fault-nth:29): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000240)=0x3, 0x2) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21080310}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @random='h\x00+:c\f'}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) tkill(r7, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x120) ptrace$cont(0x9, r1, 0x0, 0x0) [ 839.082062] FAULT_INJECTION: forcing a failure. [ 839.082062] name failslab, interval 1, probability 0, space 0, times 0 [ 839.093747] CPU: 0 PID: 31519 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 839.101729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.111401] Call Trace: [ 839.114003] dump_stack+0x13e/0x194 [ 839.117645] should_fail.cold+0x10a/0x14b [ 839.121822] should_failslab+0xd6/0x130 [ 839.125923] kmem_cache_alloc+0x44/0x770 08:20:11 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setopts(0x4200, r3, 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000003c0)={@ipx={0x4, 0x9, 0x1, "c0feec12e7bb", 0x80}, {&(0x7f0000000200)=""/131, 0x83}, &(0x7f0000000040), 0x13}, 0xa0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000140)="78df57ccd26f01bc6b56fa389d6037ead5add26e3a5228121965b4284d1a3ef709b6c83db230e68e20ed3792157cd34afaae2a380cfb01579af2d6f7ba97fcc9cf8c3631113823504557bf2fc1512cfabdaa552aa8c526af809b5c534c38ced864e013c695fdb507bb1d157f3dae265d6f5edbb9205ebaac871051508cdf4fdf09d46a94c958b62796bd21eba34d27f7783884088a4539be65a8") ptrace$cont(0x9, r1, 0x0, 0x0) [ 839.129992] ? __lock_acquire+0x5f7/0x4620 [ 839.134353] ? br_allowed_egress+0x3c2/0x6d0 [ 839.138777] skb_clone+0x11c/0x310 [ 839.142329] deliver_clone+0x3f/0xb0 [ 839.146146] br_flood+0x3d2/0x550 [ 839.149617] br_dev_xmit+0x8b5/0xd20 [ 839.153366] ? br_poll_controller+0x10/0x10 [ 839.157706] dev_hard_start_xmit+0x186/0x890 [ 839.162144] __dev_queue_xmit+0x1d91/0x25c0 [ 839.166586] ? find_held_lock+0x2d/0x110 [ 839.170662] ? netdev_pick_tx+0x2e0/0x2e0 [ 839.174828] ? iov_iter_advance+0x8a/0xc70 [ 839.179081] ? memcpy+0x35/0x50 [ 839.182379] ? pppoe_sendmsg+0x5c1/0x710 [ 839.186457] pppoe_sendmsg+0x5c1/0x710 [ 839.190454] ? ether_setup+0x2d0/0x2d0 [ 839.194354] ? pppoe_getname+0x130/0x130 [ 839.198570] ? security_socket_sendmsg+0x83/0xb0 [ 839.203336] ? pppoe_getname+0x130/0x130 [ 839.207408] sock_sendmsg+0xc5/0x100 [ 839.211136] ___sys_sendmsg+0x349/0x840 [ 839.215118] ? trace_hardirqs_on+0x10/0x10 [ 839.219370] ? copy_msghdr_from_user+0x380/0x380 [ 839.224138] ? trace_hardirqs_on+0x10/0x10 [ 839.228414] ? find_held_lock+0x2d/0x110 [ 839.232478] ? __fget+0x201/0x360 [ 839.235944] ? save_trace+0x290/0x290 [ 839.239760] ? find_held_lock+0x2d/0x110 [ 839.243831] ? __might_fault+0x104/0x1b0 [ 839.247925] __sys_sendmmsg+0x129/0x330 [ 839.251939] ? SyS_sendmsg+0x40/0x40 [ 839.255658] ? SyS_write+0x1b7/0x210 [ 839.259404] ? __mutex_unlock_slowpath+0x75/0x780 [ 839.264260] ? wait_for_completion+0x390/0x390 [ 839.268848] ? vfs_write+0xff/0x4e0 [ 839.272488] ? fput+0xb/0x140 [ 839.275603] ? SyS_write+0x14d/0x210 [ 839.279323] ? SyS_read+0x210/0x210 [ 839.283000] SyS_sendmmsg+0x2f/0x50 [ 839.286633] ? __sys_sendmmsg+0x330/0x330 [ 839.290787] do_syscall_64+0x1d5/0x640 [ 839.294702] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 839.299895] RIP: 0033:0x45c479 [ 839.303108] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 839.310824] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 839.318093] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 839.325364] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 839.332746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 839.340108] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001d 08:20:13 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:13 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x80, 0x7, 0xa, 0x2, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:13 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2) inotify_rm_watch(r0, r1) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r2, &(0x7f0000009f9c)=""/100, 0x64) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat(r3, &(0x7f0000000300)='./bus\x00', r5, &(0x7f0000000340)='./bus\x00') getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/134, 0x86}, {&(0x7f0000000240)=""/104, 0x68}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/43, 0x2b}], 0x4, 0x6) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:13 executing program 2 (fault-call:7 fault-nth:30): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:13 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:13 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:13 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 841.420970] FAULT_INJECTION: forcing a failure. [ 841.420970] name failslab, interval 1, probability 0, space 0, times 0 [ 841.444522] CPU: 0 PID: 31547 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 841.452456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.461924] Call Trace: [ 841.464531] dump_stack+0x13e/0x194 [ 841.468321] should_fail.cold+0x10a/0x14b [ 841.472500] should_failslab+0xd6/0x130 [ 841.476610] kmem_cache_alloc_node+0x288/0x7a0 [ 841.481214] ? find_held_lock+0x2d/0x110 [ 841.485288] ? lock_sock_nested+0x98/0x100 [ 841.489557] __alloc_skb+0x9a/0x4c0 [ 841.493199] ? skb_trim+0x160/0x160 [ 841.496836] ? mark_held_locks+0xa6/0xf0 [ 841.501020] sock_wmalloc+0xa5/0xf0 [ 841.504660] pppoe_sendmsg+0x269/0x710 [ 841.508564] ? pppoe_getname+0x130/0x130 [ 841.512636] ? security_socket_sendmsg+0x83/0xb0 [ 841.517423] ? pppoe_getname+0x130/0x130 [ 841.521500] sock_sendmsg+0xc5/0x100 [ 841.525230] ___sys_sendmsg+0x349/0x840 [ 841.529305] ? trace_hardirqs_on+0x10/0x10 [ 841.533557] ? copy_msghdr_from_user+0x380/0x380 [ 841.538335] ? trace_hardirqs_on+0x10/0x10 [ 841.542594] ? find_held_lock+0x2d/0x110 [ 841.546757] ? __fget+0x201/0x360 [ 841.550231] ? save_trace+0x290/0x290 [ 841.554153] ? find_held_lock+0x2d/0x110 [ 841.558232] ? __might_fault+0x104/0x1b0 [ 841.562331] __sys_sendmmsg+0x129/0x330 [ 841.566446] ? SyS_sendmsg+0x40/0x40 [ 841.570174] ? SyS_write+0x1b7/0x210 [ 841.573928] ? __mutex_unlock_slowpath+0x75/0x780 [ 841.578792] ? wait_for_completion+0x390/0x390 [ 841.583435] ? vfs_write+0xff/0x4e0 [ 841.587163] ? fput+0xb/0x140 [ 841.590356] ? SyS_write+0x14d/0x210 [ 841.594170] ? SyS_read+0x210/0x210 [ 841.597903] SyS_sendmmsg+0x2f/0x50 [ 841.601557] ? __sys_sendmmsg+0x330/0x330 [ 841.605718] do_syscall_64+0x1d5/0x640 [ 841.609787] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 841.615019] RIP: 0033:0x45c479 [ 841.618203] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 841.626013] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 841.633283] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 841.640715] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 841.648077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 841.655574] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001e 08:20:14 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:14 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:14 executing program 2 (fault-call:7 fault-nth:31): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 842.094647] FAULT_INJECTION: forcing a failure. [ 842.094647] name failslab, interval 1, probability 0, space 0, times 0 [ 842.108778] CPU: 1 PID: 31566 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 842.116703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.126063] Call Trace: [ 842.128874] dump_stack+0x13e/0x194 [ 842.132551] should_fail.cold+0x10a/0x14b [ 842.136999] should_failslab+0xd6/0x130 [ 842.141135] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 842.146258] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 842.151720] ? __alloc_skb+0x9a/0x4c0 [ 842.155683] __kmalloc_node_track_caller+0x38/0x70 [ 842.160659] __kmalloc_reserve.isra.0+0x35/0xd0 [ 842.165420] __alloc_skb+0xca/0x4c0 [ 842.169087] ? skb_trim+0x160/0x160 [ 842.172727] ? mark_held_locks+0xa6/0xf0 [ 842.176797] sock_wmalloc+0xa5/0xf0 [ 842.180422] pppoe_sendmsg+0x269/0x710 [ 842.184416] ? pppoe_getname+0x130/0x130 [ 842.188504] ? security_socket_sendmsg+0x83/0xb0 [ 842.193271] ? pppoe_getname+0x130/0x130 [ 842.197477] sock_sendmsg+0xc5/0x100 [ 842.201199] ___sys_sendmsg+0x349/0x840 [ 842.205174] ? trace_hardirqs_on+0x10/0x10 [ 842.209534] ? copy_msghdr_from_user+0x380/0x380 [ 842.214386] ? trace_hardirqs_on+0x10/0x10 [ 842.219315] ? find_held_lock+0x2d/0x110 [ 842.223502] ? __fget+0x201/0x360 [ 842.226980] ? save_trace+0x290/0x290 [ 842.230787] ? find_held_lock+0x2d/0x110 [ 842.234850] ? __might_fault+0x104/0x1b0 [ 842.238918] __sys_sendmmsg+0x129/0x330 [ 842.242894] ? SyS_sendmsg+0x40/0x40 [ 842.246608] ? SyS_write+0x1b7/0x210 [ 842.250339] ? __mutex_unlock_slowpath+0x75/0x780 [ 842.255204] ? wait_for_completion+0x390/0x390 [ 842.259988] ? vfs_write+0xff/0x4e0 [ 842.263634] ? fput+0xb/0x140 [ 842.266743] ? SyS_write+0x14d/0x210 [ 842.270462] ? SyS_read+0x210/0x210 [ 842.274107] SyS_sendmmsg+0x2f/0x50 [ 842.277738] ? __sys_sendmmsg+0x330/0x330 [ 842.282059] do_syscall_64+0x1d5/0x640 [ 842.285967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 842.291188] RIP: 0033:0x45c479 08:20:14 executing program 2 (fault-call:7 fault-nth:32): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 842.294387] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 842.302110] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 842.311832] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 842.319138] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 842.326430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 842.333985] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000001f [ 842.401572] FAULT_INJECTION: forcing a failure. [ 842.401572] name failslab, interval 1, probability 0, space 0, times 0 [ 842.413112] CPU: 0 PID: 31575 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 842.421012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.430463] Call Trace: [ 842.433070] dump_stack+0x13e/0x194 [ 842.436857] should_fail.cold+0x10a/0x14b [ 842.441346] should_failslab+0xd6/0x130 [ 842.445342] kmem_cache_alloc+0x44/0x770 [ 842.449526] ? __lock_acquire+0x5f7/0x4620 [ 842.453777] ? br_allowed_egress+0x3c2/0x6d0 [ 842.458301] skb_clone+0x11c/0x310 [ 842.461855] deliver_clone+0x3f/0xb0 [ 842.465581] br_flood+0x3d2/0x550 [ 842.469045] br_dev_xmit+0x8b5/0xd20 [ 842.472777] ? br_poll_controller+0x10/0x10 [ 842.477120] dev_hard_start_xmit+0x186/0x890 [ 842.481553] __dev_queue_xmit+0x1d91/0x25c0 [ 842.485897] ? find_held_lock+0x2d/0x110 [ 842.489965] ? netdev_pick_tx+0x2e0/0x2e0 [ 842.494119] ? iov_iter_advance+0x8a/0xc70 [ 842.498368] ? memcpy+0x35/0x50 [ 842.501653] ? pppoe_sendmsg+0x5c1/0x710 [ 842.505716] pppoe_sendmsg+0x5c1/0x710 [ 842.509693] ? ether_setup+0x2d0/0x2d0 [ 842.513592] ? pppoe_getname+0x130/0x130 [ 842.518104] ? security_socket_sendmsg+0x83/0xb0 [ 842.522874] ? pppoe_getname+0x130/0x130 [ 842.527370] sock_sendmsg+0xc5/0x100 [ 842.531087] ___sys_sendmsg+0x349/0x840 [ 842.535074] ? trace_hardirqs_on+0x10/0x10 [ 842.539327] ? copy_msghdr_from_user+0x380/0x380 [ 842.544097] ? trace_hardirqs_on+0x10/0x10 [ 842.548349] ? find_held_lock+0x2d/0x110 08:20:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r1, &(0x7f0000009f9c)=""/100, 0x64) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x10000, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000003c0)={0x6, {{0xa, 0x4e22, 0x0, @rand_addr="d051317b7e8242c3544ccc72933901d6", 0x8000}}, 0x1, 0x5, [{{0xa, 0x4e22, 0x7, @mcast1, 0x1f}}, {{0xa, 0x4e24, 0x2f, @dev={0xfe, 0x80, [], 0x42}, 0x7}}, {{0xa, 0x4e20, 0x0, @empty, 0x98d}}, {{0xa, 0x4e22, 0x2, @remote, 0x6}}, {{0xa, 0x4e21, 0x7ff, @local, 0x34470340}}]}, 0x310) [ 842.552422] ? __fget+0x201/0x360 [ 842.555972] ? save_trace+0x290/0x290 [ 842.559789] ? find_held_lock+0x2d/0x110 [ 842.564035] ? __might_fault+0x104/0x1b0 [ 842.568216] __sys_sendmmsg+0x129/0x330 [ 842.572249] ? SyS_sendmsg+0x40/0x40 [ 842.575973] ? SyS_write+0x1b7/0x210 [ 842.579709] ? __mutex_unlock_slowpath+0x75/0x780 [ 842.584587] ? wait_for_completion+0x390/0x390 [ 842.589176] ? vfs_write+0xff/0x4e0 [ 842.592976] ? fput+0xb/0x140 [ 842.596213] ? SyS_write+0x14d/0x210 [ 842.599986] ? SyS_read+0x210/0x210 [ 842.603961] SyS_sendmmsg+0x2f/0x50 [ 842.607576] ? __sys_sendmmsg+0x330/0x330 [ 842.611798] do_syscall_64+0x1d5/0x640 [ 842.615695] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 842.620893] RIP: 0033:0x45c479 [ 842.624101] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 842.631821] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 842.639098] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 842.646375] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 842.653786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 842.661156] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000020 08:20:16 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:16 executing program 2 (fault-call:7 fault-nth:33): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:16 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000906000/0x6000)=nil, 0x6000}, 0x3}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:16 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x2ec, 0x0, 0x81, &(0x7f0000ffc000/0x1000)=nil, 0x61}) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 844.441744] FAULT_INJECTION: forcing a failure. [ 844.441744] name failslab, interval 1, probability 0, space 0, times 0 [ 844.455839] CPU: 0 PID: 31592 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 844.463837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.473349] Call Trace: [ 844.475934] dump_stack+0x13e/0x194 [ 844.479562] should_fail.cold+0x10a/0x14b [ 844.483705] should_failslab+0xd6/0x130 [ 844.488104] kmem_cache_alloc_node+0x288/0x7a0 [ 844.492737] ? find_held_lock+0x2d/0x110 [ 844.496790] ? lock_sock_nested+0x98/0x100 [ 844.501011] __alloc_skb+0x9a/0x4c0 [ 844.504620] ? skb_trim+0x160/0x160 [ 844.508230] ? mark_held_locks+0xa6/0xf0 [ 844.512277] sock_wmalloc+0xa5/0xf0 [ 844.515891] pppoe_sendmsg+0x269/0x710 [ 844.519768] ? pppoe_getname+0x130/0x130 [ 844.524083] ? security_socket_sendmsg+0x83/0xb0 [ 844.528898] ? pppoe_getname+0x130/0x130 [ 844.532947] sock_sendmsg+0xc5/0x100 [ 844.536698] ___sys_sendmsg+0x349/0x840 [ 844.540744] ? trace_hardirqs_on+0x10/0x10 [ 844.544981] ? copy_msghdr_from_user+0x380/0x380 [ 844.549782] ? trace_hardirqs_on+0x10/0x10 [ 844.553999] ? find_held_lock+0x2d/0x110 [ 844.558045] ? __fget+0x201/0x360 [ 844.561481] ? save_trace+0x290/0x290 [ 844.565320] ? find_held_lock+0x2d/0x110 [ 844.569400] ? __might_fault+0x104/0x1b0 [ 844.573466] __sys_sendmmsg+0x129/0x330 [ 844.577443] ? SyS_sendmsg+0x40/0x40 [ 844.581151] ? SyS_write+0x1b7/0x210 [ 844.584864] ? __mutex_unlock_slowpath+0x75/0x780 [ 844.589699] ? wait_for_completion+0x390/0x390 [ 844.594278] ? vfs_write+0xff/0x4e0 [ 844.597911] ? fput+0xb/0x140 [ 844.601012] ? SyS_write+0x14d/0x210 [ 844.604755] ? SyS_read+0x210/0x210 [ 844.608383] SyS_sendmmsg+0x2f/0x50 [ 844.612009] ? __sys_sendmmsg+0x330/0x330 [ 844.616164] do_syscall_64+0x1d5/0x640 [ 844.620061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 844.625245] RIP: 0033:0x45c479 [ 844.628432] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000080)=[{}, {&(0x7f0000000040)=""/6, 0x6}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/62, 0x3e}], 0x3, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x8000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000003c0)={{0x80, 0x3f}, 0x0, 0x101, 0x3, {0x1f}, 0xf3, 0x1}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000340)={r2, 0x6bbc, 0xffff}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:17 executing program 2 (fault-call:7 fault-nth:34): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 844.636137] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 844.643395] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 844.650671] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 844.657945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 844.665240] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000021 [ 844.741027] FAULT_INJECTION: forcing a failure. [ 844.741027] name failslab, interval 1, probability 0, space 0, times 0 [ 844.757638] CPU: 0 PID: 31607 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 844.765644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.775009] Call Trace: [ 844.777619] dump_stack+0x13e/0x194 [ 844.781277] should_fail.cold+0x10a/0x14b [ 844.785450] should_failslab+0xd6/0x130 [ 844.789462] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 844.794760] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 844.800234] ? __alloc_skb+0x9a/0x4c0 [ 844.804052] __kmalloc_node_track_caller+0x38/0x70 [ 844.809002] __kmalloc_reserve.isra.0+0x35/0xd0 [ 844.813688] __alloc_skb+0xca/0x4c0 [ 844.817412] ? skb_trim+0x160/0x160 [ 844.821060] ? mark_held_locks+0xa6/0xf0 [ 844.825133] sock_wmalloc+0xa5/0xf0 [ 844.828772] pppoe_sendmsg+0x269/0x710 [ 844.832671] ? pppoe_getname+0x130/0x130 [ 844.836743] ? security_socket_sendmsg+0x83/0xb0 [ 844.841513] ? pppoe_getname+0x130/0x130 [ 844.845591] sock_sendmsg+0xc5/0x100 [ 844.849328] ___sys_sendmsg+0x349/0x840 [ 844.853327] ? trace_hardirqs_on+0x10/0x10 [ 844.857577] ? copy_msghdr_from_user+0x380/0x380 [ 844.862360] ? trace_hardirqs_on+0x10/0x10 [ 844.866703] ? find_held_lock+0x2d/0x110 [ 844.870781] ? __fget+0x201/0x360 [ 844.874408] ? save_trace+0x290/0x290 [ 844.878224] ? find_held_lock+0x2d/0x110 [ 844.882409] ? __might_fault+0x104/0x1b0 [ 844.887195] __sys_sendmmsg+0x129/0x330 08:20:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400400, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x1c1201, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r2, r4}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 844.891195] ? SyS_sendmsg+0x40/0x40 [ 844.894943] ? SyS_write+0x1b7/0x210 [ 844.898682] ? __mutex_unlock_slowpath+0x75/0x780 [ 844.903545] ? wait_for_completion+0x390/0x390 [ 844.908142] ? vfs_write+0xff/0x4e0 [ 844.911778] ? fput+0xb/0x140 [ 844.914896] ? SyS_write+0x14d/0x210 [ 844.919059] ? SyS_read+0x210/0x210 [ 844.922695] SyS_sendmmsg+0x2f/0x50 [ 844.926335] ? __sys_sendmmsg+0x330/0x330 [ 844.930497] do_syscall_64+0x1d5/0x640 [ 844.934503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 844.939805] RIP: 0033:0x45c479 [ 844.943167] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.951651] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 844.959030] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 844.966300] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 844.973785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 844.981057] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000022 [ 844.987690] ptrace attach of "/root/syz-executor.1"[31612] was attempted by "/root/syz-executor.1"[31613] 08:20:17 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:17 executing program 2 (fault-call:7 fault-nth:35): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:17 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:17 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) r8 = gettid() ptrace$setopts(0x4206, r8, 0x0, 0x0) tkill(r8, 0x3c) ptrace$cont(0x18, r8, 0x0, 0x0) ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r8, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000000)='fdinfo\x00') setsockopt$CAIFSO_REQ_PARAM(r9, 0x116, 0x80, &(0x7f0000000140)="74215999249cd3f5132b9953daaad70411ed319d63b2cffffb13fc62b035d3226191dd45a6594534a0fb42b1b6afc9ecfe0a68db32162b0f589db14fddd816a41ed6e3dfc8cd510659ae66c016f503bd529fa6185133acb353dc1b8de302d982d52afd26144d4d1116a70585ad5d770c6f2be5a60f5c71226b55fc43873d9d4df90977720352951838c63c37558d94fbccb4dfa25bb24bd1bd2fdf1f24ad330ecc70a1e71290cb016430b22a7242fad7dc68b7c883763105e49e29aa36bd34004b6d62f7a276ab932686ec5962c70c614f1e9f7261643626b075e7a39cd52d86a96fc274f19fe44fa820b4a5631921", 0xef) ioperm(0x80000001, 0x3, 0xcd8f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 845.154758] FAULT_INJECTION: forcing a failure. [ 845.154758] name failslab, interval 1, probability 0, space 0, times 0 [ 845.166080] CPU: 1 PID: 31623 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 845.173966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.183325] Call Trace: [ 845.185918] dump_stack+0x13e/0x194 [ 845.189551] should_fail.cold+0x10a/0x14b [ 845.193718] should_failslab+0xd6/0x130 [ 845.197689] kmem_cache_alloc+0x44/0x770 [ 845.201759] ? __lock_acquire+0x5f7/0x4620 [ 845.205986] ? br_allowed_egress+0x3c2/0x6d0 [ 845.210395] skb_clone+0x11c/0x310 [ 845.214063] deliver_clone+0x3f/0xb0 [ 845.217779] br_flood+0x3d2/0x550 [ 845.221234] br_dev_xmit+0x8b5/0xd20 [ 845.224989] ? br_poll_controller+0x10/0x10 [ 845.229576] dev_hard_start_xmit+0x186/0x890 [ 845.233987] __dev_queue_xmit+0x1d91/0x25c0 [ 845.238332] ? find_held_lock+0x2d/0x110 [ 845.244488] ? netdev_pick_tx+0x2e0/0x2e0 [ 845.248665] ? iov_iter_advance+0x8a/0xc70 [ 845.252933] ? memcpy+0x35/0x50 [ 845.256333] ? pppoe_sendmsg+0x5c1/0x710 [ 845.260457] pppoe_sendmsg+0x5c1/0x710 [ 845.264358] ? ether_setup+0x2d0/0x2d0 [ 845.268257] ? pppoe_getname+0x130/0x130 [ 845.272325] ? security_socket_sendmsg+0x83/0xb0 [ 845.277098] ? pppoe_getname+0x130/0x130 [ 845.281171] sock_sendmsg+0xc5/0x100 [ 845.284897] ___sys_sendmsg+0x349/0x840 [ 845.288969] ? trace_hardirqs_on+0x10/0x10 [ 845.293217] ? copy_msghdr_from_user+0x380/0x380 [ 845.297999] ? trace_hardirqs_on+0x10/0x10 [ 845.302243] ? find_held_lock+0x2d/0x110 [ 845.306312] ? __fget+0x201/0x360 [ 845.309816] ? save_trace+0x290/0x290 [ 845.313804] ? find_held_lock+0x2d/0x110 [ 845.317929] ? __might_fault+0x104/0x1b0 [ 845.322367] __sys_sendmmsg+0x129/0x330 [ 845.326581] ? SyS_sendmsg+0x40/0x40 [ 845.330343] ? SyS_write+0x1b7/0x210 [ 845.334075] ? __mutex_unlock_slowpath+0x75/0x780 [ 845.338930] ? wait_for_completion+0x390/0x390 [ 845.343514] ? vfs_write+0xff/0x4e0 [ 845.347154] ? fput+0xb/0x140 [ 845.350346] ? SyS_write+0x14d/0x210 [ 845.354058] ? SyS_read+0x210/0x210 [ 845.357687] SyS_sendmmsg+0x2f/0x50 [ 845.361315] ? __sys_sendmmsg+0x330/0x330 [ 845.365478] do_syscall_64+0x1d5/0x640 [ 845.369375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 845.374580] RIP: 0033:0x45c479 [ 845.377771] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 845.385497] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 845.392773] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 845.400062] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 845.407496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 845.414869] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000023 [ 845.924796] NOHZ: local_softirq_pending 08 [ 845.929112] NOHZ: local_softirq_pending 08 08:20:20 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:20 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="ff04", 0x12) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x1e4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffffb5, 0x60, 0x0, 0xffffffffffffff8a) wait4(0x0, 0x0, 0x80000000, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$peeksig(0x4209, r3, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0xa}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d09, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x408040, 0x0) 08:20:20 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) 08:20:20 executing program 2 (fault-call:7 fault-nth:36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 847.463828] FAULT_INJECTION: forcing a failure. [ 847.463828] name failslab, interval 1, probability 0, space 0, times 0 [ 847.487988] CPU: 0 PID: 31638 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 847.495925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.505309] Call Trace: [ 847.507914] dump_stack+0x13e/0x194 [ 847.511565] should_fail.cold+0x10a/0x14b [ 847.515851] should_failslab+0xd6/0x130 [ 847.519968] kmem_cache_alloc_node+0x288/0x7a0 [ 847.524565] ? find_held_lock+0x2d/0x110 [ 847.528627] ? lock_sock_nested+0x98/0x100 [ 847.533004] __alloc_skb+0x9a/0x4c0 [ 847.536763] ? skb_trim+0x160/0x160 [ 847.540397] ? mark_held_locks+0xa6/0xf0 [ 847.544496] sock_wmalloc+0xa5/0xf0 [ 847.548139] pppoe_sendmsg+0x269/0x710 [ 847.552046] ? pppoe_getname+0x130/0x130 [ 847.556145] ? security_socket_sendmsg+0x83/0xb0 [ 847.560948] ? pppoe_getname+0x130/0x130 [ 847.565029] sock_sendmsg+0xc5/0x100 [ 847.568767] ___sys_sendmsg+0x349/0x840 [ 847.573706] ? trace_hardirqs_on+0x10/0x10 [ 847.578056] ? copy_msghdr_from_user+0x380/0x380 [ 847.582915] ? trace_hardirqs_on+0x10/0x10 [ 847.587162] ? find_held_lock+0x2d/0x110 [ 847.591506] ? __fget+0x201/0x360 [ 847.594972] ? save_trace+0x290/0x290 [ 847.599108] ? find_held_lock+0x2d/0x110 [ 847.603216] ? __might_fault+0x104/0x1b0 [ 847.607310] __sys_sendmmsg+0x129/0x330 [ 847.611298] ? SyS_sendmsg+0x40/0x40 [ 847.615019] ? SyS_write+0x1b7/0x210 [ 847.618767] ? __mutex_unlock_slowpath+0x75/0x780 [ 847.623642] ? wait_for_completion+0x390/0x390 [ 847.628257] ? vfs_write+0xff/0x4e0 [ 847.632090] ? fput+0xb/0x140 [ 847.635240] ? SyS_write+0x14d/0x210 [ 847.638974] ? SyS_read+0x210/0x210 [ 847.642763] SyS_sendmmsg+0x2f/0x50 [ 847.646580] ? __sys_sendmmsg+0x330/0x330 [ 847.650731] do_syscall_64+0x1d5/0x640 [ 847.654636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 847.659887] RIP: 0033:0x45c479 08:20:20 executing program 2 (fault-call:7 fault-nth:37): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:20 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) r3 = semget(0x0, 0x2, 0x14) semctl$SEM_INFO(r3, 0x4, 0x13, &(0x7f0000000000)=""/3) ptrace$cont(0x18, r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0xffffffffffffff89) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000fcdbdf25040000002600070073797374656d5f753a6f626a6563745f723a76346c5f6465766963655f743a7330000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0xee00) ioprio_get$uid(0x0, r9) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r11 = dup3(r10, 0xffffffffffffffff, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="980029000900000005002a1200"/30], 0x24}}, 0x40804) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 847.663071] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 847.670829] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 847.678235] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 847.685621] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 847.692917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 847.700182] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000024 08:20:20 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x20, r1, 0x0, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x40, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0800000000000000000000000100000000008ace91d85e9e76703dfb1bafc9fd2c940000", @ANYRES32=r6, @ANYBLOB="0000ff030000000000001000"], 0x24}}, 0x44800) r7 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000080)=0x3) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x488000, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, &(0x7f0000000040)=0x5) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000140)=0xffffffda) ptrace$cont(0x9, r1, 0x0, 0x0) [ 847.751433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=31655 comm=syz-executor.1 [ 847.763779] FAULT_INJECTION: forcing a failure. [ 847.763779] name failslab, interval 1, probability 0, space 0, times 0 [ 847.779545] CPU: 1 PID: 31656 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 847.787472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.796936] Call Trace: [ 847.799544] dump_stack+0x13e/0x194 [ 847.803197] should_fail.cold+0x10a/0x14b [ 847.807364] should_failslab+0xd6/0x130 [ 847.811445] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 847.816758] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 847.822390] ? __alloc_skb+0x9a/0x4c0 [ 847.826198] __kmalloc_node_track_caller+0x38/0x70 [ 847.831158] __kmalloc_reserve.isra.0+0x35/0xd0 [ 847.835838] __alloc_skb+0xca/0x4c0 [ 847.839465] ? skb_trim+0x160/0x160 [ 847.843104] ? mark_held_locks+0xa6/0xf0 [ 847.847174] sock_wmalloc+0xa5/0xf0 [ 847.850962] pppoe_sendmsg+0x269/0x710 [ 847.854949] ? pppoe_getname+0x130/0x130 [ 847.859367] ? security_socket_sendmsg+0x83/0xb0 [ 847.864125] ? pppoe_getname+0x130/0x130 [ 847.868181] sock_sendmsg+0xc5/0x100 [ 847.871985] ___sys_sendmsg+0x349/0x840 [ 847.875957] ? trace_hardirqs_on+0x10/0x10 [ 847.880198] ? copy_msghdr_from_user+0x380/0x380 [ 847.884981] ? trace_hardirqs_on+0x10/0x10 [ 847.889224] ? find_held_lock+0x2d/0x110 [ 847.893304] ? __fget+0x201/0x360 [ 847.896836] ? save_trace+0x290/0x290 [ 847.900652] ? find_held_lock+0x2d/0x110 [ 847.904713] ? __might_fault+0x104/0x1b0 [ 847.908829] __sys_sendmmsg+0x129/0x330 [ 847.912801] ? SyS_sendmsg+0x40/0x40 [ 847.916512] ? SyS_write+0x1b7/0x210 [ 847.920240] ? __mutex_unlock_slowpath+0x75/0x780 [ 847.925091] ? wait_for_completion+0x390/0x390 [ 847.929779] ? vfs_write+0xff/0x4e0 [ 847.933397] ? fput+0xb/0x140 [ 847.936539] ? SyS_write+0x14d/0x210 [ 847.940248] ? SyS_read+0x210/0x210 [ 847.943939] SyS_sendmmsg+0x2f/0x50 [ 847.947556] ? __sys_sendmmsg+0x330/0x330 [ 847.951745] do_syscall_64+0x1d5/0x640 [ 847.955638] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 847.960825] RIP: 0033:0x45c479 [ 847.964033] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 847.971729] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 847.978988] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 847.986247] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 847.993845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 848.001245] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000025 08:20:20 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:20 executing program 2 (fault-call:7 fault-nth:38): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:20 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 848.175781] FAULT_INJECTION: forcing a failure. [ 848.175781] name failslab, interval 1, probability 0, space 0, times 0 [ 848.187115] CPU: 1 PID: 31668 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 848.195083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.204437] Call Trace: [ 848.207038] dump_stack+0x13e/0x194 [ 848.210678] should_fail.cold+0x10a/0x14b [ 848.214844] should_failslab+0xd6/0x130 [ 848.218815] kmem_cache_alloc+0x44/0x770 [ 848.222883] ? __lock_acquire+0x5f7/0x4620 [ 848.227126] ? br_allowed_egress+0x3c2/0x6d0 [ 848.232264] skb_clone+0x11c/0x310 [ 848.235810] deliver_clone+0x3f/0xb0 [ 848.239523] br_flood+0x3d2/0x550 [ 848.244255] br_dev_xmit+0x8b5/0xd20 [ 848.247984] ? br_poll_controller+0x10/0x10 [ 848.252317] dev_hard_start_xmit+0x186/0x890 [ 848.256745] __dev_queue_xmit+0x1d91/0x25c0 [ 848.261183] ? find_held_lock+0x2d/0x110 [ 848.265257] ? netdev_pick_tx+0x2e0/0x2e0 [ 848.269394] ? iov_iter_advance+0x8a/0xc70 [ 848.273631] ? memcpy+0x35/0x50 [ 848.276906] ? pppoe_sendmsg+0x5c1/0x710 [ 848.280965] pppoe_sendmsg+0x5c1/0x710 [ 848.284865] ? ether_setup+0x2d0/0x2d0 [ 848.288856] ? pppoe_getname+0x130/0x130 [ 848.290211] FAULT_FLAG_ALLOW_RETRY missing 30 [ 848.293123] ? security_socket_sendmsg+0x83/0xb0 [ 848.293137] ? pppoe_getname+0x130/0x130 [ 848.293147] sock_sendmsg+0xc5/0x100 [ 848.293158] ___sys_sendmsg+0x349/0x840 [ 848.293227] ? finish_task_switch+0x14d/0x620 [ 848.293238] ? copy_msghdr_from_user+0x380/0x380 [ 848.323645] ? trace_hardirqs_on+0x10/0x10 [ 848.328668] ? retint_kernel+0x2d/0x2d [ 848.332560] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 848.337581] ? save_trace+0x290/0x290 [ 848.341397] ? find_held_lock+0x2d/0x110 [ 848.345463] ? __might_fault+0x104/0x1b0 [ 848.349539] __sys_sendmmsg+0x129/0x330 [ 848.353553] ? SyS_sendmsg+0x40/0x40 [ 848.357846] ? SyS_write+0x1b7/0x210 [ 848.361577] ? __mutex_unlock_slowpath+0x75/0x780 [ 848.366422] ? wait_for_completion+0x390/0x390 [ 848.371014] ? vfs_write+0xff/0x4e0 [ 848.374994] ? fput+0xb/0x140 [ 848.378090] ? SyS_write+0x14d/0x210 [ 848.381809] ? SyS_read+0x210/0x210 [ 848.385453] SyS_sendmmsg+0x2f/0x50 [ 848.389078] ? __sys_sendmmsg+0x330/0x330 [ 848.393235] do_syscall_64+0x1d5/0x640 [ 848.397192] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 848.402390] RIP: 0033:0x45c479 [ 848.405576] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 848.413277] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 848.420555] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 848.427824] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 848.435101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 848.442460] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000026 [ 848.449751] CPU: 0 PID: 31648 Comm: syz-executor.3 Not tainted 4.14.172-syzkaller #0 [ 848.457727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.467093] Call Trace: [ 848.469693] dump_stack+0x13e/0x194 [ 848.473688] handle_userfault.cold+0x3b/0x4b [ 848.478363] ? userfaultfd_ioctl+0x2f80/0x2f80 [ 848.482937] ? trace_hardirqs_on+0x10/0x10 [ 848.487173] ? find_held_lock+0x2d/0x110 [ 848.491221] ? __handle_mm_fault+0x29b8/0x3280 [ 848.495804] ? lock_acquire+0x170/0x3f0 [ 848.499863] ? lock_downgrade+0x6e0/0x6e0 [ 848.504044] __handle_mm_fault+0x29c7/0x3280 [ 848.508440] ? copy_page_range+0x1d70/0x1d70 [ 848.512887] ? find_held_lock+0x2d/0x110 [ 848.516951] handle_mm_fault+0x288/0x7a0 [ 848.521040] __do_page_fault+0x4bc/0xb40 [ 848.525129] ? vmalloc_fault+0xdf0/0xdf0 [ 848.529279] ? do_page_fault+0x60/0x4f2 [ 848.533254] page_fault+0x25/0x50 [ 848.536780] RIP: 0010:iov_iter_fault_in_readable+0x2f0/0x390 [ 848.542564] RSP: 0018:ffff88805ae07a50 EFLAGS: 00010246 [ 848.547922] RAX: 0000000000000000 RBX: 00000000000003ff RCX: 000000002090a1ff [ 848.555270] RDX: 0000000000040000 RSI: ffffffff82fbce23 RDI: ffff88805ae07d50 [ 848.563310] RBP: 1ffff1100b5c0f4b R08: 0000000000000001 R09: 0000000000000003 [ 848.570619] R10: ffff88804f92aab8 R11: ffff88804f92a1c0 R12: 0000000000001000 [ 848.577886] R13: 0000000000001000 R14: ffff88805ae07d48 R15: 0000000000000000 [ 848.585265] ? iov_iter_fault_in_readable+0x2e3/0x390 [ 848.590463] ? _copy_from_iter_flushcache+0x9c0/0x9c0 [ 848.595674] ? balance_dirty_pages_ratelimited+0x8a9/0x17e0 [ 848.601386] generic_perform_write+0x14a/0x420 [ 848.605960] ? page_endio+0x520/0x520 [ 848.609760] ? current_time+0xb0/0xb0 [ 848.613559] ? ext4_file_write_iter+0x1d5/0xdc0 [ 848.618215] __generic_file_write_iter+0x227/0x590 [ 848.623172] ext4_file_write_iter+0x281/0xdc0 [ 848.627785] ? ext4_file_mmap+0x2b0/0x2b0 [ 848.631933] ? trace_hardirqs_on+0x10/0x10 [ 848.636178] ? iov_iter_init+0xa6/0x1c0 [ 848.640265] __vfs_write+0x44e/0x630 [ 848.643979] ? kernel_read+0x110/0x110 [ 848.647871] ? rcu_read_lock_sched_held+0x10a/0x130 [ 848.652913] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 848.657661] vfs_write+0x192/0x4e0 [ 848.661203] SyS_write+0xf2/0x210 [ 848.664639] ? SyS_read+0x210/0x210 [ 848.668260] ? SyS_clock_settime+0x1a0/0x1a0 [ 848.672653] ? do_syscall_64+0x4c/0x640 [ 848.676606] ? SyS_read+0x210/0x210 [ 848.680213] do_syscall_64+0x1d5/0x640 [ 848.684084] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 848.689266] RIP: 0033:0x45c479 [ 848.692434] RSP: 002b:00007fc8be0dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 848.700132] RAX: ffffffffffffffda RBX: 00007fc8be0df6d4 RCX: 000000000045c479 [ 848.707896] RDX: 00000000175d900f RSI: 0000000020000200 RDI: 0000000000000004 [ 848.715152] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 08:20:21 executing program 2 (fault-call:7 fault-nth:39): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 848.722492] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 848.729777] R13: 0000000000000ce2 R14: 00000000004cec77 R15: 000000000076bfcc [ 848.768105] FAULT_INJECTION: forcing a failure. 08:20:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[&(0x7f0000000180)="f4093909c55f656b35d36013a413a77b909aeb8e6cd8d5bcb8fb36b4bf516ff90db14baed5845a16bf6a041925a2d2ee7c4042c3c64ca6bbf2f0422f3f49142a46692af7630afc5d7c764408db485b100c759eb5005c6f91ec6b4eabf7a8af3bee3ac40d55ac42040c5b4431ea98a6", &(0x7f0000000240)="c696287e7dafe216c48d207a72b7c19421f851dbecba349c1f79c0c1684a2e4a344e292658dfbd10a5bcadcf4b9b0506e3c7748cb73850dfeca5ac2ab45c30772a3834ebd30b58ba54c7c19331d02bc1b65deb8f1f11f33ca11591beb30850f997991112d34fa7f7d5c43910ed8fc40cdfeaf030ce6e23b6c73ecb917e33c343f7118bf733a755", &(0x7f00000003c0)="b39efd9ef8b0dedc2b6cf4b83f9e9717d5d9aa6edb50e353ee2b6e02616d490e99cdb8c29d170f50aa2a91bdab59d67445a2f5a7e7c2685f9c443c9bd24ac4e387bf31d45799846196fe28ced1e1f9e67d3ab2aa2ea7671011d927231f0ec273c04cc33480dd7c6b7ff08d5e3105b86cea36c450490083d38f1c5763fa7ee0d26d39a34a9fc7c13babc1965a76803a1fe2266871a2dc642b39d504b313c19c82090536e3d449ee05fc8b17fa1902bb323d0573550da483b0b679f00fe7b9de789fa20f6cf20e60fea3b51950073973632940b97a70d1660d2caafa1735671a2a78cc535b12a22fe95ed1eb2844721c", &(0x7f00000004c0)="0498ded62d6c0ee1c8b75c18c93df03eadbe9eb9e054b95d45bf5fdb58bc0dcbd236fdd1b580559ce33084207d98bda5bc015834d0cb808f2ec09a1d654b4511d9b0193a40294b81580d10dbc66fcb8b52ca60eba38c6a06a2094d950279d58d0be748e3003dd2b90950849bd8412acaa9a6b468b12d7077455df67f22678767c854cf6b6ce84354ac465968ba78be5a2fd20195ae5958e93317cefe9705744027208ae18b8887517d894ab8af7a69f751afdbccd3c8363633"]}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000100)={0x6, @broadcast}) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 848.768105] name failslab, interval 1, probability 0, space 0, times 0 [ 848.788555] CPU: 0 PID: 31676 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 848.797092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.806456] Call Trace: [ 848.809060] dump_stack+0x13e/0x194 [ 848.812693] should_fail.cold+0x10a/0x14b [ 848.816855] should_failslab+0xd6/0x130 [ 848.820846] kmem_cache_alloc_node+0x288/0x7a0 [ 848.825439] ? find_held_lock+0x2d/0x110 [ 848.829512] ? lock_sock_nested+0x98/0x100 [ 848.833768] __alloc_skb+0x9a/0x4c0 [ 848.837408] ? skb_trim+0x160/0x160 [ 848.841049] ? mark_held_locks+0xa6/0xf0 [ 848.845117] sock_wmalloc+0xa5/0xf0 [ 848.849512] pppoe_sendmsg+0x269/0x710 [ 848.853442] ? pppoe_getname+0x130/0x130 [ 848.857526] ? security_socket_sendmsg+0x83/0xb0 [ 848.862284] ? pppoe_getname+0x130/0x130 [ 848.866348] sock_sendmsg+0xc5/0x100 [ 848.870064] ___sys_sendmsg+0x349/0x840 [ 848.874042] ? trace_hardirqs_on+0x10/0x10 [ 848.878464] ? copy_msghdr_from_user+0x380/0x380 [ 848.883241] ? trace_hardirqs_on+0x10/0x10 [ 848.887493] ? find_held_lock+0x2d/0x110 [ 848.891569] ? __fget+0x201/0x360 [ 848.895030] ? save_trace+0x290/0x290 [ 848.898841] ? find_held_lock+0x2d/0x110 [ 848.902921] ? __might_fault+0x104/0x1b0 [ 848.907008] __sys_sendmmsg+0x129/0x330 [ 848.911093] ? SyS_sendmsg+0x40/0x40 [ 848.914811] ? SyS_write+0x1b7/0x210 [ 848.918549] ? __mutex_unlock_slowpath+0x75/0x780 [ 848.923405] ? wait_for_completion+0x390/0x390 [ 848.928082] ? vfs_write+0xff/0x4e0 [ 848.931723] ? fput+0xb/0x140 [ 848.934830] ? SyS_write+0x14d/0x210 [ 848.938548] ? SyS_read+0x210/0x210 [ 848.942181] SyS_sendmmsg+0x2f/0x50 [ 848.945805] ? __sys_sendmmsg+0x330/0x330 [ 848.949961] do_syscall_64+0x1d5/0x640 [ 848.953856] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 848.959043] RIP: 0033:0x45c479 [ 848.962231] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 848.969937] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 848.977275] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 848.984841] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 848.992257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 848.999616] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000027 08:20:23 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:23 executing program 2 (fault-call:7 fault-nth:40): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:23 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x8, 0x181000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$rose(r4, 0x104, 0x3, &(0x7f0000000180)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/247) read(r0, &(0x7f00000000c0)=""/100, 0x64) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) r9 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000000040)=""/50) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r11) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r14, 0x202002) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0xee00) keyctl$chown(0x4, r14, r16, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r18) r19 = getpid() ptrace(0x10, r19) r20 = getpid() rt_tgsigqueueinfo(r20, r20, 0x16, &(0x7f00000000c0)) ptrace(0x10, r20) ptrace$setregs(0xf, r20, 0x0, 0x0) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000280)={{0x3, 0x0, r11, r13, r18, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r19, r20, 0x3}) setgroups(0x2, &(0x7f0000000580)=[0x0, r11]) r21 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r21, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) mount$fuse(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000340)='fuse\x00', 0x800000, &(0x7f00000005c0)=ANY=[@ANYBLOB="21ec7c707e8f55abcd9f49fcac00919c16000000", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r8, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRESDEC=r21], @ANYRESDEC=r11, @ANYBLOB=',max_read=0x0000000000000085,seclabel,smackfsroot=,\x00']) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 850.527121] FAULT_INJECTION: forcing a failure. [ 850.527121] name failslab, interval 1, probability 0, space 0, times 0 [ 850.544570] CPU: 1 PID: 31687 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 850.552509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.561885] Call Trace: [ 850.564482] dump_stack+0x13e/0x194 [ 850.568405] should_fail.cold+0x10a/0x14b [ 850.572567] should_failslab+0xd6/0x130 [ 850.576560] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 850.581672] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 850.587138] ? __alloc_skb+0x9a/0x4c0 [ 850.591062] __kmalloc_node_track_caller+0x38/0x70 [ 850.595982] __kmalloc_reserve.isra.0+0x35/0xd0 [ 850.600641] __alloc_skb+0xca/0x4c0 [ 850.604275] ? skb_trim+0x160/0x160 [ 850.607892] ? mark_held_locks+0xa6/0xf0 [ 850.612039] sock_wmalloc+0xa5/0xf0 [ 850.615698] pppoe_sendmsg+0x269/0x710 [ 850.619713] ? pppoe_getname+0x130/0x130 [ 850.623864] ? security_socket_sendmsg+0x83/0xb0 [ 850.628658] ? pppoe_getname+0x130/0x130 [ 850.632719] sock_sendmsg+0xc5/0x100 [ 850.636431] ___sys_sendmsg+0x349/0x840 [ 850.640413] ? trace_hardirqs_on+0x10/0x10 [ 850.644659] ? copy_msghdr_from_user+0x380/0x380 [ 850.649418] ? trace_hardirqs_on+0x10/0x10 [ 850.653658] ? find_held_lock+0x2d/0x110 [ 850.657723] ? __fget+0x201/0x360 [ 850.661268] ? save_trace+0x290/0x290 [ 850.665062] ? find_held_lock+0x2d/0x110 [ 850.669125] ? __might_fault+0x104/0x1b0 [ 850.673379] __sys_sendmmsg+0x129/0x330 [ 850.677356] ? SyS_sendmsg+0x40/0x40 [ 850.681219] ? SyS_write+0x1b7/0x210 [ 850.684936] ? __mutex_unlock_slowpath+0x75/0x780 [ 850.689956] ? wait_for_completion+0x390/0x390 [ 850.694545] ? vfs_write+0xff/0x4e0 [ 850.698182] ? fput+0xb/0x140 [ 850.701375] ? SyS_write+0x14d/0x210 [ 850.705093] ? SyS_read+0x210/0x210 [ 850.708727] SyS_sendmmsg+0x2f/0x50 [ 850.712362] ? __sys_sendmmsg+0x330/0x330 [ 850.716530] do_syscall_64+0x1d5/0x640 [ 850.720694] entry_SYSCALL_64_after_hwframe+0x42/0xb7 08:20:23 executing program 2 (fault-call:7 fault-nth:41): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 850.725918] RIP: 0033:0x45c479 [ 850.729351] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 850.737187] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 850.747496] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 850.754890] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 850.762160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 850.769551] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000028 08:20:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x4, 0x4, 0x3, 0xc6f0}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 850.860991] FAULT_INJECTION: forcing a failure. [ 850.860991] name failslab, interval 1, probability 0, space 0, times 0 [ 850.872336] CPU: 0 PID: 31698 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 850.880228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 850.889696] Call Trace: [ 850.892313] dump_stack+0x13e/0x194 [ 850.895992] should_fail.cold+0x10a/0x14b [ 850.900159] should_failslab+0xd6/0x130 [ 850.904152] kmem_cache_alloc+0x44/0x770 08:20:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="00008914020481005dd2bbf57041b12400000000000000000000000000000000000000009a000000"], 0x28) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="f0ffffff18000000d19deff377c26637cc8b38859e0000000600000057d100000700000007000000d868eca73dcda8ce7a4019afaa0b8bc5667967ef6bdda7eaaaa64c7e366360aaf6903769dfbaedd1d12dc19eaf76c6144497b05e24f31f220220cddbbbadba532970c157884727fc7b0e995c26a84f6918685d02c74c9208e49d21bfd383a3e8c2b72ed5d66c3f89"]) ptrace$cont(0x9, r1, 0x0, 0x0) [ 850.908234] ? __lock_acquire+0x5f7/0x4620 [ 850.912483] ? br_allowed_egress+0x3c2/0x6d0 [ 850.916954] skb_clone+0x11c/0x310 [ 850.920559] deliver_clone+0x3f/0xb0 [ 850.924291] br_flood+0x3d2/0x550 [ 850.927755] br_dev_xmit+0x8b5/0xd20 [ 850.931474] ? br_poll_controller+0x10/0x10 [ 850.935936] dev_hard_start_xmit+0x186/0x890 [ 850.940358] __dev_queue_xmit+0x1d91/0x25c0 [ 850.944695] ? find_held_lock+0x2d/0x110 [ 850.948777] ? netdev_pick_tx+0x2e0/0x2e0 [ 850.952936] ? iov_iter_advance+0x8a/0xc70 [ 850.957194] ? memcpy+0x35/0x50 [ 850.960628] ? pppoe_sendmsg+0x5c1/0x710 [ 850.964705] pppoe_sendmsg+0x5c1/0x710 [ 850.968603] ? ether_setup+0x2d0/0x2d0 [ 850.972487] ? pppoe_getname+0x130/0x130 [ 850.976657] ? security_socket_sendmsg+0x83/0xb0 [ 850.982127] ? pppoe_getname+0x130/0x130 [ 850.986213] sock_sendmsg+0xc5/0x100 [ 850.990031] ___sys_sendmsg+0x349/0x840 [ 850.994024] ? trace_hardirqs_on+0x10/0x10 [ 850.998288] ? copy_msghdr_from_user+0x380/0x380 [ 851.003090] ? trace_hardirqs_on+0x10/0x10 [ 851.007494] ? find_held_lock+0x2d/0x110 08:20:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[]}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x4c, r8, 0x30, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x65}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x86}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) tkill(r1, 0x38) ptrace$cont(0x7, r1, 0x0, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@null=' \x00', 0x5}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 851.011655] ? __fget+0x201/0x360 [ 851.015247] ? save_trace+0x290/0x290 [ 851.019071] ? find_held_lock+0x2d/0x110 [ 851.023145] ? __might_fault+0x104/0x1b0 [ 851.027368] __sys_sendmmsg+0x129/0x330 [ 851.031745] ? SyS_sendmsg+0x40/0x40 [ 851.035574] ? SyS_write+0x1b7/0x210 [ 851.039292] ? __mutex_unlock_slowpath+0x75/0x780 [ 851.044142] ? wait_for_completion+0x390/0x390 [ 851.048750] ? vfs_write+0xff/0x4e0 [ 851.052870] ? fput+0xb/0x140 [ 851.055966] ? SyS_write+0x14d/0x210 [ 851.059774] ? SyS_read+0x210/0x210 [ 851.063532] SyS_sendmmsg+0x2f/0x50 [ 851.067162] ? __sys_sendmmsg+0x330/0x330 [ 851.072080] do_syscall_64+0x1d5/0x640 [ 851.076331] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 851.081523] RIP: 0033:0x45c479 [ 851.084704] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 851.092634] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 851.100152] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 851.107748] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 851.115015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 851.122286] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000029 08:20:23 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:23 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:23 executing program 2 (fault-call:7 fault-nth:42): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000080)={0x1, 0x4}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000018c0)={0x9, &(0x7f0000000140)=""/42, &(0x7f00000017c0)=[{0xb21e, 0xbd, 0xbff, &(0x7f0000000180)=""/189}, {0x81, 0xca, 0xce8f, &(0x7f0000000300)=""/202}, {0x7f, 0xc5, 0x8, &(0x7f0000000400)=""/197}, {0x200, 0x1000, 0xfffffff9, &(0x7f0000000500)=""/4096}, {0x3, 0xd5, 0x401, &(0x7f0000001500)=""/213}, {0x6, 0xba, 0x0, &(0x7f0000001600)=""/186}, {0x7fffffff, 0x73, 0x2, &(0x7f0000000240)=""/115}, {0xff, 0x95, 0x2, &(0x7f00000016c0)=""/149}, {0xf725, 0x27, 0x80, &(0x7f0000001780)=""/39}]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) [ 851.251928] FAULT_INJECTION: forcing a failure. [ 851.251928] name failslab, interval 1, probability 0, space 0, times 0 [ 851.265832] CPU: 1 PID: 31724 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 851.273877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.283244] Call Trace: [ 851.285849] dump_stack+0x13e/0x194 [ 851.289500] should_fail.cold+0x10a/0x14b [ 851.293672] should_failslab+0xd6/0x130 [ 851.297678] kmem_cache_alloc_node+0x288/0x7a0 08:20:23 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) socket$nl_audit(0x10, 0x3, 0x9) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x74, 0x7, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000040a010200000000d0d400000a00000a1400fc80080002406843df7508000140000000020c00048008000240522545d8094a80b0cda9d44759a3fb2ea38d"], 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x2004c891) [ 851.302295] ? find_held_lock+0x2d/0x110 [ 851.306481] ? lock_sock_nested+0x98/0x100 [ 851.310757] __alloc_skb+0x9a/0x4c0 [ 851.314468] ? skb_trim+0x160/0x160 [ 851.314733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pig=31731 comm=syz-executor.1 [ 851.318115] ? mark_held_locks+0xa6/0xf0 [ 851.318130] sock_wmalloc+0xa5/0xf0 [ 851.318146] pppoe_sendmsg+0x269/0x710 [ 851.318159] ? pppoe_getname+0x130/0x130 [ 851.318174] ? security_socket_sendmsg+0x83/0xb0 [ 851.351027] ? pppoe_getname+0x130/0x130 [ 851.355098] sock_sendmsg+0xc5/0x100 [ 851.358823] ___sys_sendmsg+0x349/0x840 [ 851.362810] ? trace_hardirqs_on+0x10/0x10 [ 851.367067] ? copy_msghdr_from_user+0x380/0x380 [ 851.372373] ? trace_hardirqs_on+0x10/0x10 [ 851.376630] ? find_held_lock+0x2d/0x110 [ 851.380880] ? __fget+0x201/0x360 [ 851.384350] ? save_trace+0x290/0x290 [ 851.388167] ? find_held_lock+0x2d/0x110 [ 851.392291] ? __might_fault+0x104/0x1b0 [ 851.396492] __sys_sendmmsg+0x129/0x330 [ 851.400487] ? SyS_sendmsg+0x40/0x40 [ 851.404219] ? SyS_write+0x1b7/0x210 [ 851.407974] ? __mutex_unlock_slowpath+0x75/0x780 [ 851.412921] ? wait_for_completion+0x390/0x390 [ 851.417503] ? vfs_write+0xff/0x4e0 [ 851.421237] ? fput+0xb/0x140 [ 851.424351] ? SyS_write+0x14d/0x210 [ 851.428069] ? SyS_read+0x210/0x210 [ 851.431700] SyS_sendmmsg+0x2f/0x50 [ 851.435341] ? __sys_sendmmsg+0x330/0x330 [ 851.439623] do_syscall_64+0x1d5/0x640 [ 851.443653] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 851.448918] RIP: 0033:0x45c479 [ 851.452101] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 851.459803] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 851.467077] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 851.474351] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 851.481963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 851.489492] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002a 08:20:26 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)={0x6, 0x7f, {0x0}, {r6}, 0x80000000, 0x7}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x0, 0x0, 0x5, 0x7, r7}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:26 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x2, {0x1, 0x2008, 0x2}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x10083, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:26 executing program 2 (fault-call:7 fault-nth:43): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 853.566374] FAULT_INJECTION: forcing a failure. [ 853.566374] name failslab, interval 1, probability 0, space 0, times 0 [ 853.585944] CPU: 0 PID: 31742 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 853.594049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.604056] Call Trace: [ 853.606692] dump_stack+0x13e/0x194 [ 853.610349] should_fail.cold+0x10a/0x14b [ 853.614520] should_failslab+0xd6/0x130 [ 853.618514] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 853.623763] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 853.629542] ? __alloc_skb+0x9a/0x4c0 [ 853.633366] __kmalloc_node_track_caller+0x38/0x70 [ 853.638911] __kmalloc_reserve.isra.0+0x35/0xd0 [ 853.644126] __alloc_skb+0xca/0x4c0 [ 853.647757] ? skb_trim+0x160/0x160 [ 853.651643] ? mark_held_locks+0xa6/0xf0 [ 853.655902] sock_wmalloc+0xa5/0xf0 [ 853.659542] pppoe_sendmsg+0x269/0x710 [ 853.663438] ? pppoe_getname+0x130/0x130 [ 853.667527] ? security_socket_sendmsg+0x83/0xb0 [ 853.672306] ? pppoe_getname+0x130/0x130 [ 853.676375] sock_sendmsg+0xc5/0x100 [ 853.680235] ___sys_sendmsg+0x349/0x840 [ 853.684216] ? trace_hardirqs_on+0x10/0x10 [ 853.688451] ? copy_msghdr_from_user+0x380/0x380 [ 853.693674] ? trace_hardirqs_on+0x10/0x10 [ 853.697915] ? find_held_lock+0x2d/0x110 [ 853.702514] ? __fget+0x201/0x360 [ 853.705986] ? save_trace+0x290/0x290 [ 853.709829] ? find_held_lock+0x2d/0x110 [ 853.713906] ? __might_fault+0x104/0x1b0 [ 853.718027] __sys_sendmmsg+0x129/0x330 [ 853.722008] ? SyS_sendmsg+0x40/0x40 [ 853.725730] ? SyS_write+0x1b7/0x210 [ 853.729601] ? __mutex_unlock_slowpath+0x75/0x780 [ 853.734451] ? wait_for_completion+0x390/0x390 [ 853.739031] ? vfs_write+0xff/0x4e0 [ 853.742787] ? fput+0xb/0x140 [ 853.745921] ? SyS_write+0x14d/0x210 [ 853.749917] ? SyS_read+0x210/0x210 [ 853.753567] SyS_sendmmsg+0x2f/0x50 [ 853.757305] ? __sys_sendmmsg+0x330/0x330 [ 853.761619] do_syscall_64+0x1d5/0x640 [ 853.765530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 853.770757] RIP: 0033:0x45c479 [ 853.773949] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.781670] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 853.789037] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 853.796536] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 853.803929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 08:20:26 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x4000, 0x6, {0x0, 0x2710}, {0x5, 0x8, 0x0, 0x3f, 0xf7, 0x5, "92eb43b8"}, 0xffff, 0x3, @userptr=0x5, 0x3, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000080)=0x4) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 853.811490] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002b 08:20:26 executing program 2 (fault-call:7 fault-nth:44): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 853.914822] ptrace attach of "/root/syz-executor.1"[31758] was attempted by "/root/syz-executor.1"[31761] [ 853.918452] FAULT_INJECTION: forcing a failure. [ 853.918452] name failslab, interval 1, probability 0, space 0, times 0 [ 853.936133] CPU: 0 PID: 31759 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 853.944174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 853.953540] Call Trace: [ 853.956147] dump_stack+0x13e/0x194 [ 853.959802] should_fail.cold+0x10a/0x14b [ 853.963970] should_failslab+0xd6/0x130 [ 853.968059] kmem_cache_alloc+0x44/0x770 [ 853.972128] ? __lock_acquire+0x5f7/0x4620 [ 853.976387] ? br_allowed_egress+0x3c2/0x6d0 [ 853.980813] skb_clone+0x11c/0x310 [ 853.984364] deliver_clone+0x3f/0xb0 [ 853.988113] br_flood+0x3d2/0x550 [ 853.991578] br_dev_xmit+0x8b5/0xd20 [ 853.995319] ? br_poll_controller+0x10/0x10 [ 853.999739] dev_hard_start_xmit+0x186/0x890 [ 854.004187] __dev_queue_xmit+0x1d91/0x25c0 [ 854.008521] ? find_held_lock+0x2d/0x110 [ 854.012880] ? netdev_pick_tx+0x2e0/0x2e0 [ 854.017041] ? iov_iter_advance+0x8a/0xc70 [ 854.021322] ? memcpy+0x35/0x50 [ 854.024602] ? pppoe_sendmsg+0x5c1/0x710 [ 854.028719] pppoe_sendmsg+0x5c1/0x710 [ 854.032714] ? ether_setup+0x2d0/0x2d0 [ 854.036608] ? pppoe_getname+0x130/0x130 [ 854.040685] ? security_socket_sendmsg+0x83/0xb0 [ 854.045445] ? pppoe_getname+0x130/0x130 [ 854.049526] sock_sendmsg+0xc5/0x100 [ 854.053235] ___sys_sendmsg+0x349/0x840 [ 854.057332] ? trace_hardirqs_on+0x10/0x10 [ 854.061628] ? copy_msghdr_from_user+0x380/0x380 [ 854.066411] ? trace_hardirqs_on+0x10/0x10 [ 854.070677] ? find_held_lock+0x2d/0x110 [ 854.074744] ? __fget+0x201/0x360 [ 854.078205] ? save_trace+0x290/0x290 [ 854.082006] ? find_held_lock+0x2d/0x110 [ 854.086127] ? __might_fault+0x104/0x1b0 [ 854.091314] __sys_sendmmsg+0x129/0x330 [ 854.095423] ? SyS_sendmsg+0x40/0x40 [ 854.099185] ? SyS_write+0x1b7/0x210 [ 854.103051] ? __mutex_unlock_slowpath+0x75/0x780 [ 854.107899] ? wait_for_completion+0x390/0x390 [ 854.112475] ? vfs_write+0xff/0x4e0 [ 854.116109] ? fput+0xb/0x140 [ 854.119214] ? SyS_write+0x14d/0x210 [ 854.123015] ? SyS_read+0x210/0x210 [ 854.126647] SyS_sendmmsg+0x2f/0x50 [ 854.130277] ? __sys_sendmmsg+0x330/0x330 [ 854.134429] do_syscall_64+0x1d5/0x640 [ 854.138765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 854.143948] RIP: 0033:0x45c479 [ 854.147130] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 854.154986] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 08:20:26 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:26 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 854.162471] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 854.169855] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 854.177235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 854.184701] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002c 08:20:26 executing program 2 (fault-call:7 fault-nth:45): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 854.283956] FAULT_INJECTION: forcing a failure. [ 854.283956] name failslab, interval 1, probability 0, space 0, times 0 [ 854.295945] CPU: 1 PID: 31774 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 854.303835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.313837] Call Trace: [ 854.316559] dump_stack+0x13e/0x194 [ 854.320312] should_fail.cold+0x10a/0x14b [ 854.324566] should_failslab+0xd6/0x130 [ 854.328673] kmem_cache_alloc_node+0x288/0x7a0 [ 854.333262] ? find_held_lock+0x2d/0x110 [ 854.337330] ? lock_sock_nested+0x98/0x100 [ 854.341577] __alloc_skb+0x9a/0x4c0 [ 854.345310] ? skb_trim+0x160/0x160 [ 854.348939] ? mark_held_locks+0xa6/0xf0 [ 854.353007] sock_wmalloc+0xa5/0xf0 [ 854.357772] pppoe_sendmsg+0x269/0x710 [ 854.361659] ? pppoe_getname+0x130/0x130 [ 854.365726] ? security_socket_sendmsg+0x83/0xb0 [ 854.370486] ? pppoe_getname+0x130/0x130 [ 854.374581] sock_sendmsg+0xc5/0x100 [ 854.378301] ___sys_sendmsg+0x349/0x840 [ 854.382355] ? trace_hardirqs_on+0x10/0x10 [ 854.386626] ? copy_msghdr_from_user+0x380/0x380 [ 854.391408] ? trace_hardirqs_on+0x10/0x10 [ 854.395643] ? find_held_lock+0x2d/0x110 [ 854.399899] ? __fget+0x201/0x360 [ 854.403365] ? save_trace+0x290/0x290 [ 854.407166] ? find_held_lock+0x2d/0x110 [ 854.411251] ? __might_fault+0x104/0x1b0 [ 854.419842] __sys_sendmmsg+0x129/0x330 [ 854.423818] ? SyS_sendmsg+0x40/0x40 [ 854.427683] ? SyS_write+0x1b7/0x210 [ 854.431419] ? __mutex_unlock_slowpath+0x75/0x780 [ 854.436271] ? wait_for_completion+0x390/0x390 [ 854.440844] ? vfs_write+0xff/0x4e0 [ 854.444480] ? fput+0xb/0x140 [ 854.447579] ? SyS_write+0x14d/0x210 [ 854.451287] ? SyS_read+0x210/0x210 [ 854.454914] SyS_sendmmsg+0x2f/0x50 [ 854.458547] ? __sys_sendmmsg+0x330/0x330 [ 854.462691] do_syscall_64+0x1d5/0x640 [ 854.466571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 854.471751] RIP: 0033:0x45c479 [ 854.474929] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:27 executing program 2 (fault-call:7 fault-nth:46): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 854.482624] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 854.490014] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 854.497292] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 854.504559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 854.511828] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002d [ 854.567059] FAULT_INJECTION: forcing a failure. [ 854.567059] name failslab, interval 1, probability 0, space 0, times 0 [ 854.585166] CPU: 1 PID: 31779 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 854.593093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.602459] Call Trace: [ 854.605087] dump_stack+0x13e/0x194 [ 854.608736] should_fail.cold+0x10a/0x14b [ 854.612902] should_failslab+0xd6/0x130 [ 854.616908] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 854.622026] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 854.627613] ? __alloc_skb+0x9a/0x4c0 [ 854.631430] __kmalloc_node_track_caller+0x38/0x70 [ 854.636371] __kmalloc_reserve.isra.0+0x35/0xd0 [ 854.641058] __alloc_skb+0xca/0x4c0 [ 854.644698] ? skb_trim+0x160/0x160 [ 854.649484] ? mark_held_locks+0xa6/0xf0 [ 854.653553] sock_wmalloc+0xa5/0xf0 [ 854.657965] pppoe_sendmsg+0x269/0x710 [ 854.661874] ? pppoe_getname+0x130/0x130 [ 854.665943] ? security_socket_sendmsg+0x83/0xb0 [ 854.670731] ? pppoe_getname+0x130/0x130 [ 854.674790] sock_sendmsg+0xc5/0x100 [ 854.678506] ___sys_sendmsg+0x349/0x840 [ 854.682488] ? trace_hardirqs_on+0x10/0x10 [ 854.686736] ? copy_msghdr_from_user+0x380/0x380 [ 854.691614] ? trace_hardirqs_on+0x10/0x10 [ 854.695855] ? find_held_lock+0x2d/0x110 [ 854.699922] ? __fget+0x201/0x360 [ 854.703388] ? save_trace+0x290/0x290 [ 854.707203] ? find_held_lock+0x2d/0x110 [ 854.711275] ? __might_fault+0x104/0x1b0 [ 854.715354] __sys_sendmmsg+0x129/0x330 [ 854.719342] ? SyS_sendmsg+0x40/0x40 [ 854.723075] ? SyS_write+0x1b7/0x210 [ 854.726808] ? __mutex_unlock_slowpath+0x75/0x780 [ 854.731681] ? wait_for_completion+0x390/0x390 [ 854.736497] ? vfs_write+0xff/0x4e0 [ 854.740127] ? fput+0xb/0x140 [ 854.743242] ? SyS_write+0x14d/0x210 [ 854.746960] ? SyS_read+0x210/0x210 [ 854.750684] SyS_sendmmsg+0x2f/0x50 [ 854.754322] ? __sys_sendmmsg+0x330/0x330 [ 854.758478] do_syscall_64+0x1d5/0x640 [ 854.762383] entry_SYSCALL_64_after_hwframe+0x42/0xb7 08:20:27 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:27 executing program 2 (fault-call:7 fault-nth:47): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 854.767576] RIP: 0033:0x45c479 [ 854.770768] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 854.779525] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 854.786796] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 854.794117] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 854.801510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 854.808947] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002e [ 854.857961] FAULT_INJECTION: forcing a failure. [ 854.857961] name failslab, interval 1, probability 0, space 0, times 0 [ 854.869661] CPU: 0 PID: 31786 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 854.877553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.886921] Call Trace: [ 854.889526] dump_stack+0x13e/0x194 [ 854.893171] should_fail.cold+0x10a/0x14b [ 854.897335] should_failslab+0xd6/0x130 [ 854.901322] kmem_cache_alloc+0x44/0x770 [ 854.905401] ? __lock_acquire+0x5f7/0x4620 [ 854.909647] ? br_allowed_egress+0x3c2/0x6d0 [ 854.914073] skb_clone+0x11c/0x310 [ 854.917625] deliver_clone+0x3f/0xb0 [ 854.921736] br_flood+0x3d2/0x550 [ 854.925204] br_dev_xmit+0x8b5/0xd20 [ 854.928936] ? br_poll_controller+0x10/0x10 [ 854.933271] dev_hard_start_xmit+0x186/0x890 [ 854.937698] __dev_queue_xmit+0x1d91/0x25c0 [ 854.942027] ? find_held_lock+0x2d/0x110 [ 854.946143] ? netdev_pick_tx+0x2e0/0x2e0 [ 854.950333] ? iov_iter_advance+0x8a/0xc70 [ 854.954565] ? memcpy+0x35/0x50 [ 854.957844] ? pppoe_sendmsg+0x5c1/0x710 [ 854.961897] pppoe_sendmsg+0x5c1/0x710 [ 854.965806] ? ether_setup+0x2d0/0x2d0 [ 854.969694] ? pppoe_getname+0x130/0x130 [ 854.973752] ? security_socket_sendmsg+0x83/0xb0 [ 854.978515] ? pppoe_getname+0x130/0x130 [ 854.982565] sock_sendmsg+0xc5/0x100 [ 854.986264] ___sys_sendmsg+0x349/0x840 [ 854.990230] ? trace_hardirqs_on+0x10/0x10 [ 854.994457] ? copy_msghdr_from_user+0x380/0x380 [ 854.999221] ? trace_hardirqs_on+0x10/0x10 [ 855.003449] ? find_held_lock+0x2d/0x110 [ 855.007599] ? __fget+0x201/0x360 [ 855.012051] ? save_trace+0x290/0x290 [ 855.015856] ? find_held_lock+0x2d/0x110 [ 855.019913] ? __might_fault+0x104/0x1b0 [ 855.023976] __sys_sendmmsg+0x129/0x330 [ 855.028230] ? SyS_sendmsg+0x40/0x40 [ 855.031933] ? SyS_write+0x1b7/0x210 [ 855.035643] ? __mutex_unlock_slowpath+0x75/0x780 [ 855.040561] ? wait_for_completion+0x390/0x390 [ 855.045477] ? vfs_write+0xff/0x4e0 [ 855.049090] ? fput+0xb/0x140 [ 855.052208] ? SyS_write+0x14d/0x210 [ 855.055918] ? SyS_read+0x210/0x210 [ 855.059534] SyS_sendmmsg+0x2f/0x50 [ 855.063170] ? __sys_sendmmsg+0x330/0x330 [ 855.067308] do_syscall_64+0x1d5/0x640 [ 855.071213] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 855.076494] RIP: 0033:0x45c479 [ 855.079679] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 855.087406] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 855.095284] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 855.102550] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 855.110273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 855.117546] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000002f 08:20:29 executing program 2 (fault-call:7 fault-nth:48): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:29 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:29 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000000c0)={0x9, "6d95f191e70034d82cc06e8ab8194dda653ce7c7c5dde7f0caf5b5f770d5b75a", 0x400, 0xff, 0x8000, 0x2, 0x4}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 856.592273] FAULT_INJECTION: forcing a failure. [ 856.592273] name failslab, interval 1, probability 0, space 0, times 0 [ 856.604875] CPU: 0 PID: 31795 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 856.612792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.622343] Call Trace: [ 856.624958] dump_stack+0x13e/0x194 [ 856.628606] should_fail.cold+0x10a/0x14b [ 856.632778] should_failslab+0xd6/0x130 [ 856.636777] kmem_cache_alloc_node+0x288/0x7a0 [ 856.641573] ? find_held_lock+0x2d/0x110 [ 856.645653] ? lock_sock_nested+0x98/0x100 [ 856.649983] __alloc_skb+0x9a/0x4c0 [ 856.653640] ? skb_trim+0x160/0x160 [ 856.657410] ? mark_held_locks+0xa6/0xf0 [ 856.661501] sock_wmalloc+0xa5/0xf0 [ 856.665490] pppoe_sendmsg+0x269/0x710 [ 856.669393] ? pppoe_getname+0x130/0x130 [ 856.673589] ? security_socket_sendmsg+0x83/0xb0 [ 856.678368] ? pppoe_getname+0x130/0x130 [ 856.682438] sock_sendmsg+0xc5/0x100 [ 856.686264] ___sys_sendmsg+0x349/0x840 [ 856.690259] ? trace_hardirqs_on+0x10/0x10 [ 856.694706] ? copy_msghdr_from_user+0x380/0x380 [ 856.699573] ? trace_hardirqs_on+0x10/0x10 [ 856.703820] ? find_held_lock+0x2d/0x110 [ 856.707916] ? __fget+0x201/0x360 [ 856.711385] ? save_trace+0x290/0x290 [ 856.715204] ? find_held_lock+0x2d/0x110 [ 856.719282] ? __might_fault+0x104/0x1b0 [ 856.723373] __sys_sendmmsg+0x129/0x330 [ 856.727363] ? SyS_sendmsg+0x40/0x40 [ 856.731124] ? SyS_write+0x1b7/0x210 [ 856.734874] ? __mutex_unlock_slowpath+0x75/0x780 [ 856.740098] ? wait_for_completion+0x390/0x390 [ 856.744695] ? vfs_write+0xff/0x4e0 [ 856.748390] ? fput+0xb/0x140 [ 856.751508] ? SyS_write+0x14d/0x210 [ 856.755239] ? SyS_read+0x210/0x210 [ 856.758920] SyS_sendmmsg+0x2f/0x50 [ 856.762565] ? __sys_sendmmsg+0x330/0x330 [ 856.766728] do_syscall_64+0x1d5/0x640 [ 856.770636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 856.775831] RIP: 0033:0x45c479 [ 856.779023] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:29 executing program 2 (fault-call:7 fault-nth:49): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 856.786741] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 856.794011] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 856.801287] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 856.808775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 856.816086] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000030 08:20:29 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x1, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 856.850554] FAULT_INJECTION: forcing a failure. [ 856.850554] name failslab, interval 1, probability 0, space 0, times 0 [ 856.862022] CPU: 1 PID: 31802 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 856.869907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.879523] Call Trace: [ 856.882142] dump_stack+0x13e/0x194 [ 856.885794] should_fail.cold+0x10a/0x14b [ 856.890223] should_failslab+0xd6/0x130 [ 856.894207] kmem_cache_alloc_node_trace+0x292/0x7b0 08:20:29 executing program 1: r0 = getpid() r1 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x200000000000000, 0x6a) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='projid_map\x00') setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x3, 0x6, 0x7}, 0x10) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newchain={0x2c, 0x64, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xb}, {0xfff2, 0xa}, {0xa, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r9 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xd, r9, 0x80000000, &(0x7f0000000380)="f6594aa3c304c9bc543d13ba17834902c430bef723f852ee41c2b10047b4eaa86dbf2000000000001800e9365099c216d264bad94ad2391da26fa4e502c36476af24173c894398282f8c474611b3de9f551844402f7ac50500ff481c64ffff0000fb376a462f0000000000000002ee0b23bfb50ff80618a14c38d20fa05e095c35b0fc421e8ac906a7c0cddca0e39212e020b642c896bcfbfd3c2101014df69bd14773c57dc8194cb115675ba54ee323e3727ebdc9a849fb6a9edd36b81d769580d02571f21a1e8a03975d824dc435fbea54a21d0c9cb793280e8fce4025bf5abacdebb2f704722241") ptrace$cont(0x9, r4, 0x0, 0x0) [ 856.899314] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 856.904776] ? __alloc_skb+0x9a/0x4c0 [ 856.908596] __kmalloc_node_track_caller+0x38/0x70 [ 856.913531] __kmalloc_reserve.isra.0+0x35/0xd0 [ 856.918290] __alloc_skb+0xca/0x4c0 [ 856.921931] ? skb_trim+0x160/0x160 [ 856.925571] ? mark_held_locks+0xa6/0xf0 [ 856.929645] sock_wmalloc+0xa5/0xf0 [ 856.933282] pppoe_sendmsg+0x269/0x710 [ 856.937189] ? pppoe_getname+0x130/0x130 [ 856.941290] ? security_socket_sendmsg+0x83/0xb0 [ 856.946079] ? pppoe_getname+0x130/0x130 [ 856.950163] sock_sendmsg+0xc5/0x100 [ 856.953892] ___sys_sendmsg+0x349/0x840 [ 856.957877] ? trace_hardirqs_on+0x10/0x10 [ 856.962120] ? copy_msghdr_from_user+0x380/0x380 [ 856.966889] ? trace_hardirqs_on+0x10/0x10 [ 856.971125] ? find_held_lock+0x2d/0x110 [ 856.975224] ? __fget+0x201/0x360 [ 856.978702] ? save_trace+0x290/0x290 [ 856.982510] ? find_held_lock+0x2d/0x110 [ 856.986564] ? __might_fault+0x104/0x1b0 [ 856.990629] __sys_sendmmsg+0x129/0x330 [ 856.994754] ? SyS_sendmsg+0x40/0x40 [ 856.998462] ? SyS_write+0x1b7/0x210 [ 857.002178] ? __mutex_unlock_slowpath+0x75/0x780 [ 857.007026] ? wait_for_completion+0x390/0x390 [ 857.011605] ? vfs_write+0xff/0x4e0 [ 857.015321] ? fput+0xb/0x140 [ 857.018440] ? SyS_write+0x14d/0x210 [ 857.022147] ? SyS_read+0x210/0x210 [ 857.025834] SyS_sendmmsg+0x2f/0x50 [ 857.029449] ? __sys_sendmmsg+0x330/0x330 [ 857.033597] do_syscall_64+0x1d5/0x640 [ 857.037586] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 857.042925] RIP: 0033:0x45c479 [ 857.046103] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.053819] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 857.061081] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 857.068347] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 857.075618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 857.082882] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000031 08:20:29 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:29 executing program 1: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r2 = open(&(0x7f0000000000)='./file0\x00', 0x880, 0x100) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:20:29 executing program 2 (fault-call:7 fault-nth:50): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:29 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 857.289397] ptrace attach of "/root/syz-executor.1"[31816] was attempted by "/root/syz-executor.1"[31820] [ 857.304579] FAULT_INJECTION: forcing a failure. [ 857.304579] name failslab, interval 1, probability 0, space 0, times 0 [ 857.316227] CPU: 0 PID: 31819 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 857.324117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.333486] Call Trace: [ 857.336087] dump_stack+0x13e/0x194 [ 857.340165] should_fail.cold+0x10a/0x14b [ 857.344337] should_failslab+0xd6/0x130 [ 857.348346] kmem_cache_alloc+0x44/0x770 [ 857.352505] ? __lock_acquire+0x5f7/0x4620 [ 857.356924] ? br_allowed_egress+0x3c2/0x6d0 [ 857.361452] skb_clone+0x11c/0x310 [ 857.365105] deliver_clone+0x3f/0xb0 [ 857.368868] br_flood+0x3d2/0x550 [ 857.372350] br_dev_xmit+0x8b5/0xd20 [ 857.376084] ? br_poll_controller+0x10/0x10 [ 857.380424] dev_hard_start_xmit+0x186/0x890 [ 857.384855] __dev_queue_xmit+0x1d91/0x25c0 [ 857.389186] ? find_held_lock+0x2d/0x110 [ 857.393268] ? netdev_pick_tx+0x2e0/0x2e0 [ 857.397427] ? iov_iter_advance+0x8a/0xc70 [ 857.401737] ? memcpy+0x35/0x50 [ 857.405050] ? pppoe_sendmsg+0x5c1/0x710 [ 857.409123] pppoe_sendmsg+0x5c1/0x710 [ 857.413048] ? ether_setup+0x2d0/0x2d0 [ 857.416948] ? pppoe_getname+0x130/0x130 [ 857.421021] ? security_socket_sendmsg+0x83/0xb0 [ 857.425788] ? pppoe_getname+0x130/0x130 [ 857.429861] sock_sendmsg+0xc5/0x100 [ 857.433587] ___sys_sendmsg+0x349/0x840 08:20:29 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5d0a}]}, 0x1c}}, 0x4040011) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) ptrace$setregs(0xf, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:29 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x4000, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x91e, 0x3, 0x2e}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000000)) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x10000) 08:20:29 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, 0xffffffffffffffff, 0x2, &(0x7f0000000000)="b133d469c360c721da042367284ebffe40945f59024204bb0195baae7ec4e48365dd1f6b42a644e12401331a9a") ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0xffffffffa1fcb3ec}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) [ 857.437587] ? trace_hardirqs_on+0x10/0x10 [ 857.441835] ? copy_msghdr_from_user+0x380/0x380 [ 857.446607] ? trace_hardirqs_on+0x10/0x10 [ 857.451958] ? find_held_lock+0x2d/0x110 [ 857.456142] ? __fget+0x201/0x360 [ 857.459611] ? save_trace+0x290/0x290 [ 857.463430] ? find_held_lock+0x2d/0x110 [ 857.467501] ? __might_fault+0x104/0x1b0 [ 857.471698] __sys_sendmmsg+0x129/0x330 [ 857.475772] ? SyS_sendmsg+0x40/0x40 [ 857.479500] ? SyS_write+0x1b7/0x210 [ 857.483238] ? __mutex_unlock_slowpath+0x75/0x780 [ 857.488106] ? wait_for_completion+0x390/0x390 [ 857.492701] ? vfs_write+0xff/0x4e0 [ 857.496343] ? fput+0xb/0x140 [ 857.499469] ? SyS_write+0x14d/0x210 [ 857.503193] ? SyS_read+0x210/0x210 [ 857.506835] SyS_sendmmsg+0x2f/0x50 [ 857.510480] ? __sys_sendmmsg+0x330/0x330 [ 857.514641] do_syscall_64+0x1d5/0x640 [ 857.518550] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 857.523749] RIP: 0033:0x45c479 [ 857.526989] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.534903] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 857.542179] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 857.549458] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 857.556750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 857.564387] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000032 08:20:32 executing program 1: r0 = getpid() syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="2cda79e93c779c23fab48c800a37fcff4844e850915adee16d18b4fa8e16ef256a849fcf00606ed5752739906cbc2127c8a4aa3880dd0e821235728cfb831c7e592643ba6e8e56de41", 0x49, 0x20000000000000}, {&(0x7f00000001c0)="027b71b3821631579ea232b61a9c0f778b33324fc2ee387880395d008f6c6d0cc9c899b6aedc03750a1f7eba3d15089cd462fd8483478c3ce2324c17b1f79eeafe7ab0fb410526cccd1826430e6f79dbfefaafb8ecbb9a2a61c9b98140ddd65b29fd0a233a", 0x65, 0x1}], 0xb0002, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0xc07705f5d94a758b, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:32 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:32 executing program 2 (fault-call:7 fault-nth:51): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:32 executing program 3: r0 = userfaultfd(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000280)={0x7, 0xf509, 0x80000001}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000097f000/0x1000)=nil, 0x1000}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200800, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000001c0)={0x0, &(0x7f0000000980)}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000640)={0x980000, 0x3, 0x315, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x9909df, 0x8001, [], @p_u16=&(0x7f0000000300)=0x7}}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000000880)=""/195, 0xc3}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r8 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9419552f7d95716, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000440)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r11, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) fsetxattr$system_posix_acl(r8, 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRESHEX=r10, @ANYPTR, @ANYRES32, @ANYBLOB="deca3844292c7e3f5d9ab5a7e9ce7dd14d64d716d164745e8ea8ad58812d7b5f547e292e3c2026ebe3ea75dacaf6753eb8c34d514a3274c9d1e7b6f84302bda90bf80833b9daf94ca1b2ee415dc56602d43fcf6bf621d924df1a6657430547c2a3a8ff126bd7d369a98ef2a8367f448615ee0cc5a1836cd17dc6f1356f81eab4d98d2e997f72dfcd59bba7f809c0372d6048be98e8aca89ef905e4709cb696c858b04b9dac4ea9fd463d4488f72f5946776b909e3d150ef19864faf8cdbfed604fcbc28962c876f3a5135a7dd217905ad9ccbce89c8620085d7fed", @ANYRESOCT=r12, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR], @ANYBLOB="a8", @ANYPTR64, @ANYRES32, @ANYRESOCT], 0xb, 0x3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8041}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x200, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_OURS={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "e2cb2a950a28b906234a8d10e659aa22e07188fb5b531a761ab1c4c7dd8ca16847a05a33d53b3edd147bccc18b5b2b083154afa2b9dd6c703e4f3c2605115347598ee46c593e1d9f05d65cecf0bdab78105966785b36842f509628344112f7b4f0005b2547a3aa8bfb5c67272a0bac8b5c54f24628d9b0da1a3333f56bd530a7f3f96439cc11f5f68248ce8a85155bdffb44244def7436e186802bf3e24c0bdaac9e49dc76fb49"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x32}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "fd71f4aa67e17a604544fd6aa96da136698677cd9e7508770f36441d182d54327bfd31b5c5079cbc0c531d68ed4c1d159e7c72f09dca0c1f2270b133117158c37b3fae58f9b488dfba20de315887176621d4f9d18c70ce3c68089c605a196303d8217d98b5ef05635a3b08b1d5e8d4be004cda0bac71ff2ea492125aa7ce3783bc3aef083cd04b7fd3100cfc0d564220dc3c250f1ba72539a9aae0accca2dd91963ca382adaa6c9c6520fed0394620a4b6451e64bec3bf9602fa"}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x401}, @ETHTOOL_A_LINKMODES_OURS={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0x4c, 0x5, "4d276446d210dc11e19ec6d75d436d7d6157bf08712bc9a5bfc39404f92f8fc38a69bb284ea837636478f6be505b4d9363987bbf3e2230bae253bc959f3ebdb042bac0c5d03e70d3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x200}}, 0x40080) r13 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$fb(r14, &(0x7f00000000c0)=""/209, 0xd1) write$cgroup_type(r13, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 859.631735] FAULT_INJECTION: forcing a failure. [ 859.631735] name failslab, interval 1, probability 0, space 0, times 0 [ 859.643344] CPU: 0 PID: 31848 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 859.651229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.660611] Call Trace: [ 859.663410] dump_stack+0x13e/0x194 [ 859.667063] should_fail.cold+0x10a/0x14b [ 859.671635] should_failslab+0xd6/0x130 [ 859.671651] kmem_cache_alloc_node+0x288/0x7a0 [ 859.680337] ? find_held_lock+0x2d/0x110 [ 859.680349] ? lock_sock_nested+0x98/0x100 [ 859.680362] __alloc_skb+0x9a/0x4c0 [ 859.680372] ? skb_trim+0x160/0x160 [ 859.680380] ? mark_held_locks+0xa6/0xf0 [ 859.680391] sock_wmalloc+0xa5/0xf0 [ 859.680404] pppoe_sendmsg+0x269/0x710 [ 859.680415] ? pppoe_getname+0x130/0x130 [ 859.680428] ? security_socket_sendmsg+0x83/0xb0 [ 859.680437] ? pppoe_getname+0x130/0x130 [ 859.680446] sock_sendmsg+0xc5/0x100 [ 859.680456] ___sys_sendmsg+0x349/0x840 [ 859.680466] ? trace_hardirqs_on+0x10/0x10 [ 859.680477] ? copy_msghdr_from_user+0x380/0x380 [ 859.680492] ? trace_hardirqs_on+0x10/0x10 [ 859.680501] ? find_held_lock+0x2d/0x110 [ 859.680511] ? __fget+0x201/0x360 [ 859.680519] ? save_trace+0x290/0x290 [ 859.680534] ? find_held_lock+0x2d/0x110 [ 859.680552] ? __might_fault+0x104/0x1b0 [ 859.680574] __sys_sendmmsg+0x129/0x330 [ 859.680585] ? SyS_sendmsg+0x40/0x40 [ 859.680594] ? SyS_write+0x1b7/0x210 [ 859.680619] ? __mutex_unlock_slowpath+0x75/0x780 [ 859.680633] ? wait_for_completion+0x390/0x390 [ 859.680641] ? vfs_write+0xff/0x4e0 [ 859.680651] ? fput+0xb/0x140 [ 859.680657] ? SyS_write+0x14d/0x210 [ 859.680666] ? SyS_read+0x210/0x210 [ 859.680677] SyS_sendmmsg+0x2f/0x50 [ 859.680685] ? __sys_sendmmsg+0x330/0x330 [ 859.680696] do_syscall_64+0x1d5/0x640 [ 859.680711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 859.680718] RIP: 0033:0x45c479 [ 859.680723] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 859.825406] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 08:20:32 executing program 2 (fault-call:7 fault-nth:52): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 859.825413] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 859.825417] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 859.825427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 859.855091] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000033 [ 859.897706] FAULT_INJECTION: forcing a failure. [ 859.897706] name failslab, interval 1, probability 0, space 0, times 0 [ 859.909246] CPU: 1 PID: 31862 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 859.917229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.926630] Call Trace: [ 859.929222] dump_stack+0x13e/0x194 [ 859.932851] should_fail.cold+0x10a/0x14b [ 859.937032] should_failslab+0xd6/0x130 [ 859.941046] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 859.946158] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 859.951617] ? __alloc_skb+0x9a/0x4c0 [ 859.955419] __kmalloc_node_track_caller+0x38/0x70 [ 859.960362] __kmalloc_reserve.isra.0+0x35/0xd0 [ 859.965143] __alloc_skb+0xca/0x4c0 [ 859.968764] ? skb_trim+0x160/0x160 [ 859.972399] ? mark_held_locks+0xa6/0xf0 [ 859.976582] sock_wmalloc+0xa5/0xf0 [ 859.980224] pppoe_sendmsg+0x269/0x710 [ 859.984144] ? pppoe_getname+0x130/0x130 [ 859.988279] ? security_socket_sendmsg+0x83/0xb0 [ 859.993037] ? pppoe_getname+0x130/0x130 [ 859.997134] sock_sendmsg+0xc5/0x100 [ 860.000994] ___sys_sendmsg+0x349/0x840 [ 860.004973] ? trace_hardirqs_on+0x10/0x10 [ 860.009242] ? copy_msghdr_from_user+0x380/0x380 [ 860.014374] ? trace_hardirqs_on+0x10/0x10 [ 860.018745] ? find_held_lock+0x2d/0x110 [ 860.022804] ? __fget+0x201/0x360 [ 860.026323] ? save_trace+0x290/0x290 [ 860.030131] ? find_held_lock+0x2d/0x110 [ 860.034561] ? __might_fault+0x104/0x1b0 [ 860.038629] __sys_sendmmsg+0x129/0x330 [ 860.042606] ? SyS_sendmsg+0x40/0x40 [ 860.046403] ? SyS_write+0x1b7/0x210 [ 860.050275] ? __mutex_unlock_slowpath+0x75/0x780 [ 860.055128] ? wait_for_completion+0x390/0x390 [ 860.059709] ? vfs_write+0xff/0x4e0 [ 860.063327] ? fput+0xb/0x140 [ 860.066482] ? SyS_write+0x14d/0x210 [ 860.070204] ? SyS_read+0x210/0x210 [ 860.073893] SyS_sendmmsg+0x2f/0x50 [ 860.077514] ? __sys_sendmmsg+0x330/0x330 [ 860.081669] do_syscall_64+0x1d5/0x640 [ 860.085565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 860.090756] RIP: 0033:0x45c479 [ 860.094097] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 860.101946] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 860.109219] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 860.116512] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 860.123916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 860.131877] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000034 08:20:32 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:32 executing program 2 (fault-call:7 fault-nth:53): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:32 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:32 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 860.321983] FAULT_INJECTION: forcing a failure. [ 860.321983] name failslab, interval 1, probability 0, space 0, times 0 [ 860.333315] CPU: 1 PID: 31870 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 860.342017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.351527] Call Trace: [ 860.354132] dump_stack+0x13e/0x194 [ 860.357782] should_fail.cold+0x10a/0x14b [ 860.362085] should_failslab+0xd6/0x130 [ 860.366080] kmem_cache_alloc+0x44/0x770 08:20:32 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 860.370169] ? __lock_acquire+0x5f7/0x4620 [ 860.374417] ? br_allowed_egress+0x3c2/0x6d0 [ 860.378843] skb_clone+0x11c/0x310 [ 860.382667] deliver_clone+0x3f/0xb0 [ 860.386654] br_flood+0x3d2/0x550 [ 860.390151] br_dev_xmit+0x8b5/0xd20 [ 860.394051] ? br_poll_controller+0x10/0x10 [ 860.399347] dev_hard_start_xmit+0x186/0x890 [ 860.403775] __dev_queue_xmit+0x1d91/0x25c0 [ 860.408131] ? find_held_lock+0x2d/0x110 [ 860.412225] ? netdev_pick_tx+0x2e0/0x2e0 [ 860.416396] ? iov_iter_advance+0x8a/0xc70 08:20:32 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 860.420756] ? memcpy+0x35/0x50 [ 860.424132] ? pppoe_sendmsg+0x5c1/0x710 [ 860.428214] pppoe_sendmsg+0x5c1/0x710 [ 860.432307] ? ether_setup+0x2d0/0x2d0 [ 860.436985] ? pppoe_getname+0x130/0x130 [ 860.441203] ? security_socket_sendmsg+0x83/0xb0 [ 860.446762] ? pppoe_getname+0x130/0x130 [ 860.446775] sock_sendmsg+0xc5/0x100 [ 860.455096] ___sys_sendmsg+0x349/0x840 [ 860.459101] ? trace_hardirqs_on+0x10/0x10 [ 860.459116] ? copy_msghdr_from_user+0x380/0x380 [ 860.468245] ? trace_hardirqs_on+0x10/0x10 08:20:33 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 860.468257] ? find_held_lock+0x2d/0x110 [ 860.476560] ? __fget+0x201/0x360 [ 860.480045] ? save_trace+0x290/0x290 [ 860.480061] ? find_held_lock+0x2d/0x110 [ 860.480073] ? __might_fault+0x104/0x1b0 [ 860.480096] __sys_sendmmsg+0x129/0x330 [ 860.480106] ? SyS_sendmsg+0x40/0x40 [ 860.480115] ? SyS_write+0x1b7/0x210 [ 860.480139] ? __mutex_unlock_slowpath+0x75/0x780 [ 860.480149] ? wait_for_completion+0x390/0x390 [ 860.480156] ? vfs_write+0xff/0x4e0 [ 860.480165] ? fput+0xb/0x140 [ 860.480171] ? SyS_write+0x14d/0x210 [ 860.480179] ? SyS_read+0x210/0x210 [ 860.480189] SyS_sendmmsg+0x2f/0x50 [ 860.480197] ? __sys_sendmmsg+0x330/0x330 [ 860.480208] do_syscall_64+0x1d5/0x640 [ 860.480222] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 860.480230] RIP: 0033:0x45c479 [ 860.480235] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 860.480244] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 860.480249] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 860.480253] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 860.480258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 860.480263] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000035 08:20:35 executing program 2 (fault-call:7 fault-nth:54): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:35 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:35 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:20:35 executing program 3: r0 = userfaultfd(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1410, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000028bd7000ffdbdf256b00faff09001a00aaa8aaaaaaaa0000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:35 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9, 0x20000, 0xfffffffffffffff8, 0x0, 0x10001}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x80000) accept(r5, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) ptrace(0xffffffffffffffff, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c97d1370dfca7cb2ac1a1aa2c00"]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) [ 862.630986] FAULT_INJECTION: forcing a failure. [ 862.630986] name failslab, interval 1, probability 0, space 0, times 0 [ 862.661806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pig=31903 comm=syz-executor.3 [ 862.662846] CPU: 1 PID: 31897 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 862.682311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.691920] Call Trace: [ 862.694529] dump_stack+0x13e/0x194 [ 862.698182] should_fail.cold+0x10a/0x14b [ 862.702342] should_failslab+0xd6/0x130 [ 862.706410] kmem_cache_alloc_node+0x288/0x7a0 [ 862.711102] ? find_held_lock+0x2d/0x110 [ 862.715168] ? lock_sock_nested+0x98/0x100 [ 862.719447] __alloc_skb+0x9a/0x4c0 [ 862.723074] ? skb_trim+0x160/0x160 [ 862.726780] ? mark_held_locks+0xa6/0xf0 [ 862.730851] sock_wmalloc+0xa5/0xf0 [ 862.734495] pppoe_sendmsg+0x269/0x710 [ 862.738403] ? pppoe_getname+0x130/0x130 [ 862.742655] ? security_socket_sendmsg+0x83/0xb0 [ 862.747430] ? pppoe_getname+0x130/0x130 [ 862.751502] sock_sendmsg+0xc5/0x100 [ 862.755446] ___sys_sendmsg+0x349/0x840 [ 862.759552] ? trace_hardirqs_on+0x10/0x10 [ 862.763807] ? copy_msghdr_from_user+0x380/0x380 [ 862.769371] ? trace_hardirqs_on+0x10/0x10 [ 862.773630] ? find_held_lock+0x2d/0x110 [ 862.777705] ? __fget+0x201/0x360 [ 862.781178] ? save_trace+0x290/0x290 [ 862.785000] ? find_held_lock+0x2d/0x110 [ 862.789116] ? __might_fault+0x104/0x1b0 [ 862.793394] __sys_sendmmsg+0x129/0x330 [ 862.797371] ? SyS_sendmsg+0x40/0x40 [ 862.801086] ? SyS_write+0x1b7/0x210 [ 862.804815] ? __mutex_unlock_slowpath+0x75/0x780 [ 862.809674] ? wait_for_completion+0x390/0x390 [ 862.814279] ? vfs_write+0xff/0x4e0 [ 862.817911] ? fput+0xb/0x140 [ 862.821013] ? SyS_write+0x14d/0x210 [ 862.824722] ? SyS_read+0x210/0x210 [ 862.828376] SyS_sendmmsg+0x2f/0x50 [ 862.832099] ? __sys_sendmmsg+0x330/0x330 [ 862.836420] do_syscall_64+0x1d5/0x640 [ 862.840321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 862.845515] RIP: 0033:0x45c479 [ 862.848707] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 862.856421] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 862.863708] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 862.871066] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:20:35 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 862.878368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 862.885733] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000036 08:20:35 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:35 executing program 2 (fault-call:7 fault-nth:55): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:35 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:35 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioprio_set$pid(0x3, r1, 0x4) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 08:20:35 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:35 executing program 5: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 863.373445] FAULT_INJECTION: forcing a failure. [ 863.373445] name failslab, interval 1, probability 0, space 0, times 0 [ 863.399384] CPU: 1 PID: 31929 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 863.407312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.416682] Call Trace: [ 863.419290] dump_stack+0x13e/0x194 08:20:36 executing program 1: r0 = getpid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000040)=""/50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r8, 0x202002) keyctl$chown(0x4, r8, r7, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r11) r12 = getpid() ptrace(0x10, r12) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f00000000c0)) ptrace(0x10, r13) ptrace$setregs(0xf, r13, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000280)={{0x3, 0x0, r5, r7, r11, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r12, r13, 0x3}) setgroups(0x2, &(0x7f0000000580)=[0x0, r5]) r14 = getuid() r15 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r17) r18 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r20 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r20, 0x0) keyctl$chown(0x4, r20, r19, 0x0) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r22) r23 = getpid() rt_tgsigqueueinfo(r23, r23, 0x16, &(0x7f00000000c0)) ptrace(0x10, r23) ptrace$setregs(0xf, r23, 0x0, 0x0) r24 = getpid() rt_tgsigqueueinfo(r24, r24, 0x16, &(0x7f00000000c0)) ptrace(0x4207, r24) ptrace$setregs(0xf, r24, 0x0, 0x0) shmctl$IPC_SET(r15, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0xee01, r19, r22, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0xa, r23, r10, 0x3}) r25 = gettid() ptrace$setopts(0x4206, r25, 0x0, 0x0) tkill(r25, 0x3c) ptrace$cont(0x18, r25, 0x0, 0x0) ptrace$setregs(0xd, r25, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r25, 0x0, 0x0) r26 = gettid() ptrace$setopts(0x4206, r26, 0x0, 0x0) tkill(r26, 0x3c) ptrace$cont(0x18, r26, 0x0, 0x0) ptrace$setregs(0xd, r26, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r26, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x1, r2, r5, r14, r22, 0x2, 0x3}, 0x0, 0x0, 0xa, 0x1, 0x1fca9e9b, 0x3, 0x9, 0x7ff, 0x8e2c, 0x400, r25, r26}) tkill(0x0, 0x1c) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r27 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r28, 0x8912, 0x400200) ptrace$setopts(0x4206, r27, 0x0, 0x0) tkill(r27, 0x38) ptrace$cont(0x18, r27, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r27, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r27, 0x0, 0x0) [ 863.423041] should_fail.cold+0x10a/0x14b [ 863.427265] should_failslab+0xd6/0x130 [ 863.431296] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 863.436427] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 863.441890] ? __alloc_skb+0x9a/0x4c0 [ 863.445719] __kmalloc_node_track_caller+0x38/0x70 [ 863.450666] __kmalloc_reserve.isra.0+0x35/0xd0 [ 863.455358] __alloc_skb+0xca/0x4c0 [ 863.458995] ? skb_trim+0x160/0x160 [ 863.462727] ? mark_held_locks+0xa6/0xf0 [ 863.466804] sock_wmalloc+0xa5/0xf0 [ 863.470449] pppoe_sendmsg+0x269/0x710 [ 863.474396] ? pppoe_getname+0x130/0x130 [ 863.478472] ? security_socket_sendmsg+0x83/0xb0 [ 863.483239] ? pppoe_getname+0x130/0x130 [ 863.487324] sock_sendmsg+0xc5/0x100 [ 863.491044] ___sys_sendmsg+0x349/0x840 [ 863.495027] ? trace_hardirqs_on+0x10/0x10 [ 863.499368] ? copy_msghdr_from_user+0x380/0x380 [ 863.504158] ? trace_hardirqs_on+0x10/0x10 [ 863.508408] ? find_held_lock+0x2d/0x110 [ 863.512482] ? __fget+0x201/0x360 [ 863.515938] ? save_trace+0x290/0x290 [ 863.519737] ? find_held_lock+0x2d/0x110 [ 863.523803] ? __might_fault+0x104/0x1b0 [ 863.527866] __sys_sendmmsg+0x129/0x330 [ 863.531832] ? SyS_sendmsg+0x40/0x40 [ 863.535546] ? SyS_write+0x1b7/0x210 [ 863.539270] ? __mutex_unlock_slowpath+0x75/0x780 [ 863.544236] ? wait_for_completion+0x390/0x390 [ 863.548826] ? vfs_write+0xff/0x4e0 [ 863.552447] ? fput+0xb/0x140 [ 863.555602] ? SyS_write+0x14d/0x210 [ 863.559447] ? SyS_read+0x210/0x210 [ 863.563075] SyS_sendmmsg+0x2f/0x50 [ 863.566709] ? __sys_sendmmsg+0x330/0x330 [ 863.570886] do_syscall_64+0x1d5/0x640 [ 863.574786] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 863.580089] RIP: 0033:0x45c479 [ 863.583287] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 863.591103] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 863.598435] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 863.606752] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 863.614039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 863.621402] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000037 [ 863.634939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pig=31903 comm=syz-executor.3 08:20:38 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:38 executing program 5: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:20:38 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x16, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x6, 0x10001, 0x81, r3}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:38 executing program 2 (fault-call:7 fault-nth:56): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:38 executing program 3: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 865.689366] FAULT_INJECTION: forcing a failure. [ 865.689366] name failslab, interval 1, probability 0, space 0, times 0 [ 865.700865] CPU: 0 PID: 31952 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 865.706626] ptrace attach of "/root/syz-executor.5"[31954] was attempted by "/root/syz-executor.5"[31956] [ 865.709793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.709798] Call Trace: [ 865.709819] dump_stack+0x13e/0x194 [ 865.709837] should_fail.cold+0x10a/0x14b 08:20:38 executing program 5: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:20:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 865.709852] should_failslab+0xd6/0x130 [ 865.709862] kmem_cache_alloc+0x44/0x770 [ 865.709879] ? __lock_acquire+0x5f7/0x4620 [ 865.752380] ? br_allowed_egress+0x3c2/0x6d0 [ 865.756802] skb_clone+0x11c/0x310 [ 865.758049] ptrace attach of "/root/syz-executor.5"[31963] was attempted by "/root/syz-executor.5"[31964] [ 865.760360] deliver_clone+0x3f/0xb0 [ 865.760372] br_flood+0x3d2/0x550 [ 865.760389] br_dev_xmit+0x8b5/0xd20 [ 865.760414] ? br_poll_controller+0x10/0x10 08:20:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 865.760429] dev_hard_start_xmit+0x186/0x890 [ 865.760443] __dev_queue_xmit+0x1d91/0x25c0 [ 865.760453] ? find_held_lock+0x2d/0x110 [ 865.760466] ? netdev_pick_tx+0x2e0/0x2e0 [ 865.795894] ptrace attach of "/root/syz-executor.5"[31967] was attempted by "/root/syz-executor.5"[31968] [ 865.798973] ? iov_iter_advance+0x8a/0xc70 [ 865.798999] ? memcpy+0x35/0x50 [ 865.799016] ? pppoe_sendmsg+0x5c1/0x710 [ 865.799025] pppoe_sendmsg+0x5c1/0x710 [ 865.799037] ? ether_setup+0x2d0/0x2d0 08:20:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 865.831234] ptrace attach of "/root/syz-executor.5"[31970] was attempted by "/root/syz-executor.5"[31971] [ 865.832201] ? pppoe_getname+0x130/0x130 [ 865.832218] ? security_socket_sendmsg+0x83/0xb0 [ 865.832228] ? pppoe_getname+0x130/0x130 [ 865.832238] sock_sendmsg+0xc5/0x100 [ 865.832247] ___sys_sendmsg+0x349/0x840 [ 865.832260] ? trace_hardirqs_on+0x10/0x10 [ 865.867050] ? copy_msghdr_from_user+0x380/0x380 [ 865.871820] ? trace_hardirqs_on+0x10/0x10 [ 865.876168] ? find_held_lock+0x2d/0x110 [ 865.880239] ? __fget+0x201/0x360 [ 865.883820] ? save_trace+0x290/0x290 [ 865.887749] ? find_held_lock+0x2d/0x110 [ 865.891821] ? __might_fault+0x104/0x1b0 [ 865.895900] __sys_sendmmsg+0x129/0x330 [ 865.899883] ? SyS_sendmsg+0x40/0x40 [ 865.903625] ? SyS_write+0x1b7/0x210 [ 865.907369] ? __mutex_unlock_slowpath+0x75/0x780 [ 865.912227] ? wait_for_completion+0x390/0x390 [ 865.916817] ? vfs_write+0xff/0x4e0 [ 865.920808] ? fput+0xb/0x140 [ 865.925497] ? SyS_write+0x14d/0x210 [ 865.929219] ? SyS_read+0x210/0x210 [ 865.929860] ptrace attach of "/root/syz-executor.5"[31975] was attempted by "/root/syz-executor.5"[31976] [ 865.932855] SyS_sendmmsg+0x2f/0x50 [ 865.932864] ? __sys_sendmmsg+0x330/0x330 [ 865.932876] do_syscall_64+0x1d5/0x640 [ 865.932893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 865.932902] RIP: 0033:0x45c479 [ 865.932907] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 865.932919] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 865.932923] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 865.932932] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 865.992454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 865.999837] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000038 08:20:38 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:38 executing program 5: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:20:38 executing program 2 (fault-call:7 fault-nth:57): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 866.362800] FAULT_INJECTION: forcing a failure. [ 866.362800] name failslab, interval 1, probability 0, space 0, times 0 [ 866.378015] CPU: 1 PID: 31986 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 866.378497] ptrace attach of "/root/syz-executor.5"[31983] was attempted by "/root/syz-executor.5"[31987] [ 866.385935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.385940] Call Trace: [ 866.385959] dump_stack+0x13e/0x194 [ 866.385976] should_fail.cold+0x10a/0x14b [ 866.385991] should_failslab+0xd6/0x130 [ 866.386002] kmem_cache_alloc_node+0x288/0x7a0 [ 866.386014] ? find_held_lock+0x2d/0x110 [ 866.386025] ? lock_sock_nested+0x98/0x100 [ 866.386039] __alloc_skb+0x9a/0x4c0 [ 866.386052] ? skb_trim+0x160/0x160 [ 866.440271] ? mark_held_locks+0xa6/0xf0 [ 866.444338] sock_wmalloc+0xa5/0xf0 [ 866.447958] pppoe_sendmsg+0x269/0x710 [ 866.452268] ? pppoe_getname+0x130/0x130 [ 866.456403] ? security_socket_sendmsg+0x83/0xb0 [ 866.461143] ? pppoe_getname+0x130/0x130 [ 866.465186] sock_sendmsg+0xc5/0x100 [ 866.468882] ___sys_sendmsg+0x349/0x840 [ 866.472845] ? trace_hardirqs_on+0x10/0x10 [ 866.477064] ? copy_msghdr_from_user+0x380/0x380 [ 866.481821] ? trace_hardirqs_on+0x10/0x10 [ 866.486037] ? find_held_lock+0x2d/0x110 [ 866.490704] ? __fget+0x201/0x360 [ 866.494141] ? save_trace+0x290/0x290 [ 866.498375] ? find_held_lock+0x2d/0x110 [ 866.502419] ? __might_fault+0x104/0x1b0 [ 866.506472] __sys_sendmmsg+0x129/0x330 [ 866.510431] ? SyS_sendmsg+0x40/0x40 [ 866.514124] ? SyS_write+0x1b7/0x210 [ 866.517828] ? __mutex_unlock_slowpath+0x75/0x780 [ 866.522659] ? wait_for_completion+0x390/0x390 [ 866.527223] ? vfs_write+0xff/0x4e0 [ 866.530845] ? fput+0xb/0x140 [ 866.534021] ? SyS_write+0x14d/0x210 [ 866.537715] ? SyS_read+0x210/0x210 [ 866.541328] SyS_sendmmsg+0x2f/0x50 [ 866.544950] ? __sys_sendmmsg+0x330/0x330 [ 866.549097] do_syscall_64+0x1d5/0x640 [ 866.552978] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 866.558159] RIP: 0033:0x45c479 [ 866.561329] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 866.569032] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 866.576471] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 866.584073] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 866.591328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 866.599014] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000039 08:20:41 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:41 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) accept4$x25(r1, 0x0, &(0x7f0000000000), 0x80800) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:41 executing program 5: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:20:41 executing program 2 (fault-call:7 fault-nth:58): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:41 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0xd6, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 868.716846] FAULT_INJECTION: forcing a failure. [ 868.716846] name failslab, interval 1, probability 0, space 0, times 0 [ 868.729814] CPU: 0 PID: 31999 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 868.737712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.745322] ptrace attach of "/root/syz-executor.5"[31997] was attempted by "/root/syz-executor.5"[32000] [ 868.747070] Call Trace: [ 868.747090] dump_stack+0x13e/0x194 [ 868.747109] should_fail.cold+0x10a/0x14b [ 868.767224] should_failslab+0xd6/0x130 [ 868.771215] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 868.776420] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 868.781966] ? __alloc_skb+0x9a/0x4c0 [ 868.785795] __kmalloc_node_track_caller+0x38/0x70 [ 868.790751] __kmalloc_reserve.isra.0+0x35/0xd0 [ 868.795459] __alloc_skb+0xca/0x4c0 [ 868.799534] ? skb_trim+0x160/0x160 [ 868.803172] ? mark_held_locks+0xa6/0xf0 [ 868.807254] sock_wmalloc+0xa5/0xf0 [ 868.810902] pppoe_sendmsg+0x269/0x710 [ 868.814822] ? pppoe_getname+0x130/0x130 [ 868.818899] ? security_socket_sendmsg+0x83/0xb0 [ 868.823777] ? pppoe_getname+0x130/0x130 [ 868.827848] sock_sendmsg+0xc5/0x100 [ 868.831576] ___sys_sendmsg+0x349/0x840 [ 868.835559] ? trace_hardirqs_on+0x10/0x10 [ 868.839802] ? copy_msghdr_from_user+0x380/0x380 [ 868.844574] ? trace_hardirqs_on+0x10/0x10 [ 868.848822] ? find_held_lock+0x2d/0x110 [ 868.852894] ? __fget+0x201/0x360 [ 868.856359] ? save_trace+0x290/0x290 [ 868.860173] ? find_held_lock+0x2d/0x110 [ 868.864252] ? __might_fault+0x104/0x1b0 [ 868.868338] __sys_sendmmsg+0x129/0x330 [ 868.872325] ? SyS_sendmsg+0x40/0x40 [ 868.876047] ? SyS_write+0x1b7/0x210 [ 868.879788] ? __mutex_unlock_slowpath+0x75/0x780 [ 868.884651] ? wait_for_completion+0x390/0x390 [ 868.889242] ? vfs_write+0xff/0x4e0 [ 868.892876] ? fput+0xb/0x140 [ 868.895993] ? SyS_write+0x14d/0x210 [ 868.899725] ? SyS_read+0x210/0x210 [ 868.903363] SyS_sendmmsg+0x2f/0x50 [ 868.907083] ? __sys_sendmmsg+0x330/0x330 [ 868.911239] do_syscall_64+0x1d5/0x640 08:20:41 executing program 5: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 868.915219] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 868.920403] RIP: 0033:0x45c479 [ 868.923587] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 868.931308] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 868.938583] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 868.945860] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 868.953124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 868.960395] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003a 08:20:41 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:41 executing program 2 (fault-call:7 fault-nth:59): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:41 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, 0x0, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) prctl$PR_SET_DUMPABLE(0x4, 0x1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 868.984463] ptrace attach of "/root/syz-executor.5"[32010] was attempted by "/root/syz-executor.5"[32011] [ 869.034334] FAULT_INJECTION: forcing a failure. [ 869.034334] name failslab, interval 1, probability 0, space 0, times 0 [ 869.046760] CPU: 0 PID: 32019 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 869.054690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.064038] Call Trace: [ 869.066629] dump_stack+0x13e/0x194 [ 869.070270] should_fail.cold+0x10a/0x14b [ 869.074458] should_failslab+0xd6/0x130 [ 869.078516] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 869.083632] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 869.089098] ? __alloc_skb+0x9a/0x4c0 [ 869.092894] __kmalloc_node_track_caller+0x38/0x70 [ 869.097823] __kmalloc_reserve.isra.0+0x35/0xd0 [ 869.102594] __alloc_skb+0xca/0x4c0 [ 869.106226] ? skb_trim+0x160/0x160 [ 869.109955] ? mark_held_locks+0xa6/0xf0 [ 869.114010] sock_wmalloc+0xa5/0xf0 [ 869.117724] pppoe_sendmsg+0x269/0x710 [ 869.121739] ? pppoe_getname+0x130/0x130 [ 869.125912] ? security_socket_sendmsg+0x83/0xb0 [ 869.130679] ? pppoe_getname+0x130/0x130 [ 869.134741] sock_sendmsg+0xc5/0x100 [ 869.138439] ___sys_sendmsg+0x349/0x840 [ 869.142430] ? copy_msghdr_from_user+0x380/0x380 [ 869.147181] ? trace_hardirqs_on+0x10/0x10 [ 869.151418] ? up_read+0x17/0x30 [ 869.154795] ? save_trace+0x290/0x290 [ 869.158633] ? retint_kernel+0x2d/0x2d [ 869.162691] ? find_held_lock+0x2d/0x110 [ 869.166857] ? __might_fault+0x104/0x1b0 [ 869.170937] __sys_sendmmsg+0x129/0x330 [ 869.174923] ? SyS_sendmsg+0x40/0x40 [ 869.178627] ? SyS_write+0x1b7/0x210 [ 869.182993] ? __mutex_unlock_slowpath+0x75/0x780 [ 869.187896] ? wait_for_completion+0x390/0x390 [ 869.192587] ? vfs_write+0xff/0x4e0 [ 869.196208] ? fput+0xb/0x140 [ 869.199303] ? SyS_write+0x14d/0x210 [ 869.203036] ? SyS_read+0x210/0x210 [ 869.206677] SyS_sendmmsg+0x2f/0x50 [ 869.210308] ? __sys_sendmmsg+0x330/0x330 [ 869.214456] do_syscall_64+0x1d5/0x640 [ 869.218335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 869.223612] RIP: 0033:0x45c479 [ 869.226792] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 869.234491] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 869.241764] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 869.249037] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 869.256419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 869.263697] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003b 08:20:41 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:41 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 08:20:41 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 2 (fault-call:7 fault-nth:60): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:44 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) fcntl$getown(r2, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000080)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r9 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0xffff, 0x3, {}, {r9}, 0x1}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) 08:20:44 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) r3 = getpid() process_vm_writev(r3, &(0x7f0000000300)=[{&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/150, 0x96}], 0x5, &(0x7f00000027c0)=[{&(0x7f0000001480)=""/100, 0x64}, {&(0x7f0000001500)=""/178, 0xb2}, {&(0x7f00000015c0)=""/199, 0xc7}, {&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/126, 0x7e}, {&(0x7f0000002780)}], 0x7, 0x0) read(r0, &(0x7f0000002840)=""/100, 0x64) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:44 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x8, &(0x7f0000000140)="08ea827cfe055b0fd3fc1f2800073a772185eef01fdff9114e253c131b0c97144e676ead6e6f119d002afd706bf3637606768455eee223dccffb85c1096f59b0133d0d26c74da12d566883228b3b2a8ca8607f3c0a94b416f15dfae0165390e9b700266ec4e36e452ab8728e99059d6b94a97c9b99cd99377acea3c6feb75a18a0744938a7bbce4bcae7e41637320ac4becc78dc6203eec579d4e2fc0f89ee12336ef6e472265e1a2355bc06d6b6141c4cafd9b14953d77d07da6f1204145561fdd9bc90569679ec066b1c2455dd7974e5df97cb81941d49e61aafb83f6d4b") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in=@loopback}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) [ 871.766035] FAULT_INJECTION: forcing a failure. [ 871.766035] name failslab, interval 1, probability 0, space 0, times 0 [ 871.777562] CPU: 0 PID: 32048 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 871.785458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.794907] Call Trace: [ 871.797997] dump_stack+0x13e/0x194 [ 871.801652] should_fail.cold+0x10a/0x14b [ 871.805844] should_failslab+0xd6/0x130 08:20:44 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x4800d080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="3868afb6ba399145f6ebdef7833d73820fd325363e2d58b09ee6d867f6147d334fbff8212ac6b3b2c1f4b055e18f671de1aa58b5c5c86044f0888deed7be871ed70a3f1bd67b274eff8b6aecd63adedf1c1da9423b4acbac11aaa4f44afc525ff0ce5d9ac0ed5575133b57277591b5714414e17c441c0bfd9e031e4bdbe797580fcb1dacdfdf4b9fd8dae50316dffcfbcc68c1d83e12d77adbbebb9046ca457718f9c4ac7df378947fbb17f22f56503e14f75fdab6c2c8849b65856beff1932290dac454bd4e64d8b0", 0xc9}], 0x1, &(0x7f0000000300)="ac89f675c1ce201312d0512de1a78f50d77293c2adeef6e8292187ea013c55625cdde989bb966eee62aa2e69861dbd8709713a2dbbc841dae87e8616fe3a9521a497cc185da4c3d1c6d0a6935d5a8b66f34f108239d096a13190ceb7146a2e55d83859034b45b92a992063c5ff02d61c2f3094744a2d7b4000f3eced5107c9f86c729d1035042032290b110500b1d8b0baa9230ad49038dc41e7", 0x9a, 0x4000804}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 871.809080] ptrace attach of "/root/syz-executor.1"[32059] was attempted by "/root/syz-executor.1"[32061] [ 871.809947] kmem_cache_alloc_node+0x288/0x7a0 [ 871.809961] ? find_held_lock+0x2d/0x110 [ 871.809972] ? lock_sock_nested+0x98/0x100 [ 871.809985] __alloc_skb+0x9a/0x4c0 [ 871.836344] ? skb_trim+0x160/0x160 [ 871.840590] ? mark_held_locks+0xa6/0xf0 [ 871.845126] sock_wmalloc+0xa5/0xf0 [ 871.848763] pppoe_sendmsg+0x269/0x710 [ 871.852668] ? pppoe_getname+0x130/0x130 [ 871.856745] ? security_socket_sendmsg+0x83/0xb0 [ 871.861509] ? pppoe_getname+0x130/0x130 [ 871.865581] sock_sendmsg+0xc5/0x100 [ 871.869300] ___sys_sendmsg+0x349/0x840 [ 871.873286] ? trace_hardirqs_on+0x10/0x10 [ 871.877526] ? copy_msghdr_from_user+0x380/0x380 [ 871.882291] ? trace_hardirqs_on+0x10/0x10 [ 871.886878] ? find_held_lock+0x2d/0x110 [ 871.890944] ? __fget+0x201/0x360 [ 871.894408] ? save_trace+0x290/0x290 [ 871.899091] ? find_held_lock+0x2d/0x110 [ 871.903158] ? __might_fault+0x104/0x1b0 [ 871.909149] __sys_sendmmsg+0x129/0x330 [ 871.913132] ? SyS_sendmsg+0x40/0x40 [ 871.916851] ? SyS_write+0x1b7/0x210 [ 871.920585] ? __mutex_unlock_slowpath+0x75/0x780 [ 871.925431] ? wait_for_completion+0x390/0x390 [ 871.930016] ? vfs_write+0xff/0x4e0 [ 871.933645] ? fput+0xb/0x140 [ 871.936755] ? SyS_write+0x14d/0x210 [ 871.940474] ? SyS_read+0x210/0x210 [ 871.944116] SyS_sendmmsg+0x2f/0x50 [ 871.947743] ? __sys_sendmmsg+0x330/0x330 [ 871.951895] do_syscall_64+0x1d5/0x640 [ 871.955792] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 871.960996] RIP: 0033:0x45c479 08:20:44 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 2 (fault-call:7 fault-nth:61): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 871.964706] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 871.972423] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 871.979705] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 871.987002] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 871.994630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 872.001902] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003c [ 872.077028] FAULT_INJECTION: forcing a failure. [ 872.077028] name failslab, interval 1, probability 0, space 0, times 0 [ 872.089127] CPU: 0 PID: 32074 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 872.097025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.106560] Call Trace: [ 872.109145] dump_stack+0x13e/0x194 [ 872.112786] should_fail.cold+0x10a/0x14b [ 872.116943] should_failslab+0xd6/0x130 [ 872.120928] kmem_cache_alloc_node+0x288/0x7a0 [ 872.125513] ? find_held_lock+0x2d/0x110 [ 872.129623] ? lock_sock_nested+0x98/0x100 [ 872.133879] __alloc_skb+0x9a/0x4c0 [ 872.137503] ? skb_trim+0x160/0x160 [ 872.141138] ? mark_held_locks+0xa6/0xf0 [ 872.145205] sock_wmalloc+0xa5/0xf0 [ 872.148839] pppoe_sendmsg+0x269/0x710 [ 872.152726] ? pppoe_getname+0x130/0x130 [ 872.156792] ? security_socket_sendmsg+0x83/0xb0 [ 872.163538] ? pppoe_getname+0x130/0x130 [ 872.167591] sock_sendmsg+0xc5/0x100 [ 872.171308] ___sys_sendmsg+0x349/0x840 [ 872.175730] ? copy_msghdr_from_user+0x380/0x380 [ 872.180488] ? trace_hardirqs_on+0x10/0x10 [ 872.184780] ? up_read+0x17/0x30 [ 872.188204] ? save_trace+0x290/0x290 [ 872.192006] ? retint_kernel+0x2d/0x2d [ 872.195893] ? find_held_lock+0x2d/0x110 [ 872.199953] ? __might_fault+0x104/0x1b0 [ 872.204023] __sys_sendmmsg+0x129/0x330 [ 872.207992] ? SyS_sendmsg+0x40/0x40 [ 872.211703] ? SyS_write+0x1b7/0x210 [ 872.215431] ? __mutex_unlock_slowpath+0x75/0x780 [ 872.220287] ? wait_for_completion+0x390/0x390 [ 872.224878] ? vfs_write+0xff/0x4e0 [ 872.228489] ? fput+0xb/0x140 [ 872.231587] ? SyS_write+0x14d/0x210 [ 872.235315] ? SyS_read+0x210/0x210 [ 872.238939] SyS_sendmmsg+0x2f/0x50 [ 872.242610] ? __sys_sendmmsg+0x330/0x330 [ 872.246752] do_syscall_64+0x1d5/0x640 [ 872.250641] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 872.255833] RIP: 0033:0x45c479 [ 872.259016] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.266724] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 872.274243] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 872.281521] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 872.288781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 872.296579] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003d 08:20:44 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:44 executing program 2 (fault-call:7 fault-nth:62): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 872.425310] FAULT_INJECTION: forcing a failure. [ 872.425310] name failslab, interval 1, probability 0, space 0, times 0 [ 872.441392] CPU: 0 PID: 32082 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 872.449324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.452066] IPVS: ftp: loaded support on port[0] = 21 [ 872.458685] Call Trace: [ 872.466467] dump_stack+0x13e/0x194 [ 872.470109] should_fail.cold+0x10a/0x14b [ 872.474298] should_failslab+0xd6/0x130 [ 872.478427] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 872.483600] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 872.489177] ? __alloc_skb+0x9a/0x4c0 [ 872.492977] __kmalloc_node_track_caller+0x38/0x70 [ 872.497902] __kmalloc_reserve.isra.0+0x35/0xd0 [ 872.502562] __alloc_skb+0xca/0x4c0 [ 872.506219] ? skb_trim+0x160/0x160 [ 872.509836] ? mark_held_locks+0xa6/0xf0 [ 872.513908] sock_wmalloc+0xa5/0xf0 [ 872.517524] pppoe_sendmsg+0x269/0x710 [ 872.521418] ? pppoe_getname+0x130/0x130 [ 872.525536] ? security_socket_sendmsg+0x83/0xb0 [ 872.530295] ? pppoe_getname+0x130/0x130 [ 872.536868] sock_sendmsg+0xc5/0x100 [ 872.540590] ___sys_sendmsg+0x349/0x840 [ 872.544560] ? copy_msghdr_from_user+0x380/0x380 [ 872.549331] ? trace_hardirqs_on+0x10/0x10 [ 872.553553] ? up_read+0x17/0x30 [ 872.556917] ? save_trace+0x290/0x290 [ 872.560724] ? retint_kernel+0x2d/0x2d [ 872.564630] ? find_held_lock+0x2d/0x110 [ 872.568699] ? __might_fault+0x104/0x1b0 [ 872.572793] __sys_sendmmsg+0x129/0x330 [ 872.576778] ? SyS_sendmsg+0x40/0x40 [ 872.581020] ? SyS_write+0x1b7/0x210 [ 872.584787] ? __mutex_unlock_slowpath+0x75/0x780 [ 872.589653] ? wait_for_completion+0x390/0x390 [ 872.594251] ? vfs_write+0xff/0x4e0 [ 872.597969] ? fput+0xb/0x140 [ 872.601093] ? SyS_write+0x14d/0x210 [ 872.604871] ? SyS_read+0x210/0x210 [ 872.608597] SyS_sendmmsg+0x2f/0x50 [ 872.612231] ? __sys_sendmmsg+0x330/0x330 [ 872.616390] do_syscall_64+0x1d5/0x640 [ 872.620319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 872.625508] RIP: 0033:0x45c479 [ 872.628701] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.636471] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 872.643784] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 872.651093] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 872.658401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 872.665791] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003e 08:20:47 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:20:47 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:47 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:47 executing program 2 (fault-call:7 fault-nth:63): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:47 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000090a000/0x4000)=nil, 0x4000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) exit(0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x99, &(0x7f0000000240)=""/132) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002d000500"/20, @ANYRES32=r8, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@bridge_setlink={0x44, 0x13, 0x4, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x12, 0x42488}, [@IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x695c}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x811) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r10, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0xfffffffffffffe80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r12 = fcntl$dupfd(r4, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) bind$tipc(r12, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:47 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x11) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x3c) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000080)='net/raw6\x00') ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="22000200", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000780)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000840)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={r9, 0x90b, 0x10, 0x9, 0x2}, &(0x7f0000000040)=0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x80, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:20:47 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:47 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 874.816796] FAULT_INJECTION: forcing a failure. [ 874.816796] name failslab, interval 1, probability 0, space 0, times 0 [ 874.844882] delete_channel: no stack [ 874.861934] CPU: 1 PID: 32098 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 874.870734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.880370] Call Trace: [ 874.883080] dump_stack+0x13e/0x194 [ 874.886844] should_fail.cold+0x10a/0x14b [ 874.894773] delete_channel: no stack [ 874.897166] should_failslab+0xd6/0x130 [ 874.897181] kmem_cache_alloc_node+0x288/0x7a0 [ 874.897195] ? find_held_lock+0x2d/0x110 [ 874.915264] ? lock_sock_nested+0x98/0x100 [ 874.920796] __alloc_skb+0x9a/0x4c0 [ 874.924787] ? skb_trim+0x160/0x160 [ 874.928483] ? mark_held_locks+0xa6/0xf0 [ 874.932658] sock_wmalloc+0xa5/0xf0 [ 874.936471] pppoe_sendmsg+0x269/0x710 [ 874.940837] ? pppoe_getname+0x130/0x130 [ 874.945055] ? security_socket_sendmsg+0x83/0xb0 [ 874.950056] ? pppoe_getname+0x130/0x130 [ 874.954667] sock_sendmsg+0xc5/0x100 [ 874.958688] ___sys_sendmsg+0x349/0x840 [ 874.962688] ? trace_hardirqs_on+0x10/0x10 [ 874.967292] ? copy_msghdr_from_user+0x380/0x380 [ 874.972322] ? trace_hardirqs_on+0x10/0x10 [ 874.976667] ? find_held_lock+0x2d/0x110 [ 874.980855] ? __fget+0x201/0x360 [ 874.984598] ? save_trace+0x290/0x290 [ 874.988677] ? find_held_lock+0x2d/0x110 [ 874.992954] ? __might_fault+0x104/0x1b0 [ 874.997172] __sys_sendmmsg+0x129/0x330 [ 875.001643] ? SyS_sendmsg+0x40/0x40 [ 875.005523] ? SyS_write+0x1b7/0x210 [ 875.009337] ? __mutex_unlock_slowpath+0x75/0x780 [ 875.014422] ? wait_for_completion+0x390/0x390 [ 875.019266] ? vfs_write+0xff/0x4e0 [ 875.023231] ? fput+0xb/0x140 [ 875.026799] ? SyS_write+0x14d/0x210 [ 875.030524] ? SyS_read+0x210/0x210 [ 875.034522] SyS_sendmmsg+0x2f/0x50 [ 875.038280] ? __sys_sendmmsg+0x330/0x330 [ 875.042448] do_syscall_64+0x1d5/0x640 [ 875.046563] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.052246] RIP: 0033:0x45c479 [ 875.055591] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:47 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/114}) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) accept4(r2, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) 08:20:47 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:47 executing program 2 (fault-call:7 fault-nth:64): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 875.064055] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 875.071802] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 875.079520] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 875.087163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 875.094975] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000003f 08:20:47 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x28200, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000140)={0xac, 0x5, 0x100, 0x1000, 0xb2}) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x800000000000, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) wait4(r4, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r6, 0x40044103, &(0x7f00000001c0)=0x200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r1, 0x1a) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r7 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000040)=""/50) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r12, 0x202002) keyctl$chown(0x4, r12, r11, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r14) r15 = getpid() ptrace(0x10, r15) r16 = getpid() rt_tgsigqueueinfo(r16, r16, 0x16, &(0x7f00000000c0)) ptrace(0x10, r16) ptrace$setregs(0xf, r16, 0x0, 0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000280)={{0x3, 0x0, r9, r11, r14, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r15, r16, 0x3}) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000300)=""/249) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 875.217216] FAULT_INJECTION: forcing a failure. [ 875.217216] name failslab, interval 1, probability 0, space 0, times 0 [ 875.245404] CPU: 1 PID: 32134 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 875.253845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.263761] Call Trace: [ 875.266748] dump_stack+0x13e/0x194 [ 875.270763] should_fail.cold+0x10a/0x14b [ 875.274990] should_failslab+0xd6/0x130 [ 875.279092] kmem_cache_alloc_node+0x288/0x7a0 [ 875.284286] ? find_held_lock+0x2d/0x110 [ 875.288459] ? lock_sock_nested+0x98/0x100 [ 875.298471] __alloc_skb+0x9a/0x4c0 [ 875.302683] ? skb_trim+0x160/0x160 [ 875.306906] ? mark_held_locks+0xa6/0xf0 [ 875.311497] sock_wmalloc+0xa5/0xf0 [ 875.315328] pppoe_sendmsg+0x269/0x710 [ 875.319917] ? pppoe_getname+0x130/0x130 [ 875.324167] ? security_socket_sendmsg+0x83/0xb0 [ 875.329427] ? pppoe_getname+0x130/0x130 [ 875.333973] sock_sendmsg+0xc5/0x100 [ 875.337721] ___sys_sendmsg+0x349/0x840 [ 875.341997] ? copy_msghdr_from_user+0x380/0x380 [ 875.346794] ? trace_hardirqs_on+0x10/0x10 [ 875.351277] ? up_read+0x17/0x30 [ 875.354777] ? save_trace+0x290/0x290 [ 875.358701] ? retint_kernel+0x2d/0x2d [ 875.362620] ? find_held_lock+0x2d/0x110 [ 875.366814] ? __might_fault+0x104/0x1b0 [ 875.371335] __sys_sendmmsg+0x129/0x330 [ 875.375603] ? SyS_sendmsg+0x40/0x40 [ 875.379769] ? SyS_write+0x1b7/0x210 [ 875.383768] ? __mutex_unlock_slowpath+0x75/0x780 [ 875.389111] ? wait_for_completion+0x390/0x390 [ 875.393974] ? vfs_write+0xff/0x4e0 [ 875.397880] ? fput+0xb/0x140 [ 875.401344] ? SyS_write+0x14d/0x210 [ 875.405248] ? SyS_read+0x210/0x210 [ 875.409178] SyS_sendmmsg+0x2f/0x50 [ 875.412825] ? __sys_sendmmsg+0x330/0x330 [ 875.417308] do_syscall_64+0x1d5/0x640 [ 875.421375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 875.426814] RIP: 0033:0x45c479 [ 875.430019] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 875.438516] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 875.445943] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 875.453404] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 875.461019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 875.469725] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000040 08:20:50 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') 08:20:50 executing program 2 (fault-call:7 fault-nth:65): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:50 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 877.843303] FAULT_INJECTION: forcing a failure. [ 877.843303] name failslab, interval 1, probability 0, space 0, times 0 [ 877.855570] CPU: 0 PID: 32149 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 877.864048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.874466] Call Trace: [ 877.877617] dump_stack+0x13e/0x194 [ 877.881566] should_fail.cold+0x10a/0x14b [ 877.886011] should_failslab+0xd6/0x130 08:20:50 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 877.890130] kmem_cache_alloc+0x44/0x770 [ 877.894505] ? __lock_acquire+0x5f7/0x4620 [ 877.898771] ptrace attach of "/root/syz-executor.1"[32160] was attempted by "/root/syz-executor.1"[32161] [ 877.899645] ? br_allowed_egress+0x3c2/0x6d0 [ 877.899664] skb_clone+0x11c/0x310 [ 877.899676] deliver_clone+0x3f/0xb0 [ 877.899687] br_flood+0x3d2/0x550 [ 877.926266] br_dev_xmit+0x8b5/0xd20 [ 877.930119] ? br_poll_controller+0x10/0x10 [ 877.934606] dev_hard_start_xmit+0x186/0x890 [ 877.939155] __dev_queue_xmit+0x1d91/0x25c0 [ 877.943500] ? find_held_lock+0x2d/0x110 [ 877.948034] ? netdev_pick_tx+0x2e0/0x2e0 [ 877.952200] ? iov_iter_advance+0x8a/0xc70 [ 877.956786] ? memcpy+0x35/0x50 [ 877.960268] ? pppoe_sendmsg+0x5c1/0x710 [ 877.964445] pppoe_sendmsg+0x5c1/0x710 [ 877.968751] ? ether_setup+0x2d0/0x2d0 [ 877.973072] ? pppoe_getname+0x130/0x130 [ 877.977614] ? security_socket_sendmsg+0x83/0xb0 [ 877.982743] ? pppoe_getname+0x130/0x130 [ 877.987179] sock_sendmsg+0xc5/0x100 [ 877.991273] ___sys_sendmsg+0x349/0x840 [ 877.995677] ? trace_hardirqs_on+0x10/0x10 [ 878.000460] ? copy_msghdr_from_user+0x380/0x380 [ 878.006292] ? trace_hardirqs_on+0x10/0x10 [ 878.010565] ? find_held_lock+0x2d/0x110 [ 878.014912] ? __fget+0x201/0x360 [ 878.019200] ? save_trace+0x290/0x290 [ 878.023290] ? find_held_lock+0x2d/0x110 [ 878.027527] ? __might_fault+0x104/0x1b0 [ 878.032084] __sys_sendmmsg+0x129/0x330 [ 878.036366] ? SyS_sendmsg+0x40/0x40 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000000)={0x800100a, 0x7ff, 0x3}) [ 878.040351] ? SyS_write+0x1b7/0x210 [ 878.044492] ? __mutex_unlock_slowpath+0x75/0x780 [ 878.049367] ? wait_for_completion+0x390/0x390 [ 878.053967] ? vfs_write+0xff/0x4e0 [ 878.058304] ? fput+0xb/0x140 [ 878.061434] ? SyS_write+0x14d/0x210 [ 878.065163] ? SyS_read+0x210/0x210 [ 878.068806] SyS_sendmmsg+0x2f/0x50 [ 878.072749] ? __sys_sendmmsg+0x330/0x330 [ 878.077027] do_syscall_64+0x1d5/0x640 [ 878.080944] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 878.086151] RIP: 0033:0x45c479 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x0) 08:20:50 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 878.089622] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.097822] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 878.105267] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 878.112815] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 878.121013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 878.128467] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000041 08:20:50 executing program 2 (fault-call:7 fault-nth:66): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = geteuid() fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0xee00) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r3}}, {@aname={'aname', 0x3d, '/\xc1wlan1\x00'}}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@cachetag={'cachetag'}}, {@cache_loose='cache=loose'}, {@fscache='fscache'}, {@privport='privport'}, {@noextend='noextend'}, {@loose='loose'}], [{@smackfsdef={'smackfsdef', 0x3d, 'vmnet1ppp0'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash='hash'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r13 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r13, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000180)={0x4, 0x5, 0x4, 0x4000, 0x20, {r11, r12/1000+30000}, {0x4, 0x8, 0x0, 0x1f, 0x11, 0x3, "53916a30"}, 0x0, 0x1, @offset=0x2, 0x0, 0x0, r13}) r15 = gettid() ptrace$setopts(0x4206, r15, 0x0, 0x0) tkill(r15, 0x3c) ptrace$cont(0x18, r15, 0x0, 0x0) ptrace$setregs(0xd, r15, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r15, 0x0, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r17, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r19 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r19, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r20 = socket$bt_bnep(0x1f, 0x3, 0x4) r21 = socket$netlink(0x10, 0x3, 0x0) r22 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r22, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r21, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r23, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$netlink(r2, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)={0x1230, 0x42, 0x200, 0x70bd2a, 0x6, "", [@typed={0x2c, 0x41, 0x0, 0x0, @binary="d0b1478b8c94e241d71140ceeec37bdb266d516b93902c74fac51f3d417511518be8fe11277e11f9"}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x1004, 0x40, 0x0, 0x1, [@generic="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"]}, @generic="84fc", @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x4e71}, @nested={0x67, 0x28, 0x0, 0x1, [@typed={0x49, 0xb, 0x0, 0x0, @binary="7460c36c5ef7a2f4df2fd0ec9f2cc2d2de0207c874eba9f0be7d070e2265c7334e8aa679ba1c6b1b15e525b32aed84dcbfd2311c355d3a91f23678ec384f26cf05df4046e6"}, @typed={0x5, 0x53, 0x0, 0x0, @str='\x00'}, @generic="b78230999596d139901e2a", @typed={0x4, 0x3c}]}, @generic="8ab79f8390f10bc8245ad32dcbff3da88a8e49367e160e7d8925a1bb14924862feeaaec0560a4664bc7544ef9082e4a08a309b3211cae7666c8592165a1ac8005f0ac828ccec12", @nested={0x12c, 0x71, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @fd=r4}, @generic="9bf56b85fe94ca69838622b479d6c6b37645a6654f35f46ef293c25cc310e2f210584705eb697ad1fe269c44b761967f6c4a4df65ab637a213ec899a3cedd1b322baf320c9aeaf9c82a4d230696443d369214419add7160f2cd7034a772c72a437e83403537cd6d6449b71374029b4e2eaba4616b9767864154517ec53f2ea168c889bdebcb5170ec5369c6a79d6e36cce36316cfd659484e3b7727b974fada4782712f1bbc290458861baff61ef99e9edbce93b31115fec60", @generic="15765d205f87f4345bbedcddaf2fe374ec42f43830c2678b21ea2514bbd9bf8e234195b9f5c46384efb3d14f2b7b033d7217fc23c66fd8628a2b7371924e640f86a066553b77288155769d5a0f216f7c012d451bdf50eab9d173f16dd9ed09a668e99b5d74a648"]}]}, 0x1230}, {&(0x7f0000001540)={0x28b8, 0x24, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0x14ab, 0x68, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="8eb71802bbc5307aa0c6c96bce11e62de565387d558ded18aa1bebfc30f42e26318f92abcf0ad2d41b5081f5c333cd7f22aef6acd13cfd3db5c14e53cb239965abda10f9c38fd14d90c728279ff313ac5f210123459bfd9528c6cd4324cb83c7b7532250b3f5ad18f080d19fda5b4fa377ee30e8e865be5a1dd4510d3a969eb95d1a5983568c0bbef5ac2fdf63740e236e0130cfc707b360f8d861761298b7dffc288587b6ec3da6bdf1c9d54a2b62ab42b3b6625fe64de09b162c39df499ca2f8e94d8ad8d4bbe6dad3", @generic="4e8f59bc6c8fe30013808ed0c9fee05b51565dcb14442bce7185adf3866d551bd662e8680e277d476132c635efec7cb73a5e2b30e200c75556f725fbaa", @generic="ca7c122c2537854d08bc8b31d868dd5758ac231ab7185a3748adb7c759b86ea00225988a7562fccd14247fac3160aeccc77d44ac94532e94064050ba8b9893ef3c5bd98f5fbcfbb40aa68bc4082c3e6db6df679f4a388dabe179b94b3fd49379c136fc9e9abff187e562ab7d8504b5574dd7e7f32593a90ffa577a1dae19da6ff59600a8f70447403fc83ccf54999069c4db2399cc219057bc3b0f1fd4b510a6f60da421f061b6491e775f91e30685af09ba85edd86dab26c36a3c936c6558", @generic="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", @generic="be7c426a166293c01b2bb8294063dbf939e3e89aaa9c15e2f411dd5560b8909bc9169943d608b23837d22450fdeaa10ab8fdd2940620d85caaedb1a06dd21e53e471e54f2de26c77cd213ab840998d1220f7fbc34241f8f20c9ba460fa7234ed36703096d1c76fa9113f44726d0d", @generic="cd491e7c17f097032eaa219a5576222d049725b6afccb32fbc0c5439214261a77b8ad6e921690f51dcc7743e7cdeee0a7fb78fc183f286d50b8e9f747b42559da367ea4b84696c81e164fba7e898f51262fab5f286b46006caceba6cc4a54836f0fb9205ca960b763719050f3dcdba299efd2153e1febbe0c3ce0cd2de039a8348d7e6feaf31758d6907533cf1f49094a0328cc7ef248fdb73ed2c34707b700d792f2c69071e77a4a6e1defcfe3c49fcbe6717dafd726992f52c4cd463823503c3144ed8a3b433c32d8e339450167bd7cd7c174f61e946c28e86961c6352eb61bf3e7d1340d2786961a36d9feb3e222d", @generic="44cb85e2b4e3927c7850eb16db6f66fde88b0dfd0f08a916c54501277df1eef55ef2ab68204834f124a65c81d8cb3ecb4826df3681ca3a61ded5aa36ee4992ca8e784cf137737e284765e77fb339b25c2579301856d439dca0c0f2c2680c39bfcee9818e054ae669fec72d4190a5c44dae3fb7f56673cc23101a15e1be6ae3c7cd35369e1abeceaa3984fbab66fc208d44e674d4ca77fe5d", @generic="578742e3507bc3f37a7a1e66d1872651375a6517c1bbfd9b9ff0e4c0b94cec14f90894b8ab06e72606b6e2cbf5bbc9fea2a0d747c708b5f5a86d7e2989319dfefd5a249837ee3badde5c49d850b70ecaa9db72105c5db71ca3fa153db530b6d21068a32954e0a700eda3218ae4d07be578061580d6355aad79f39238f33409ebb52c74b33d069ac444cf3459a700674fba244f85f516374f5656d2e9a1c442fa41f2be1a6cadb49eac57bc827bfb6be7ca2ee90dd40c866a588ddcd4799a7b531ef0e4d08424942341589a46a7eaf1d4e390b12bb6d7be8185bcaf"]}, @nested={0x1e7, 0x92, 0x0, 0x1, [@generic="b272c80544527cbd5d4841cde83745877be2330c261772062b1e8be211376c4adf581673d874eb78faef2c2ed4e530745cde1a0eba201c649a541a0a47705da169bf9f2d7df2354be90326bd759df39d3ecfe8da32888328419df89ba90670d66c3c8bfc6734388246310a96e61fb03a48649c1542ab9e5f490efed84c8146f817e7427126ac27df8a97d0935cfe1ea593840087e20dc4e1366d2d5bd4a7c33f6e20de0c56b73fef7841c38ce1bace87715e67eef716e22787a166d556ff7e12e4dc680505162e5b01313c2ead802c070dfb292267398e14b05a82529f92681f3b1f584dc985", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}, @generic="eb1851d47ea789a88227a1cef1a190271bf6c22585f312a1dcb173b0edd4a6daef886b06ef13cf4534287dfbfa0a7a720d97253fdd7bb05c414fc31e1935b734cb37538533affa18567336bf424819d5e762ad095ea2c849ff66c41535e3af4792d3f3b5cdcaf4f2ac3c0e5b0c7a215e2e33e924612b3d821eda3b4d6a99bd91428bc0c42a82865ad9992a58af35243c93e3f8c461cfbad5e72137ddd8a18e5d3aa52f744243d77b8305d5875f79bb50e0af64b87e353511ca5030be98a910aa55b599131178b1c78e992bd04aaf1ffcc2c0be9998fec48c73a37827219199bcd72797fe2a861cd6ad6dd02998", @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x10d, 0x31, 0x0, 0x1, [@typed={0x4, 0x12}, @typed={0xc, 0x80, 0x0, 0x0, @u64=0x5}, @generic="a1c73f89092f3368cf12c2bab75514c32055b08cb559cf73a4f5c52c880a10629f457f82a85e65c11fa808aec805b0e986b999dc30e62bc4078ebe42a8d5d3d99f433be51836dd3a2702c450303cf79bb32b3834b8f08f19a039d0345e08b0443c74ee68ba9364de71327cbb86aff059566b8a4ef50872bdf04558f77d4ddf6b172a33898af77c051e8093868f339b00b9746e2043a47039ac43d309f002b11adf3b82a1bc6c49941044e2d7fccb1da75fd078c9e28f6c5ff1ca9b210acc98714a46d36bba606a93b745e3b7b12ecfbee21bf4530154291fc207612de802578d05606f8c7a7c9180694596a3b3ff66cd75", @typed={0x8, 0x94, 0x0, 0x0, @pid=r6}]}, @nested={0x10fd, 0x2c, 0x0, 0x1, [@generic="24388dbc4fc5f0864bb440c6dfd13e7044bfa692e4bfc2dc43ee69f3620c6195dff5d45f31f85680c11c1d6dc083b4983f31c560881a406cae7ca2", @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@multicast2}, @generic="9229b1453b20f80064ced314d4fc0ef3ec55183b09bd6b879f9578b6c7ce133e9b196f28668ae69c1d0a722162d150066c2a1e46ec49ffd8841e935176c88c6edf605a05831a57dc43e612d10068864fd08e3a794fc0244e9f7b592d8d38ab4c3bfacab87d53c84aeab4bd708454f21cee0021024242271f2dafe55e657e0f4cab95", @generic="6cff9808c234160541759308a4dc1e144189760143ceb19a29646d4a42461354422a84eb84f65d82d9e17f47668d81ce", @typed={0x1004, 0x17, 0x0, 0x0, @binary="bf8a873fa15f1a3916ac23610349972bdd5f4badc066719095445a44b1e81790577238971515f9992de413900a724b29b5ad5c2de89dc2d89eb31d4030c538e80418b5df5727fe3097e7cb84a3b15b4d4253430b11a0b28c452c7bfbf8ff4e80c22a3cf9dc7560d93944442168de6d08f9e05804d2b7b3ab237f0909dfbab8421225cfd2abde562e932822b5d675edc1c2aee05cc19a510f1f32d8829ea0b2ad27e0b02badd27d9d8de1174f7e5d4d3d79169423a7cb7761250737001f0b5016e9f33f406593ad26ecc8fec9d8afc54b49ff43e2012a632cec219d02396b7883a7020ff2a7aa15c9d01742a9c5f664eaaf0db986867db6aa12ec94d0b99875829590c5b6bcdc8b4757bccb4709fd73f36012929ae6063ca792f4d0941bc62697117db18a5efa4b6739fabff19feec578dfb3640989572d45b5b5b169cb116d5f79b9c0835eb93bf7dc53350dd5f15309232950429ca6eceeb6e39c0c4a83839abe8612ea9df55f7469881ae5ee5b0bb016a21f10590d6db659fb60628e296121a038111d655ad2f417d1fcabd44da520bcf4218574669d6130c2949337689f9e06fdced85d26692524f32ee6768bf5cbe8319e1bb24c67f55455af2a8d1977bc66dfa17abfc5d6e98287d988068c356f5cd63c3e19e9b2417762908b38b7101f51cd1a9abe451076fdec8a23520afab2fcf7c3334046266ef65d50edf600f12ea32c6082d17031731b974087eda7989684d7d2ecd5e98b71a6bc3adb94b49301ac907f9233eec870be98354628246a02b525bf3b00603e1a18d424245ee9300b8c34f58f8d74db24a2378f92e91377fae0474ae882eed0c2e54259c80111a31294ab68f1a2b6df039bd9459f56e2ae60fa0934d3500e86f5b8c4cdcbce06eb63224e39342553a79b9b6d8c6ad4da5317cffc65fabb283370a734122c700d36a93972d478ac73963548fc46384593b6e1f14a09e0790fb3ae519fef27e6c40bb7f5242a7a901226a13a98771809fb22709dbfe473327371f9688c90b943bfce47942ca9e71d7018456a9a1766012579d2cd3129dc3510552fa8d66e29c305b72293ac237005bde4b4500eadce4b433e6a443750084d48d2567b529760923ebe828ac318387f830f7739a585138a5900dd01f07381bc971ab4925b9a6fb1a0a71205c41866e515290e315a7eea1ac2d4df1846ba7c0c431eed103708482a5e950d8ba6fd06c40e36277fb18963c67404032426454ef8de5e72f76b6e61657c79c0deab9393ce9c75bff078b56db9937fcb168757c38c53985c514cd6577c4139ccd08f7fc4b3f61f0fc4dd42e81ec4165ad28ab5701e99624d18e40891bbc82e74680434a6d6d9841c376c85de82f274215a14358487fec9809c9afb06416a1cc2a9aedd4ace056789cb64386507e9e08b3cb6b11d4ebad14807fe2d4fcea0c37fd09c0a87039e367923d7bde5b4b9d09f5331c8d6bd6db3380900393be8c200a54ae5b210ce233254de54db9eecc7ad1b58c602312231c487daca30beca9b7951aa1b8b31c6cc0d18a01d7eed79ab53a40ac8f858ad0c84206c814874eb0bf1770c79c88ced3eb7398551bef6f0c3f51ae45e92d3f05080dde4b98d1e175976b194a4b8793dc04f1c0a2db29685d07e2ee69de794f30cb68d94159c1457e99e0bff0b16e43767773a94e1dfbf6af43c1a141a7802b384b905511da543fac1d6aa053b7c5727fe9cfd265e835f736a29287d9dd784b55ccf3de0043853e46e55966f93495bd72f9a65ed2805d0e09481ecbf0ea9997201750fbede91a8723d9219fd102e5d91e5ef19444d3772e38582b5c9d97c8396b64d871912fea3a9bf70c6c47eac59e8e30eedd1811842360a329d652e59e4833f1d9ae16f0d1f5dbb0f414701ae1fa13a772e21f13131e3446d4683d4f8c0421cfbb6ee0f4642f230cee6512d38fe1691c0d52f194f93b82a7635af5d8216d5bf94328c1cb25134af457fdefc97125700c8b9826acc1878183677a1072575105875e277a59c63372de383f3fe03ccaa1c1ae7e812ffb7d72bc9b752ba882328555488719c290a1e0001c8c012213d11eaac38b7db806bb8fec4fbd14b8974368570946995bfe9dbec2a07d41130a5202a1cbfb69671f2e664396b1ec757d5af708becb2c37f82121a61527c3fd35d8f911139ec00c6af6d899765a3b2804cf7f33208fd4ddff23b11f9eabafe80535d1bd285f49ef081951ee0cadbf9033458b263aa88cc8759ad53cddb4c437827eaebc9e8ff19d415083e464cf8f91ffdda73827e2d4e4000d2a7c33ee38d5bfb5f78951f8dacf4fafbc3d021181903f56bcacacad568543756b9d0c01b616d503a0714738767bb9f19e1ca9e46e02eb9441c87a284b22897b3f169e1932c38ec411e701500f692160f8ad1ed4beb56b1d92f3d87683087eac3c8a3d6301a467561e08fdada30931acd131be62653e5128d91c790f244f998c52eb0599f89c4c73485a17ac11c2c44ba591b10a5bba523b2d6b8b0d553abc8dc8570397734ab8e3c26ab1fcd9183ea764e34756df44286e1499663579244c07043339ca01f09a74a93f1596681ac525c653a7687928235af2c58b3892cf2d5efeab5505e2555da63f21750d28e9d67ee2f3f8ceaf5dcea2860fb87c690c247529b57445c2657b1e3ca8cc7cc64c12485545d8d186010f2b2ad00af318c4f9eba6c8a959fc473ecd97ab89b4bedab8a42885735ee7446f19057a1f5e39587185a282312a0f500d0f3bb4ba893b5e40bdb2138edb58ced7b083dd45f2547398447dd71221b84e96d429a046ca0b8c4401439fe5233b2311c34f6131bf68c82c7c91393f9e2bd653d12564b49fabf5c71b0fca65260c5fed51fa96819205e7f63719ddd0e0ea9885040cdbea0c2d40a82f4a53dc2f3ff57d4e391af1dbcf69ba1eb7817f5888f3253718d824d3ed8fdfdbf353f04e82a93402dbb285bef256b873f876c0e87b838a35fcbec0f49fb1ed9392955d317b5fb044beedec9145210af814f81bbccbd526c7c3a9ae7888d3f2fd0ea00faf7dd734ea416d28a14ab57fc357e3f178b98b36d0d8532f44d220de5bc9a37658fa2f8cb9f3c244068d24758de0f64a379679b30dd593fa00fb8aa8f56a1741b0bc0f3da43763a78f7d4b5b6b39f5f1b7a10874cf39e5c610b1a41344817ff893b1f7a55370d64d9d5f5f01af9e4f919b3a1036b2348699a83b12c9ba994b1dada1077a95999f8cffc235710631add3a7f99b140f390bf6810b2758fee428a28fa655a617f7e5426d14abfcd4b977c6ddc3a74b8b4726b894d4f1169b5065e3e486ea1bfe4381e74923870c32c708ede8eacf2c8c5cf36e9771c6a25e15a9711ca2ddbea7a187cc162f4c4fb5fa962cc08c344382bf60eab5b973d87feb6c5efb00f4434b5139df179cc4db0730487a11a0185bee19670390bc1feb36270f4c7a90ecd639a6638bb2140f8fdcf71eb968ae47d5cbeb78cf7cf053935871d9c4f995551c490d8e00630d1fffd2aaee6d1426271d6a4cf3d06ddb8f93a0b102d777b8b0239f9f34d8eee5bb9fba1d2ac9e4eaf0c53cfefa8afc6808032a3501ae88ef99393c2c43d4d300aca87c4cca652cfdae06a65a4428c85e12e32329b0792c66c14b97dc7efe5af4937bc6d5f65a6ade4d39dfb83eaf5df968ad30749e9b0200e56a8afc88e6216d017da7c480041fbadabb31630821833efaa21bfd2c2efa38d8111712ee95648f77fdcc2be69a6ba527d1cb738b83e966c77b8a09c6c56cb5f9827c9db13cba2f639280015ab4d7ee262b6c13761dcc977ca0de5b2086fccae41b27909f15f5e77493d3ace7f7c7fe1b22d2f867582b7401931262545024b86e8c84b9c80a04ae0b4bb8509d9680decc1cefe2abf68937000d0e72ba9ddafb5b115ec775a52b234b52fb94a27b9102ff810be2be79ab0fb407596d8383b41477aab90f43010820ed85e4108f4934f292a70ed02654c05db99212839e8b212c2b524e09f1d39613a97e2d291b782a34eb90757da29fbfff17e7fd36ce9a1c5283a0aaa605dbfeacfb184b801639d5224797af118621114426cc06f2e22da527257044d0eff7e3b8b000d3c9d0d418855ce75a13197f908bd866d1e4de7630c15b4fd9a0c5f8a89553ac3501d0a499140184d9a3565611ab460ee2f5f53f4bb1fa247eee0acf3143a3af67d7490971bbe760781b0f3687bc99c2b98d2e049a95acc2c45ab48d7777b3b78db88f14dc690be14bf5948dc388767b3714af88977522077e19c1c3935e12073d46ecdc3df347392ab5db06513b0e8179fae11d1c7de929376f7e708dba8f90fe7816ec31fbfa338621cecff16bc43607cdd578ee8a1eeba48cd09961e05d8c4cf0f0b2a1583995af41da5fbf25a75a3f2ff09330da688b2fba5681756b9ed1f52800b3750d17c09fa5210243f6b0254d5d2e9f197e5b83c3f2e66931bdfc9308c1580f2b533ddbca98f9b84606abd32a9442fd3ad9d0e4c3c911647424079f4cc84f39548dfb2b08084013e201328420d39cd2b57e8e8c71529987b31318edc362fa04fa266d3b87770f8e0e2be5cfac83f6334259dd0e8366b063c5ffba55fe902789b9b27778364fee9de44ee34dc1547dfbdad5eb788efd325ebd371b068c81d98766bda08e2ae4278e5b1ffee0626dddd9a7120e7ec9c9dbc0fdc5dee23e61e2a90b3790cc119eb799f49f4da1f342c84ba490888eed5e3bd36e0cb78c9695546647baa6fede508369c071fd5c0f078ecbadfc69986d24e705730a8892fed1ab91a6206b646dee23f1813962e83f78abb4d7fca7c0cfe2a63923218c9445dc965391bc155a53ea47b6b6eb500f26a74c892b46b57bd5bc7c9fcbff74c90c460c6d32166a56626668c1639c0bf4d61b525b9bd82ea5c10dd44ec0ed197e04370d71f4fd062d9e0783aacbe9df1fe0a590af3c2f96b21c677ef346be2cc9897d580ec89f3127219cd640ff9e669c4add16685b05024118fc38873337fb184f91f9070fdc5ab52bd54343fa0335fe0c71c1153960e22f6c25a358c20ecf56b7ab674f959e728689c900538d8798886f5c767d4eb7fa6526c61c3f01b846db6a8267a4a4a071c47481ebff6bd487ee91462dfbeb69c21508901426b7d2793a92ebd3cccee525945e383b3830819c028ddfeec80f8f5992c3ec6eb1bc10ca51605654edb0c2203df29ea2a794f76784621b4584eda0a7c9e72483b9a70477ad001759fdd154ec64bdb01c3bc56359b3f8fcd93d479a919a00b8e7de2cf26df12cd6ded758a398ce4af2001845710266cb32c626e05070ca108460b568b88ce7e138a4bc0269fb615b062fc4f9f291575ddc7a92e8a983f4f033015a74f73da3548a166ae646300a5969102a9865bc1bebec64ae859e68dc07b56d066712e0f9610686bb3ba6ac69967bb3b184b7ce6beabdeeb9a9729cf5ed3a3cc64347ed971896e6303fc62030a50563f08df4f6082fd87e427a8028f0c1a6d0a93676eb04707acd84b98be7ed09301e7f46a6c2eb9860c57aeecd53ff6e2a09290e0f63ca747078f9ffa05b7b218b765340f9b2cda438a2097e49411d8c3e7200b44c73fe29b6819d3f94af761a7a8e442b945076a49ee307ea4aed499994b59f364e064885a48e8f6da2ff0f8824ba79178feaad79d89ba6c4007458a0f12b3349c2054833619657e2f5aac4b4684b27a0c8c7b39f3dc1d002b7d5d12dd7a5ebb47ecb9d9d6a49aca952ffe66b590464e670fc03ceb6d5a23304ebf1083da7d107a1e3c042f96e699"}]}, @generic="632d1af0"]}, 0x28b8}, {&(0x7f0000003e00)={0x264, 0x29, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@generic="53217493ced9c9728790d459a18ef8e1ec5455", @typed={0x4, 0x4d, 0x0, 0x0, @binary}, @nested={0x1c6, 0x80, 0x0, 0x1, [@generic="b096143edc86", @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@rand_addr="14dca881b97d51d401bdd46a9f01dc5a"}, @generic="b153447b26d06f1a9b8162ea14626a4cee352785bb1fd0fdf3b71c4dcf610c2509428746c9e1eb735c2ebe6e66689d1e14b03deb65c78f43e66e753a8c02aa156676388f684088abf91f93821e22c1865c7daf92ba324ff2c93914a036b5f1e22b49a769781474afcf0af43372167547218ea9d9e2e45cbc336f30855ed421a18bf0319204eba1c55dc8b5440d8e17d3e240a53cdb81cd643c3cef0da690cf108ef3453e5a560dcdf9a01941df023a25d38a27a99d587753c60a24d18250ce484f9320", @generic="c77a14d1a330b51ed9d65d5ee0cfccbbd91f541cfd66e1da84c71f82885b959dda6673127f534c0de9e3da06a0d1b3d8dd21aca87b54e487d119ff4f5ce5e47d6d2f0df7c70116444c030ab8ff1dc6be8f", @generic="824ade7ece980675427f34a7f510f3d558aedeb05849cc514a16e5c4e6a32674e624a37604caf8583a5d82495ca1", @generic="9645d1c9e9f802df5163618a7f0da1c778c5d868c8f0a66cdf105ee1238b63846d949b96566a86928f60524365a752569cc4eb151f1fbe17644623eca2474281e4b9fbf57625c109961034464d11a34c67be191b920c", @typed={0x8, 0x46, 0x0, 0x0, @u32=0x20}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @typed={0x8, 0x4d, 0x0, 0x0, @fd}, @typed={0x8, 0x70, 0x0, 0x0, @uid=r8}, @typed={0x11, 0x28, 0x0, 0x0, @str='--}(*+:bdev[\x00'}, @generic="19750311bf869ef903b70f076e677f050b70d5d59576ced2fdb88f92bfeb8fcec9ac70f95f38ffc3529a0f359d4448f82b7b096e8093ba3708b9eae0a479831ea85e9bda91ca8b0e5c23ffdd412d65b8"]}, 0x264}, {&(0x7f0000004080)={0x120, 0x1f, 0x100, 0x70bd28, 0x25dfdbfe, "", [@nested={0x3d, 0x8, 0x0, 0x1, [@typed={0x2e, 0x14, 0x0, 0x0, @binary="0d2450b3509a84aaf26fd00deeac838acc5767baba4a36331d7033cbf8c5a4b458f0b3aa0c49e570330c"}, @generic="138d6d9ab9063f9745"]}, @typed={0xbf, 0x51, 0x0, 0x0, @binary="0e70b2b315d856c7f22fd097c8cc05366eb73d6a5f13bf7a333f734acbdd5adf1306073a5ab518595cff07b76543918a14fe70331b0a9804d0c06d324f5ac7e36bb3646086cbbec619943ba2095e845eb691cd508b34b5e281a4a2e4d2e475175d1d8ff009a30be88fce26c5d336d63b40caa9eadf56c28b7e2839878411986055e4e1aea32d4850e020d9265d5e69b1541c76753e2d22c3734614a172d14d38b004ed04e344a35e0652c6ee158075a7e02309e3ce9ac10e9716ae"}, @typed={0x8, 0x2b, 0x0, 0x0, @fd=r14}, @typed={0x6, 0x1f, 0x0, 0x0, @str='(\x00'}]}, 0x120}, {&(0x7f00000041c0)={0x38c, 0x1b, 0x400, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x5c, 0x0, 0x0, @pid=r15}, @generic="fbbd56d63a4c54aefbaba1a71c835f86980b3460232af0fa72832e8010151d0cb815de4950bac899d431b1ab1fda3262923c92213ec4996f4d91c729fcdd5a4a510e61aa8fb264c6f07d623c48d4a8ce786843ba8c74c41cf956e09207aa2615c80ebfe6cc36a55e21826a4c3a717e638994181b475f2d0a9563609b3c0e48a6c3aa34c6c1c45eac82aa4fde930cdfd1ace27d7aa32a01f6315aedc5d93f274bef21e6c61d56a4fe7476e06a6762fe", @nested={0x2c3, 0x87, 0x0, 0x1, [@typed={0xbe, 0x59, 0x0, 0x0, @binary="b5cefedad8ed7e4b87c826eb677f4e0465caa8493824b6ccf9445c357b9d4011256f76346c98a67e336126eb331977ebf9fb26b8e5f539b33ebbcaf9cbb6284ffa0c4b7f8dff50905be74c607c0fda1595ff59c9b5140135757dcffc074307380e909768d413c97f4a9c75bb4c67c3523a8f62b56d83bf39e4044ccea6f4f9e843b00a4547edac4cda9d024c33d9f65437c6c7773148c85126ed2efca25b2c40ab5e9ff208a682e00b8da70f8a42878e581be046310dad29bcaa"}, @generic="ac9edfc24ae067e464449111a3fd0306b04c02aa6b23f388812f4cf4fdf2fd4864fac648c940bd5fc9bfb370a5e661678da1000555b30f223f8ce9dce94848da9d674e3093c24774d9938166dcbb77eec200afb20fbc6ce345b506bc1d808f7ea992cc30", @generic="4a0528e45f8d9714db0cc1d2226f6a6c7d61d458bcf3439fa5b18d5a6542cfb88436d6bb000c6a6bdcd46655302d91123e763520cd400f63648663ecc7fd1b4d8fa149352d92b5268e2c5fd97cf9f991d60bb0ba86be1c51bbbdc04e902fea14a0a7f3b1c888a5fc89462ebb61e71545745126e6bf34e2d5b4aa0e0013cbdf4373f2ce09b15b28f438750b81c9e30219050f8c9ebd2c96fa9c6da26c9a0fcbe1dedb68caea837fbfcdf7cedca3", @generic="f8ab8d406e6bed4f12685adcb50e311371eabe78219dcc6a668b1e863b0ce53a143f5bc65d97bbaf7026746e37", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@local}, @generic="5d9d58aad474d08fae837f222288c27411bb3f17322448129cee2c71fb2336f6328b660837ca012386d88636c2d2df29c66edfe25ecc3cbabb3ab452c98425a579ac68f443dd990ea3e42520abd2402d1dacdc9a069c21884c8e14c82f2eac24ebb3e846d4fd7fb0cbd3c64cfea29345149f77c437329bee9f35084ab6e4783486689e535b72ed7d7fb1f5f79691ad486138a6a05b9e8762cf0ef86ab304d7b628cd15b9f1c2ca10f5626102c9"]}]}, 0x38c}, {&(0x7f0000000200)={0x3c, 0x39, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@generic="14", @generic="050795add9744862", @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x40}, @nested={0x14, 0x20, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd=r16}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r1}]}]}, 0x3c}, {&(0x7f0000004580)={0xc4, 0x1b, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic, @typed={0xaf, 0x87, 0x0, 0x0, @binary="da91d5ebdd86dc35a584a2129c1ba49841df999a6d095c2f0b60637588793934a2f127bc67d28d7a137e058734524e19fa62be4ac7abe1128be51624a43523d0db6d7fa84edab09bad3738d8ad46376b83cb7a6385b0c0694c336dc155c3db22e95caa669f5dbc18d426c5103fa75cf44c99e9e142607e4c9e81f36f346869bef2bd835ca0ce37d7c16f6c8df309084e3ef6664c5a6057530d01503acd3062d453c43205f52d7aa8ba549e"}, @typed={0x4, 0x85}]}, 0xc4}], 0x7, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r2, r19]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r20, r21]}}], 0x40, 0x800}, 0x80) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x10907a) [ 878.237860] FAULT_INJECTION: forcing a failure. [ 878.237860] name failslab, interval 1, probability 0, space 0, times 0 [ 878.250675] CPU: 0 PID: 32176 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 878.259794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.275589] Call Trace: [ 878.278217] dump_stack+0x13e/0x194 [ 878.282732] should_fail.cold+0x10a/0x14b [ 878.287152] should_failslab+0xd6/0x130 [ 878.291755] kmem_cache_alloc_node+0x288/0x7a0 [ 878.297019] ? find_held_lock+0x2d/0x110 [ 878.301285] ? lock_sock_nested+0x98/0x100 [ 878.305909] __alloc_skb+0x9a/0x4c0 [ 878.310094] ? skb_trim+0x160/0x160 [ 878.314081] ? mark_held_locks+0xa6/0xf0 [ 878.318185] sock_wmalloc+0xa5/0xf0 [ 878.322190] pppoe_sendmsg+0x269/0x710 [ 878.326368] ? pppoe_getname+0x130/0x130 [ 878.330984] ? security_socket_sendmsg+0x83/0xb0 08:20:50 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = shmget(0x2, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = geteuid() r5 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x0) keyctl$chown(0x4, r10, r9, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r12) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f00000000c0)) ptrace(0x10, r13) ptrace$setregs(0xf, r13, 0x0, 0x0) r14 = getpid() rt_tgsigqueueinfo(r14, r14, 0x16, &(0x7f00000000c0)) ptrace(0x10, r14) ptrace$setregs(0xf, r14, 0x0, 0x0) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000280)={{0x3, 0x0, r7, r9, r12, 0x49, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r13, r14, 0x3}) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r16, 0xee00) r17 = shmget(0x3, 0x4000, 0x8, &(0x7f0000007000/0x4000)=nil) shmctl$IPC_INFO(r17, 0x3, &(0x7f0000000040)=""/50) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r19) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) r22 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r22, 0x202002) keyctl$chown(0x4, r22, r21, 0x0) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r24) r25 = getpid() ptrace(0x8, r25) r26 = getpid() r27 = gettid() ptrace$setopts(0x4206, r27, 0x0, 0x0) tkill(r27, 0x3c) ptrace$cont(0x18, r27, 0x0, 0x0) ptrace$setregs(0xd, r27, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r27, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r28 = gettid() ptrace$setopts(0x4206, r28, 0x0, 0x0) tkill(r28, 0x3c) ptrace$cont(0x18, r28, 0x0, 0x0) ptrace$setregs(0xd, r28, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r28, 0x0, 0x0) rt_tgsigqueueinfo(r28, r28, 0x10031, &(0x7f00000000c0)={0x35, 0x20, 0x1}) ptrace(0x10, r26) ptrace$setregs(0xf, r26, 0x0, 0x0) shmctl$IPC_SET(r17, 0x1, &(0x7f0000000280)={{0x3, 0x0, r19, r21, r24, 0x9, 0x7ff}, 0x776a6f04, 0x200, 0x8, 0x6, r25, r26, 0x3}) setgroups(0x2, &(0x7f0000000580)=[0x0, r19]) r29 = gettid() ptrace$setopts(0x4206, r29, 0x0, 0x0) tkill(r29, 0x3c) ptrace$cont(0x18, r29, 0x0, 0x0) ptrace$setregs(0xd, r29, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r29, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000000)={{0x2, r4, r12, r16, r19, 0x5, 0x9}, 0x8001, 0xb372, 0x7, 0x200, 0xffffffffffffffff, r29, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 878.336314] ? pppoe_getname+0x130/0x130 [ 878.340581] sock_sendmsg+0xc5/0x100 [ 878.344691] ___sys_sendmsg+0x349/0x840 [ 878.349157] ? trace_hardirqs_on+0x10/0x10 [ 878.353739] ? copy_msghdr_from_user+0x380/0x380 [ 878.359046] ? trace_hardirqs_on+0x10/0x10 [ 878.363922] ? find_held_lock+0x2d/0x110 [ 878.368627] ? __fget+0x201/0x360 [ 878.373037] ? save_trace+0x290/0x290 [ 878.377497] ? find_held_lock+0x2d/0x110 [ 878.382008] ? __might_fault+0x104/0x1b0 [ 878.386741] __sys_sendmmsg+0x129/0x330 [ 878.391398] ? SyS_sendmsg+0x40/0x40 [ 878.395473] ? SyS_write+0x1b7/0x210 [ 878.401091] ? __mutex_unlock_slowpath+0x75/0x780 [ 878.406915] ? wait_for_completion+0x390/0x390 [ 878.411891] ? vfs_write+0xff/0x4e0 [ 878.415708] ? fput+0xb/0x140 [ 878.419042] ? SyS_write+0x14d/0x210 [ 878.422812] ? SyS_read+0x210/0x210 [ 878.427606] SyS_sendmmsg+0x2f/0x50 [ 878.432677] ? __sys_sendmmsg+0x330/0x330 [ 878.437123] do_syscall_64+0x1d5/0x640 [ 878.441326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 878.446998] RIP: 0033:0x45c479 [ 878.450813] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.458729] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 878.466782] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 878.474705] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 878.482919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 878.491391] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000042 08:20:53 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@remote, @ipv4={[], [], @multicast1}, @ipv4={[], [], @local}, 0x9, 0xed9f, 0x4, 0x480, 0x6, 0x2}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x38) ptrace$cont(0x18, r6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r9, 0x8018456f, &(0x7f0000000140)=""/194) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r6, 0xa3, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) 08:20:53 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 08:20:53 executing program 2 (fault-call:7 fault-nth:67): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:53 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x182) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000000)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:53 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:53 executing program 1: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) syz_read_part_table(0x0, 0x7, &(0x7f00000013c0)=[{&(0x7f00000001c0), 0x0, 0x100}, {&(0x7f0000000200)="d495008b0a54d872b5739c02022c4f261d7af181abd9f8d9ada6b95e3d3f62df9cb30ad8d2b5b6a0571bf05b791dc2339c3e4aa49dd80a1db2c66f7a9bef737b9a867252ba2d1f7255fad117d374ff218f8af8b9145142dace944252a3e4543a2f59", 0x62, 0x5}, {&(0x7f0000000280)="6203d273f91edb724ea7bbd2da38506a6eb2e6aa7dc3d93368244758", 0x1c}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="cfa715ff0889b6c859a5c1f038f2368e41e7c655341b1636ad90245d3e7ee497250194ad193334fe39a9b7f9cb467cabdf48bd7394c3d470f617d800e7ce09d2c568619acf5ced25244feccc26d70f", 0x4f, 0x66}, {&(0x7f0000001380)="0f", 0x1, 0x2}, {&(0x7f00000015c0)="580cd78c9ce81a3a8b71f293244554377572aaba93b6acbc85bf05206e80274879cf57aa01552e2826469986e3b75ececd96f9e8ebf77262a5a4f490c57415c4c022a586ad658f75a3371e16218a71e67f995a84499270f62847f1276bf0b946e4769bc274bddfb08d10f947600a8fb6ec18ec9b9f530427f521ee3ce50b388643e37740f72230bd087208da7e6dcc5ddee7829453884c9847fcb3be8e9db6aaf0cbe443ca38a20fc1117fcfb4ce445990f80835187919994d512d4ada582367f3ad6307334bc511ef6dd9d2dd6d6755017aeb02ef5756be1edfdc457ba5c82482a7b012b35e57d506290df575e92a5db63831aa8520c20f52ba6f6c091a96d3de1d599798cb3054773daddf8f5ec6f91c9e9fd3060dffe8916190a2a7a60d6657f11e2c75895ccda0c74b7721307822f8648cfda91e16bbeb2c4f0ef49a9a0f893196ca467e97720dc5c7a71182b706c18473b446ba7f0ccc6e58b314a7d60d470256caf0357123b874bca94f589c4bc81ab13f59d9ee1868a7624f5bbf7b439c698f85b719d125354b315e46b9a3eef36080d73a360d12b557ab188f982dd4a2ad00ee5567bff54f4d552f6c85be0e8da744b25dee757a88c3dbe21b39f959574225d32af62eafe38df535ae5de01fd004cd3a303fb47859db4bf7122e50a43d15bd433c18021baaad564250b7bdc61df44bb43bc9a4a2160b0a60d81139fa04cc383a333ce81cb414aaa85e40a9d7bba4728db2af02dee49c9beb5e73f5ebfbb14cb9073a0c3991485b5be82352ecae1564b2f04afa52e478c733452a023e8b5afe5b5a96433b0ad7f875e6047d04174ed46a2c8e7fa66ffa56f25035c5101399100f9d60f40a7ebe027cf969df4b7ff1bdea819cf1f6e3be942a2a77a0151b1fc4b2948802155e022e4606ba8d48da96527a7d2a7b76c92adbf7d35b7e641199e72d3dcaabb049d36dcca2007fad6efc324980c55ee73c4175c11f26cca384286ab96f3c9f038b810a3becaaf0e57143ddc5262e1d23d0d1cada41e7e324024744c45d61fcbdea61b6c965de8b2f8cbfa911cc89b049175d6ce5df0661ae92023715edddd965b495dbbe2e1c6ac9f30d0150b34cd5356ee25e850082a79c851eaca6d978c0f14bbe6f7859c5c8f665e7b43b105df92b186d8ed701b148d4945f271811471f007bf26d3d1d7087b977bc04847c1ca696f57a4301907cd85b2270e56d365de2f7e41cdae550162fe2afb36d171d9c48856c0e60a92206d0373c9d1e3374dd6991be2e35b55ba29a997aa71d6dd0ab43ed41ad1023e1a1c91779716099f9149c893c91d1ec798b623fe9854e2de7bcd7781fa1878274780dc6b0c5c6227ef2e9175cf8eac419bb7194bd3568c4925d5408abedd066fb67ee8d4f00c995def854526e02301093e5d6d685821e7ffa6b74b114957a456293b32ddc8caefe798b7e00976d8cd96a9d14ef56d7b49404635761299077f6f82875c10b18e02b46e2fbb8c364180de2e1a177a05259dde58df019cc97b581a6a96a050b232af0531279a3d86fafde8ebe7866c8df1363e2b5ea350c8652454e566a8c85aff737c164395aaaa023a2413a54930095fe981c383cc7938008385945022a93fb6c74522ad5dacec86a49cd75f37f4ca1500e7d6e2f4e0a85627bdf5de025f37903770414e64ec43923f7275ea6e0664edc8d2779bb0c84938421223f9b75d9fa94eb8edcc75536211e80eb53c38db76eaf47bf70e8ccd5f023143cbad18db481e8fd4c9573b30ada34d72188b0c823a17b46bf596e1d7c4af9036b1249e8706cb05c49a61cbd8581621c45e24122290fd62fc4d773ba410c2eacff36409918c09023d1a367e2e233cc64a1e80de705e9de075a6406cc8a8d3e59f4c606a4bfe516b73ee24bdb7b82611b6032d9f7c5b534f779045c910144548fe5ef6d0a6800f50140bb1b9fcbe8458162b91f5e9987ffab849699a83d09262325e9d6d9b2ad3bd710dc29878503f961fe213c671147367dd24b55ee485d9f6bfa154a87de74b961569d6fab4177c37feb671757e2f7fe7f94aaaadbc9073bb474ffbac9514bbb12eb0a70a0295e78d43851224a284611b188d761346497ca4186bb8a002bd6a124252902a6fb0aa57eb7d6534b34d1efb8a88f82b5611bfd1579eba02a39843a745b5ce3abaf4e36738ece51336dbe9a9718211e3b5f0d04d69552a8f2e7f0315521adeecfb32bd1486770cbfdce8084238126ab12d0b39ac7cc8f765de7cf7fbcffaeb675cfba9dd23eca9c8b27dd641122b3935f70f5c7c4af145fb58373b3ad82f804f3fe8e1dbf2cfadec3e21c95f964981c442f43df3da9d87b2b767ab3468d804f5d0c55160804c760772c0c8a216400f6f61f3b849f0b6827488b3c378a904bef2d5df73b2d2a737b1367f1d79c1741d37c3293bd11d556f49d07d92fbfe4cd05557cecaa7deec993bb5e4fe4d84b27d204203297d11a3a7bb54595ba63db5eb130fccee097b6793bd7a17be51f9355780c2c5d8685dc97fc47c53848f3cc8fdd47ee8512247420cb0678151162ed1669673e337058b329432b2d01a92873df77555d7e8df02a58e060609738f1c50a79c4bfd6400d0238fd7f7fb67ed0b8f4d9b6ec058bbb4f7c5799fe62163e166ecc33bfc8be09e488b30cf8d73aaeb73e7119e1d3110ca6f13689c559a37784f5b245002d3a1df66d93f683723f669ccb7bff78fba78026b7bf811455820daa944cdaea4baf0bce0b6b1f5c42c3c904b0dc71788057e5d2e45fedfdbf33b18eeddcf072b286211d977ee3135cf2175732e09e6477151fcbf5b48e240684b3567d75425ea20fcf66c5a245689a26f4b475af5707199395f356a28dfd7b138daf304cf98d9b39dbad0001194b5bdd3bbc0200b984efdc72ecf3efde3ec3b7dc9e776aa64f2a3987242fe91d523427fd6c5eb792c5b708a8aad5746c713fb33100d513dbed27bf14acb5580b3602bb5d1ac7b075ce6454f7e4568432516e6f26603ba93ad1ea1b04a6f0a7901e39d7719bfa1a7b82f53c4cd736bb20cb926f52cfd67ad026e5aaa65f4ee31e7af6afc42573c46571d175a18dc26a62770896c18c48de4cb312c2740f9c14a650931281bc61091c95871dedd66b9692fdc054e57c970f4c67404407f9329ae361b06cb5a993e1db7f9072b31bfb5a60ffa85657b0747610e143b4bef846202b08d84c1233a6db829775aa1496c73ccf52f2bc8bf5aa6bce938cb99ffd1b9e2dca3506a4d89e5eaaf1c9c9644f2813680a23f7f47d8f7e324d4101b2c9e190f6b76e839baaa3cce692f9a72850b7ea476c360c72243e63d7c45c8922e2268ab9022ca28e8fb10610a9cebf768ee78dfa871b214eb292d4ddd255ea308fe09d4a6a9a623cb53d8298bfe40f8f2572f61fa5309bc588056158aff24eef761a61e92174bbe332462cd74fb3d5d5ff40af43b5b2e774ce9f37833bb1df78da8b41ea19f5d94fb666fecb513fce12f06636130966d229f08895c8e45491027689788f6a376f0c24edb1f11f784deaf830bb5f3d0428f1ab5cd9e108b9ad6920aef2ded33f0ff3222b74ee0c89c3db75b7c835818ae6f7a68081c5cd4680791f02e7981215bbc03bd11ce44eea718b845d089becfde69491b58fd15d78eae6fbcd0c27c5fd3a4f265e2ee3aa6261cca77d6fb5fd3c21da1920e62b88a2c90dedf3fd52e1922bc1e7d3966bf058f27c7885b3873515b952bfdcab93ace3aa6c778f00d8556457de51b34c58cdafc7d7247ebedc0e227700b420e4d1c2f96c33bf0e8f4854cd2d08233f972710b79af9c4ea87d328d5a6bbb946211aff0ec8818a584be5467010023c7f1406e890a8c3ce5fbe9358881c398a60a0d0b56c44750297f7544ce0d86e230a0317be21a1683932a94321d98a3ee39ebed7d7ca1fad39db4e3556ecc84e656fc14ab27e5b3b2b8b1169e669009b3b01772701cefdd3778a5e18c9930ca258af9c174deb3456e5b695e55966fb38584a1e832493f16bbd1f40694c59b3902872900e62cf2c05e2562d0ccf1b54ebc39d6e10265f205913c8a9778d4a4e5581f4a27ea033b760d42ac24f459e1d216c53a229f7aaf8f09816b27dbc3bb992f11e869d5c7648f9958af80afb4d59d46dcfe6999ace6190b8b475764a91bd21a4800777ca6a21bceaa955fb7f6140524687165c8499da7d1f4fa48900cb64356dbf56cbe8be8556681853d30167bfc395105de65bd3c037a36ca9292dbbc5d2770cf860b5c4fc69e7f9b79c84e7a661738463b3090c1017839b1bcbb8ddbdbc850f750d8aad9f1fede81f03e83e6097ed9cf3fdfb91f636c76d752a5fbfb8b6013accc967cfe1ee3aae9d677f9cbcfc2aed77816bdeedaadf5e45ff1dc8722025093c3efc717ee99b797f7d6e754b5eec015399c810384cb4d535004bdf0e7716388c7a99ea3a9611dbfe2a027441f4d502b96fc520add762bcc2d465015e58f38837f01469357d4da0b29e7ba3d04b4780f0e315465d44c6a1b2bd08369c80329cb290fbfc9b090e276a72b26c6cd7418aac901a94770fafe8fb378eaa232826ddf207b576165202d3d7da9fb91d2311195203af922bfce669f1a83758461076e1692a9523aae5b66248b74ba5bc79f25cddbb5921f8bb7777420c6ab1efc9a00bac736ba406d5020a6f43a05e987603a72a741c532f2a7838ce6574f8419d1701a3dc8da455c5958500ceb27bf94317a20b8235ab44e4863102ea48580bdf062e0535a20c4627dd89a167d9a70756bee3e013081c1fb7c5eaaed56a37c3b0ceae4b0617244b63d8c53e1c6a4c7a4a788e608d4996bdb2216ff4c8be0e169aa37219075af977938ef8a11c3a6039b6a3110b5b8406d5f39c8e0afef82f34f8bdd88f52b3414c3f9af3ad82d95c22601da1acd9f01c56afd1b89ff8bd01c1edcce3084cc4d2f44c39713741d6abcc8f7bc807e9b2ae66ae69b5519415584c0e4298b6af79f78cc087de73ecf6912db4e05d7a04f9f7b362992cd9924909c661fafad3a8257bdde265cd73c16eaa043650b768300c45212524a6946f0e049306355a721233a1a99742cb0bcfcd33bcd6ad74e8feaf4edcf9313eaf2e8a784d704f0f02c04732142cdd3dce86d2eeb97e6469e20e42b324cac2f8545a4496648c6533f16bc0a73c0ca0e4ed9714caceb14dc2ac47980e5a13d14def9edb22037c844557c75c2b85f760bed774657a0b40881bf385e548a456f1d4f8bee5ad815fc0df5008cd02f0706c1c0c7874438d20f911715863ec8e0014d0f4f961e7d33899a91c46c32ab2678bd0e3a26cfef697f08653cd6d72aa5609fc469c423404bf18b2b91b53e72cb44f1c53cd37e6a4938f337bcbf6d63b5262399c7c239311605092ee76019400c28a049e8cffb5e108eba68bee3c9d8a8dca6105016c91d22a1343bf1ea7229824f9fc8033282b28a51f885d22a55e9d900133744328134333b7179e7d225a33935c7af6fad346f140cc2dcb5ce13fee8ba41f4a3838c1b85a8a10dc4db2498826d4313bf5b8dd0c67348fa80dbeefd1b4456e4962905568e5b2f09e39ecedd4ef99d11ca219d5651a1e8fc78d72a1100b2962a81fcc705a126f8d5196912c6f81e0933cd166ed033f42a0f35824ecb9b55a1bf276af38f35ccf4517897cae5066c653ec5e46dc324cc7f93666dc81dcd3d77f98a1b083999a09098dadc7e405394faa1981fd7beba7d0230e3d2228dbc8425a1b4cfc6bdf616b1f852f0d4216d64610bc76d846f42e02fc6cde925744d27a2afc5c", 0x1000, 0x80000000}]) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="240000000300"/20, @ANYRES32=r5, @ANYBLOB="000000000000000000001000"], 0x24}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x36}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc841}, 0x80) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) sched_getaffinity(r6, 0x8, &(0x7f00000001c0)) [ 880.914222] FAULT_INJECTION: forcing a failure. [ 880.914222] name failslab, interval 1, probability 0, space 0, times 0 [ 880.942005] CPU: 0 PID: 32199 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 880.942636] ptrace attach of "/root/syz-executor.1"[32207] was attempted by "/root/syz-executor.1"[32208] 08:20:53 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802100001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40401, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000040)="6466785ee0d743a04266144476298a79bbfb732155f4db2f865c6f2e348c459320c1f640", 0x24) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_POLL(r4, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x1}, 0x18) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 880.950215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.950220] Call Trace: [ 880.950239] dump_stack+0x13e/0x194 [ 880.950257] should_fail.cold+0x10a/0x14b [ 880.950270] should_failslab+0xd6/0x130 [ 880.950283] kmem_cache_alloc_node+0x288/0x7a0 [ 880.950295] ? find_held_lock+0x2d/0x110 [ 880.950307] ? lock_sock_nested+0x98/0x100 [ 880.950321] __alloc_skb+0x9a/0x4c0 [ 880.950331] ? skb_trim+0x160/0x160 [ 880.950341] ? mark_held_locks+0xa6/0xf0 [ 880.950355] sock_wmalloc+0xa5/0xf0 [ 880.950369] pppoe_sendmsg+0x269/0x710 [ 880.950382] ? pppoe_getname+0x130/0x130 [ 880.950397] ? security_socket_sendmsg+0x83/0xb0 [ 880.950406] ? pppoe_getname+0x130/0x130 [ 880.950414] sock_sendmsg+0xc5/0x100 [ 880.950423] ___sys_sendmsg+0x349/0x840 [ 880.950435] ? copy_msghdr_from_user+0x380/0x380 [ 880.950450] ? trace_hardirqs_on+0x10/0x10 [ 880.950461] ? up_read+0x17/0x30 [ 880.950472] ? save_trace+0x290/0x290 [ 880.950481] ? retint_kernel+0x2d/0x2d [ 880.950495] ? find_held_lock+0x2d/0x110 [ 880.950505] ? __might_fault+0x104/0x1b0 [ 880.950528] __sys_sendmmsg+0x129/0x330 [ 881.076417] ? SyS_sendmsg+0x40/0x40 [ 881.080586] ? SyS_write+0x1b7/0x210 [ 881.084333] ? __mutex_unlock_slowpath+0x75/0x780 [ 881.089313] ? wait_for_completion+0x390/0x390 [ 881.093915] ? vfs_write+0xff/0x4e0 [ 881.097659] ? fput+0xb/0x140 [ 881.100789] ? SyS_write+0x14d/0x210 [ 881.104602] ? SyS_read+0x210/0x210 [ 881.108610] SyS_sendmmsg+0x2f/0x50 [ 881.112369] ? __sys_sendmmsg+0x330/0x330 [ 881.116533] do_syscall_64+0x1d5/0x640 [ 881.120534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 881.126331] RIP: 0033:0x45c479 [ 881.129792] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 881.137938] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 881.146762] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 881.154158] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:20:53 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:53 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r4, 0xf06e, 0x9) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:53 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:53 executing program 2 (fault-call:7 fault-nth:68): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 881.161923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 881.169307] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000043 08:20:53 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x12003) sendmsg$nl_generic(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000160000002bbd7200ffdbdf251a00000024004c800c007d659e5eff000000000014006900fe880b00000000ce000000000000fd01"], 0x38}}, 0x10) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000340)={@rc={0x1f, @none, 0x3}, {&(0x7f0000000280)=""/22, 0x16}, &(0x7f0000000300)}, 0xa0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r9 = dup2(r4, r3) ioctl$FBIOPAN_DISPLAY(r9, 0x4606, &(0x7f00000001c0)={0x140, 0x400, 0x30, 0x140, 0x8, 0xaa88, 0xf, 0x0, {0x7, 0xc0, 0x1}, {0x4, 0x800, 0x1}, {0x59, 0x2, 0x1}, {0x101, 0x9b}, 0x0, 0x80, 0x5, 0x10001, 0x1, 0x5, 0x382, 0x7ff, 0x1, 0xfffffff8, 0x1, 0x5, 0x21, 0x4, 0x9e98bd6a2897b11f, 0x1}) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:53 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000780)={0x40002016}) ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 881.261622] FAULT_INJECTION: forcing a failure. [ 881.261622] name failslab, interval 1, probability 0, space 0, times 0 [ 881.273964] CPU: 0 PID: 32232 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 881.282177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.292002] Call Trace: [ 881.294621] dump_stack+0x13e/0x194 [ 881.298788] should_fail.cold+0x10a/0x14b [ 881.303276] should_failslab+0xd6/0x130 [ 881.307716] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 881.313231] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 881.318915] ? __alloc_skb+0x9a/0x4c0 [ 881.322945] __kmalloc_node_track_caller+0x38/0x70 [ 881.327898] __kmalloc_reserve.isra.0+0x35/0xd0 [ 881.332950] __alloc_skb+0xca/0x4c0 [ 881.336675] ? skb_trim+0x160/0x160 [ 881.340491] ? mark_held_locks+0xa6/0xf0 [ 881.344590] sock_wmalloc+0xa5/0xf0 [ 881.348723] pppoe_sendmsg+0x269/0x710 [ 881.352731] ? pppoe_getname+0x130/0x130 [ 881.357157] ? security_socket_sendmsg+0x83/0xb0 [ 881.362391] ? pppoe_getname+0x130/0x130 [ 881.366585] sock_sendmsg+0xc5/0x100 [ 881.370671] ___sys_sendmsg+0x349/0x840 [ 881.374864] ? copy_msghdr_from_user+0x380/0x380 [ 881.380781] ? trace_hardirqs_on+0x10/0x10 [ 881.385440] ? up_read+0x17/0x30 [ 881.389289] ? save_trace+0x290/0x290 [ 881.393373] ? retint_kernel+0x2d/0x2d [ 881.397664] ? find_held_lock+0x2d/0x110 [ 881.401771] ? __might_fault+0x104/0x1b0 [ 881.406668] __sys_sendmmsg+0x129/0x330 [ 881.410822] ? SyS_sendmsg+0x40/0x40 [ 881.414579] ? SyS_write+0x1b7/0x210 [ 881.418673] ? __mutex_unlock_slowpath+0x75/0x780 [ 881.423711] ? wait_for_completion+0x390/0x390 [ 881.428582] ? vfs_write+0xff/0x4e0 [ 881.432216] ? fput+0xb/0x140 [ 881.435658] ? SyS_write+0x14d/0x210 [ 881.439511] ? SyS_read+0x210/0x210 [ 881.443303] SyS_sendmmsg+0x2f/0x50 [ 881.447027] ? __sys_sendmmsg+0x330/0x330 [ 881.451316] do_syscall_64+0x1d5/0x640 [ 881.455383] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 881.460732] RIP: 0033:0x45c479 [ 881.464084] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 881.472476] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 881.480465] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 881.488152] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 881.496446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 881.503809] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000044 08:20:56 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:20:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x309a02, 0x0) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000040)) 08:20:56 executing program 2 (fault-call:7 fault-nth:69): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:56 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x8000, 0xe, 0x4, 0x0, 0x3, {0x77359400}, {0x5, 0x0, 0x7, 0x5, 0x35, 0x6, "d6f06388"}, 0x9, 0x2, @fd, 0x4, 0x0, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) uname(&(0x7f0000000140)=""/247) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1400) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 883.941560] FAULT_INJECTION: forcing a failure. [ 883.941560] name failslab, interval 1, probability 0, space 0, times 0 [ 883.955690] CPU: 0 PID: 32254 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 883.963582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.973550] Call Trace: [ 883.976173] dump_stack+0x13e/0x194 [ 883.979908] should_fail.cold+0x10a/0x14b [ 883.984067] should_failslab+0xd6/0x130 [ 883.988058] kmem_cache_alloc+0x44/0x770 [ 883.992126] ? __lock_acquire+0x5f7/0x4620 [ 883.996365] ? br_allowed_egress+0x3c2/0x6d0 [ 884.000800] skb_clone+0x11c/0x310 [ 884.004354] deliver_clone+0x3f/0xb0 [ 884.008166] br_flood+0x3d2/0x550 [ 884.011619] br_dev_xmit+0x8b5/0xd20 [ 884.015363] ? br_poll_controller+0x10/0x10 [ 884.019756] dev_hard_start_xmit+0x186/0x890 [ 884.024216] __dev_queue_xmit+0x1d91/0x25c0 [ 884.028550] ? find_held_lock+0x2d/0x110 [ 884.032624] ? netdev_pick_tx+0x2e0/0x2e0 [ 884.036765] ? iov_iter_advance+0x8a/0xc70 [ 884.041140] ? memcpy+0x35/0x50 [ 884.044415] ? pppoe_sendmsg+0x5c1/0x710 [ 884.048641] pppoe_sendmsg+0x5c1/0x710 [ 884.052541] ? ether_setup+0x2d0/0x2d0 [ 884.056418] ? pppoe_getname+0x130/0x130 [ 884.060475] ? security_socket_sendmsg+0x83/0xb0 [ 884.065218] ? pppoe_getname+0x130/0x130 [ 884.069267] sock_sendmsg+0xc5/0x100 [ 884.072995] ___sys_sendmsg+0x349/0x840 [ 884.076965] ? copy_msghdr_from_user+0x380/0x380 [ 884.081711] ? trace_hardirqs_on+0x10/0x10 [ 884.086626] ? up_read+0x17/0x30 [ 884.089986] ? save_trace+0x290/0x290 [ 884.093788] ? retint_kernel+0x2d/0x2d [ 884.097663] ? find_held_lock+0x2d/0x110 [ 884.101718] ? __might_fault+0x104/0x1b0 [ 884.105784] __sys_sendmmsg+0x129/0x330 [ 884.109749] ? SyS_sendmsg+0x40/0x40 [ 884.113476] ? SyS_write+0x1b7/0x210 [ 884.117199] ? __mutex_unlock_slowpath+0x75/0x780 [ 884.122042] ? wait_for_completion+0x390/0x390 [ 884.126613] ? vfs_write+0xff/0x4e0 [ 884.130282] ? fput+0xb/0x140 [ 884.133466] ? SyS_write+0x14d/0x210 [ 884.137171] ? SyS_read+0x210/0x210 [ 884.140796] SyS_sendmmsg+0x2f/0x50 [ 884.144453] ? __sys_sendmmsg+0x330/0x330 [ 884.148611] do_syscall_64+0x1d5/0x640 [ 884.152497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 884.157682] RIP: 0033:0x45c479 [ 884.160854] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 884.168594] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 884.175955] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 884.183220] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:20:56 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:56 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 884.190498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 884.197772] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000045 08:20:56 executing program 2 (fault-call:7 fault-nth:70): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:56 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 884.297861] ptrace attach of "/root/syz-executor.1"[32264] was attempted by "/root/syz-executor.1"[32274] 08:20:56 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:56 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) migrate_pages(r1, 0x4, &(0x7f0000000000)=0xa4, &(0x7f0000000040)=0x3) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x1ffff8, 0x202, 0x2a, 0xffffffffffffffff}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 884.402455] FAULT_INJECTION: forcing a failure. [ 884.402455] name failslab, interval 1, probability 0, space 0, times 0 [ 884.423336] CPU: 1 PID: 32280 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 884.431255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.442600] Call Trace: [ 884.445184] dump_stack+0x13e/0x194 [ 884.448803] should_fail.cold+0x10a/0x14b [ 884.452973] should_failslab+0xd6/0x130 [ 884.456976] kmem_cache_alloc_node+0x288/0x7a0 [ 884.461643] ? find_held_lock+0x2d/0x110 [ 884.465705] ? lock_sock_nested+0x98/0x100 [ 884.470079] __alloc_skb+0x9a/0x4c0 [ 884.473697] ? skb_trim+0x160/0x160 [ 884.477315] ? mark_held_locks+0xa6/0xf0 [ 884.481382] sock_wmalloc+0xa5/0xf0 [ 884.485095] pppoe_sendmsg+0x269/0x710 [ 884.488972] ? pppoe_getname+0x130/0x130 [ 884.493060] ? security_socket_sendmsg+0x83/0xb0 [ 884.497806] ? pppoe_getname+0x130/0x130 [ 884.501856] sock_sendmsg+0xc5/0x100 [ 884.505557] ___sys_sendmsg+0x349/0x840 [ 884.509515] ? copy_msghdr_from_user+0x380/0x380 [ 884.514269] ? trace_hardirqs_on+0x10/0x10 [ 884.518490] ? up_read+0x17/0x30 [ 884.521847] ? save_trace+0x290/0x290 [ 884.525628] ? retint_kernel+0x2d/0x2d [ 884.529502] ? find_held_lock+0x2d/0x110 [ 884.533547] ? __might_fault+0x104/0x1b0 [ 884.537609] __sys_sendmmsg+0x129/0x330 [ 884.541612] ? SyS_sendmsg+0x40/0x40 [ 884.545779] ? SyS_write+0x1b7/0x210 [ 884.549485] ? __mutex_unlock_slowpath+0x75/0x780 [ 884.554335] ? wait_for_completion+0x390/0x390 [ 884.558902] ? vfs_write+0xff/0x4e0 [ 884.562514] ? fput+0xb/0x140 [ 884.565609] ? SyS_write+0x14d/0x210 [ 884.569323] ? SyS_read+0x210/0x210 [ 884.572954] SyS_sendmmsg+0x2f/0x50 [ 884.576585] ? __sys_sendmmsg+0x330/0x330 [ 884.580723] do_syscall_64+0x1d5/0x640 [ 884.584713] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 884.589892] RIP: 0033:0x45c479 [ 884.593069] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:20:57 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 884.600773] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 884.608041] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 884.615299] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 884.622615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 884.629887] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000046 08:20:59 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:20:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:20:59 executing program 2 (fault-call:7 fault-nth:71): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:59 executing program 3: r0 = userfaultfd(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000280)=""/29, &(0x7f00000002c0)=0x1d) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x2}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) accept4$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@remote, @rose, @default, @bcast, @null, @netrom, @remote, @default]}, &(0x7f00000001c0)=0x48, 0x80800) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:59 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xff, 0x2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$wireguard(0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="001200"/18, @ANYRES32, @ANYBLOB="b50cf83f5f6e3a6aca9957c04107f32404b3c20c48dca8c156fea40e8567729512c47d8006714ceaf0cd1eb9c8c2eca86e7ae8c2f6019137239f34908dd611862f2434ffcae70d051582b435a03d7c16a15003b74b81836c5900accc984adad1fc"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = dup2(r6, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x66}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet6_int(r9, 0x29, 0x36, 0x0, &(0x7f0000013000)) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r16, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r15, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0x8}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x50, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x513}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r17}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040010}, 0x85) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 08:20:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 887.012931] FAULT_INJECTION: forcing a failure. [ 887.012931] name failslab, interval 1, probability 0, space 0, times 0 [ 887.025803] CPU: 0 PID: 32306 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 887.033718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.043112] Call Trace: [ 887.045731] dump_stack+0x13e/0x194 [ 887.049727] should_fail.cold+0x10a/0x14b [ 887.053901] should_failslab+0xd6/0x130 [ 887.058009] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 887.063400] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 887.068865] ? __alloc_skb+0x9a/0x4c0 [ 887.072679] __kmalloc_node_track_caller+0x38/0x70 [ 887.077635] __kmalloc_reserve.isra.0+0x35/0xd0 [ 887.082323] __alloc_skb+0xca/0x4c0 [ 887.086001] ? skb_trim+0x160/0x160 [ 887.089668] ? mark_held_locks+0xa6/0xf0 [ 887.093743] sock_wmalloc+0xa5/0xf0 [ 887.097815] pppoe_sendmsg+0x269/0x710 [ 887.101887] ? pppoe_getname+0x130/0x130 [ 887.105966] ? security_socket_sendmsg+0x83/0xb0 [ 887.110734] ? pppoe_getname+0x130/0x130 [ 887.114806] sock_sendmsg+0xc5/0x100 [ 887.118530] ___sys_sendmsg+0x349/0x840 [ 887.122539] ? copy_msghdr_from_user+0x380/0x380 [ 887.127316] ? trace_hardirqs_on+0x10/0x10 [ 887.131584] ? up_read+0x17/0x30 [ 887.134961] ? save_trace+0x290/0x290 [ 887.138770] ? retint_kernel+0x2d/0x2d [ 887.142672] ? find_held_lock+0x2d/0x110 [ 887.146742] ? __might_fault+0x104/0x1b0 [ 887.150826] __sys_sendmmsg+0x129/0x330 [ 887.154813] ? SyS_sendmsg+0x40/0x40 [ 887.158538] ? SyS_write+0x1b7/0x210 [ 887.162274] ? __mutex_unlock_slowpath+0x75/0x780 [ 887.167125] ? wait_for_completion+0x390/0x390 [ 887.171713] ? vfs_write+0xff/0x4e0 [ 887.175346] ? fput+0xb/0x140 [ 887.178456] ? SyS_write+0x14d/0x210 [ 887.182176] ? SyS_read+0x210/0x210 [ 887.185811] SyS_sendmmsg+0x2f/0x50 [ 887.189534] ? __sys_sendmmsg+0x330/0x330 [ 887.193686] do_syscall_64+0x1d5/0x640 [ 887.197583] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 887.202773] RIP: 0033:0x45c479 08:20:59 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 887.205964] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 887.218800] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 887.226081] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 887.233356] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 887.240631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 887.247907] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000047 08:20:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:20:59 executing program 3: r0 = userfaultfd(0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$dsp(r1, &(0x7f00000000c0)="d12125cf545fb8b84ae9614cbb93dd035872207f641e8d01e726b874233c8dd76c16e7fbb8e5d9a46847245724dfb70ba8e7c7fccfacf488675a23bf8744ff2bce37aef39a11e42b953b7d3bd915239791800e48ebd220f36b00b8", 0x5b) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) read(r0, &(0x7f0000009f9c)=""/99, 0x63) prctl$PR_SET_SECUREBITS(0x1c, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) lseek(r2, 0xffff, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000180)) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:20:59 executing program 2 (fault-call:7 fault-nth:72): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:20:59 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 887.432521] FAULT_INJECTION: forcing a failure. [ 887.432521] name failslab, interval 1, probability 0, space 0, times 0 [ 887.443972] CPU: 1 PID: 32334 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 887.451885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.461255] Call Trace: [ 887.463866] dump_stack+0x13e/0x194 [ 887.467518] should_fail.cold+0x10a/0x14b [ 887.471686] should_failslab+0xd6/0x130 [ 887.475681] kmem_cache_alloc+0x44/0x770 [ 887.479888] ? __lock_acquire+0x5f7/0x4620 [ 887.484221] ? br_allowed_egress+0x3c2/0x6d0 [ 887.488683] skb_clone+0x11c/0x310 [ 887.492245] deliver_clone+0x3f/0xb0 [ 887.495973] br_flood+0x3d2/0x550 [ 887.499555] br_dev_xmit+0x8b5/0xd20 [ 887.503288] ? br_poll_controller+0x10/0x10 [ 887.507631] dev_hard_start_xmit+0x186/0x890 [ 887.512064] __dev_queue_xmit+0x1d91/0x25c0 [ 887.516400] ? find_held_lock+0x2d/0x110 [ 887.520613] ? netdev_pick_tx+0x2e0/0x2e0 [ 887.524785] ? iov_iter_advance+0x8a/0xc70 [ 887.529129] ? memcpy+0x35/0x50 [ 887.532438] ? pppoe_sendmsg+0x5c1/0x710 [ 887.536520] pppoe_sendmsg+0x5c1/0x710 [ 887.540420] ? ether_setup+0x2d0/0x2d0 [ 887.544320] ? pppoe_getname+0x130/0x130 [ 887.548400] ? security_socket_sendmsg+0x83/0xb0 [ 887.553170] ? pppoe_getname+0x130/0x130 [ 887.557395] sock_sendmsg+0xc5/0x100 [ 887.561129] ___sys_sendmsg+0x349/0x840 [ 887.565359] ? copy_msghdr_from_user+0x380/0x380 [ 887.570141] ? trace_hardirqs_on+0x10/0x10 [ 887.574393] ? up_read+0x17/0x30 [ 887.577784] ? save_trace+0x290/0x290 [ 887.581601] ? retint_kernel+0x2d/0x2d [ 887.585507] ? find_held_lock+0x2d/0x110 [ 887.589582] ? __might_fault+0x104/0x1b0 [ 887.593763] __sys_sendmmsg+0x129/0x330 [ 887.597762] ? SyS_sendmsg+0x40/0x40 [ 887.601493] ? SyS_write+0x1b7/0x210 [ 887.605333] ? __mutex_unlock_slowpath+0x75/0x780 [ 887.610232] ? wait_for_completion+0x390/0x390 [ 887.614831] ? vfs_write+0xff/0x4e0 [ 887.618476] ? fput+0xb/0x140 [ 887.621660] ? SyS_write+0x14d/0x210 [ 887.625390] ? SyS_read+0x210/0x210 [ 887.629038] SyS_sendmmsg+0x2f/0x50 [ 887.632771] ? __sys_sendmmsg+0x330/0x330 [ 887.637976] do_syscall_64+0x1d5/0x640 [ 887.641885] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 887.647088] RIP: 0033:0x45c479 [ 887.650453] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 887.658184] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 887.665473] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 887.672746] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 887.680209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 887.687525] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000048 08:21:02 executing program 2 (fault-call:7 fault-nth:73): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:02 executing program 4: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 08:21:02 executing program 0: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) prctl$PR_SET_PDEATHSIG(0x1, 0x33) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:02 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) fstat(0xffffffffffffffff, &(0x7f00000000c0)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x2000000000000022, 0x2, 0x11) close(r4) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000780)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000840)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r7, 0x6, 0x1, 0x1f}, &(0x7f0000000140)=0x10) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 890.017559] FAULT_INJECTION: forcing a failure. [ 890.017559] name failslab, interval 1, probability 0, space 0, times 0 [ 890.035046] ptrace attach of "/root/syz-executor.0"[32348] was attempted by "/root/syz-executor.0"[32349] [ 890.046030] CPU: 1 PID: 32347 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 890.054384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.063747] Call Trace: 08:21:02 executing program 0: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 890.066373] dump_stack+0x13e/0x194 [ 890.070016] should_fail.cold+0x10a/0x14b [ 890.074178] should_failslab+0xd6/0x130 [ 890.078268] kmem_cache_alloc_node+0x288/0x7a0 [ 890.082944] ? perf_mmap+0xe70/0x13b0 [ 890.086753] ? find_held_lock+0x2d/0x110 [ 890.090847] ? lock_sock_nested+0x98/0x100 [ 890.095102] __alloc_skb+0x9a/0x4c0 [ 890.098915] ? skb_trim+0x160/0x160 [ 890.102554] ? mark_held_locks+0xa6/0xf0 [ 890.106633] sock_wmalloc+0xa5/0xf0 [ 890.108959] ptrace attach of "/root/syz-executor.0"[32361] was attempted by "/root/syz-executor.0"[32362] [ 890.110272] pppoe_sendmsg+0x269/0x710 [ 890.110287] ? pppoe_getname+0x130/0x130 [ 890.110299] ? security_socket_sendmsg+0x83/0xb0 [ 890.110307] ? pppoe_getname+0x130/0x130 [ 890.110316] sock_sendmsg+0xc5/0x100 [ 890.110325] ___sys_sendmsg+0x349/0x840 [ 890.110336] ? copy_msghdr_from_user+0x380/0x380 [ 890.110353] ? trace_hardirqs_on+0x10/0x10 [ 890.110363] ? up_read+0x17/0x30 [ 890.110373] ? save_trace+0x290/0x290 [ 890.110381] ? retint_kernel+0x2d/0x2d [ 890.110393] ? find_held_lock+0x2d/0x110 [ 890.169077] ? __might_fault+0x104/0x1b0 [ 890.173315] __sys_sendmmsg+0x129/0x330 [ 890.177285] ? SyS_sendmsg+0x40/0x40 [ 890.180998] ? SyS_write+0x1b7/0x210 [ 890.184730] ? __mutex_unlock_slowpath+0x75/0x780 [ 890.190215] ? wait_for_completion+0x390/0x390 [ 890.194863] ? vfs_write+0xff/0x4e0 [ 890.198626] ? fput+0xb/0x140 [ 890.201771] ? SyS_write+0x14d/0x210 [ 890.205487] ? SyS_read+0x210/0x210 [ 890.209107] SyS_sendmmsg+0x2f/0x50 [ 890.212736] ? __sys_sendmmsg+0x330/0x330 [ 890.216874] do_syscall_64+0x1d5/0x640 [ 890.220787] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 890.225975] RIP: 0033:0x45c479 [ 890.229172] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.236876] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 890.244140] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 890.251404] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 890.259016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 08:21:02 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:02 executing program 0: getpid() clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:02 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:02 executing program 2 (fault-call:7 fault-nth:74): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 890.266292] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000049 [ 890.277192] delete_channel: no stack 08:21:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 890.353159] ptrace attach of "/root/syz-executor.0"[32370] was attempted by "/root/syz-executor.0"[32373] 08:21:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RLOPEN(r1, &(0x7f0000000480)={0x18, 0xd, 0x2, {{0x8, 0x0, 0x1}, 0x80}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000140)) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1004}, 0x20045000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x60842, 0x0) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x20000, 0x0) ioctl$SIOCX25GSUBSCRIP(r7, 0x89e0, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x8, 0x200}) ptrace$cont(0x18, r3, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f00000004c0)={0x8, 0x7f, 0xa55, 0x7fffffff, 0x1, 0x6}) ptrace$cont(0x9, r3, 0x0, 0x0) [ 890.399765] FAULT_INJECTION: forcing a failure. [ 890.399765] name failslab, interval 1, probability 0, space 0, times 0 [ 890.422642] CPU: 1 PID: 32375 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 890.430576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.439943] Call Trace: [ 890.442544] dump_stack+0x13e/0x194 [ 890.446274] should_fail.cold+0x10a/0x14b [ 890.450443] should_failslab+0xd6/0x130 [ 890.454427] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 890.459629] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 890.465525] ? __alloc_skb+0x9a/0x4c0 [ 890.469337] __kmalloc_node_track_caller+0x38/0x70 [ 890.474280] __kmalloc_reserve.isra.0+0x35/0xd0 [ 890.478969] __alloc_skb+0xca/0x4c0 [ 890.482630] ? skb_trim+0x160/0x160 [ 890.486266] ? mark_held_locks+0xa6/0xf0 [ 890.490350] sock_wmalloc+0xa5/0xf0 [ 890.493988] pppoe_sendmsg+0x269/0x710 08:21:03 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x6, 0x4) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 890.497890] ? pppoe_getname+0x130/0x130 [ 890.501966] ? security_socket_sendmsg+0x83/0xb0 [ 890.506745] ? pppoe_getname+0x130/0x130 [ 890.510816] sock_sendmsg+0xc5/0x100 [ 890.514568] ___sys_sendmsg+0x349/0x840 [ 890.518556] ? copy_msghdr_from_user+0x380/0x380 [ 890.523328] ? trace_hardirqs_on+0x10/0x10 [ 890.527572] ? up_read+0x17/0x30 [ 890.530946] ? save_trace+0x290/0x290 [ 890.531125] ptrace attach of "/root/syz-executor.0"[32384] was attempted by "/root/syz-executor.0"[32391] [ 890.534749] ? retint_kernel+0x2d/0x2d [ 890.534764] ? find_held_lock+0x2d/0x110 [ 890.534777] ? __might_fault+0x104/0x1b0 [ 890.556562] __sys_sendmmsg+0x129/0x330 [ 890.560577] ? SyS_sendmsg+0x40/0x40 [ 890.564274] ? SyS_write+0x1b7/0x210 [ 890.567982] ? __mutex_unlock_slowpath+0x75/0x780 [ 890.572810] ? wait_for_completion+0x390/0x390 [ 890.577376] ? vfs_write+0xff/0x4e0 [ 890.580987] ? fput+0xb/0x140 [ 890.584074] ? SyS_write+0x14d/0x210 [ 890.587783] ? SyS_read+0x210/0x210 [ 890.591881] SyS_sendmmsg+0x2f/0x50 [ 890.595495] ? __sys_sendmmsg+0x330/0x330 [ 890.599652] do_syscall_64+0x1d5/0x640 [ 890.603539] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 890.608720] RIP: 0033:0x45c479 [ 890.611906] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.619613] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 890.626897] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 890.634166] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 890.642043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 890.649301] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004a [ 890.887610] delete_channel: no stack 08:21:05 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200800, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffff8, 0x0, 0x8, 0x9, 0x4b863a9b, 0x8, 0x0, 0x8000000, 0x0, 0x3, 0x0, 0x1000, 0x8, 0x3f, 0x6e], 0x1000, 0x84000}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='\x88vmnet0]vboxnet1{md5sumvboxnet1,lo\x00', 0x23, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:05 executing program 2 (fault-call:7 fault-nth:75): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:05 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 893.088780] ptrace attach of "/root/syz-executor.0"[32408] was attempted by "/root/syz-executor.0"[32409] [ 893.091856] FAULT_INJECTION: forcing a failure. [ 893.091856] name failslab, interval 1, probability 0, space 0, times 0 [ 893.110074] CPU: 1 PID: 32406 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 893.117980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.127546] Call Trace: [ 893.130202] dump_stack+0x13e/0x194 [ 893.134153] should_fail.cold+0x10a/0x14b [ 893.138324] should_failslab+0xd6/0x130 [ 893.142312] kmem_cache_alloc+0x44/0x770 [ 893.146382] ? __lock_acquire+0x5f7/0x4620 [ 893.150768] ? br_allowed_egress+0x3c2/0x6d0 [ 893.155195] skb_clone+0x11c/0x310 [ 893.158751] deliver_clone+0x3f/0xb0 [ 893.162483] br_flood+0x3d2/0x550 [ 893.165961] br_dev_xmit+0x8b5/0xd20 [ 893.169701] ? br_poll_controller+0x10/0x10 [ 893.174162] dev_hard_start_xmit+0x186/0x890 [ 893.178592] __dev_queue_xmit+0x1d91/0x25c0 [ 893.183063] ? find_held_lock+0x2d/0x110 [ 893.187147] ? netdev_pick_tx+0x2e0/0x2e0 [ 893.191306] ? iov_iter_advance+0x8a/0xc70 [ 893.195558] ? memcpy+0x35/0x50 [ 893.198859] ? pppoe_sendmsg+0x5c1/0x710 [ 893.203047] pppoe_sendmsg+0x5c1/0x710 [ 893.206972] ? ether_setup+0x2d0/0x2d0 [ 893.210876] ? pppoe_getname+0x130/0x130 [ 893.214949] ? security_socket_sendmsg+0x83/0xb0 [ 893.219726] ? pppoe_getname+0x130/0x130 [ 893.223797] sock_sendmsg+0xc5/0x100 [ 893.227715] ___sys_sendmsg+0x349/0x840 [ 893.231831] ? copy_msghdr_from_user+0x380/0x380 [ 893.236604] ? trace_hardirqs_on+0x10/0x10 [ 893.240848] ? up_read+0x17/0x30 [ 893.244228] ? save_trace+0x290/0x290 [ 893.248050] ? retint_kernel+0x2d/0x2d [ 893.252085] ? find_held_lock+0x2d/0x110 [ 893.256161] ? __might_fault+0x104/0x1b0 [ 893.260252] __sys_sendmmsg+0x129/0x330 [ 893.264623] ? SyS_sendmsg+0x40/0x40 [ 893.268346] ? SyS_write+0x1b7/0x210 [ 893.272086] ? __mutex_unlock_slowpath+0x75/0x780 [ 893.276954] ? wait_for_completion+0x390/0x390 [ 893.281549] ? vfs_write+0xff/0x4e0 [ 893.285189] ? fput+0xb/0x140 [ 893.288304] ? SyS_write+0x14d/0x210 [ 893.292120] ? SyS_read+0x210/0x210 [ 893.295764] SyS_sendmmsg+0x2f/0x50 [ 893.299427] ? __sys_sendmmsg+0x330/0x330 [ 893.303587] do_syscall_64+0x1d5/0x640 [ 893.307667] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 893.312879] RIP: 0033:0x45c479 [ 893.316076] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.323823] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 893.331127] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 08:21:05 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:05 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x45d8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x8004, 0x7a2e) [ 893.338408] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 893.345703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 893.352988] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004b 08:21:06 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:06 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x100, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e22, 0x4cc, @empty, 0x9}, r4}}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r6 = getpgrp(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{0x5, 0x81, 0x4, 0x1000}, {0x0, 0x2, 0x2, 0x7}, {0x10, 0xff, 0x4, 0x6}, {0x9c0c, 0x7f, 0xfe, 0xce}, {0x2, 0x83, 0x40, 0x6e}, {0x1ff, 0x10, 0x4, 0x5}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x81, 0x0, 0x0, 0x3, 0x2a, r6}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 893.427211] ptrace attach of "/root/syz-executor.0"[32421] was attempted by "/root/syz-executor.0"[32424] 08:21:06 executing program 2 (fault-call:7 fault-nth:76): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:06 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 893.534906] ptrace attach of "/root/syz-executor.0"[32431] was attempted by "/root/syz-executor.0"[32433] [ 893.595619] FAULT_INJECTION: forcing a failure. [ 893.595619] name failslab, interval 1, probability 0, space 0, times 0 [ 893.628741] CPU: 1 PID: 32439 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 893.636805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.646168] Call Trace: [ 893.648771] dump_stack+0x13e/0x194 [ 893.652420] should_fail.cold+0x10a/0x14b [ 893.656589] should_failslab+0xd6/0x130 [ 893.660590] kmem_cache_alloc_node+0x288/0x7a0 [ 893.665623] ? find_held_lock+0x2d/0x110 [ 893.669696] ? lock_sock_nested+0x98/0x100 [ 893.673945] __alloc_skb+0x9a/0x4c0 [ 893.677589] ? skb_trim+0x160/0x160 [ 893.681246] ? mark_held_locks+0xa6/0xf0 [ 893.685329] sock_wmalloc+0xa5/0xf0 [ 893.688976] pppoe_sendmsg+0x269/0x710 [ 893.693018] ? pppoe_getname+0x130/0x130 [ 893.697284] ? security_socket_sendmsg+0x83/0xb0 [ 893.700906] ptrace attach of "/root/syz-executor.0"[32444] was attempted by "/root/syz-executor.0"[32445] [ 893.702050] ? pppoe_getname+0x130/0x130 [ 893.702062] sock_sendmsg+0xc5/0x100 [ 893.702074] ___sys_sendmsg+0x349/0x840 [ 893.723543] ? copy_msghdr_from_user+0x380/0x380 [ 893.728357] ? trace_hardirqs_on+0x10/0x10 [ 893.732598] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 893.737619] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 893.742628] ? save_trace+0x290/0x290 [ 893.746433] ? find_held_lock+0x2d/0x110 [ 893.750564] ? __might_fault+0x104/0x1b0 [ 893.754636] __sys_sendmmsg+0x129/0x330 [ 893.758691] ? SyS_sendmsg+0x40/0x40 [ 893.762418] ? SyS_write+0x1b7/0x210 [ 893.766766] ? __mutex_unlock_slowpath+0x75/0x780 [ 893.771696] ? wait_for_completion+0x390/0x390 [ 893.776301] ? vfs_write+0xff/0x4e0 [ 893.779919] ? fput+0xb/0x140 [ 893.783023] ? SyS_write+0x14d/0x210 [ 893.786743] ? SyS_read+0x210/0x210 [ 893.790372] SyS_sendmmsg+0x2f/0x50 [ 893.794013] ? __sys_sendmmsg+0x330/0x330 [ 893.798158] do_syscall_64+0x1d5/0x640 [ 893.802051] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 893.807236] RIP: 0033:0x45c479 [ 893.810417] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.818221] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 893.825500] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 893.832939] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:21:06 executing program 0: getpid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 08:21:06 executing program 3: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x7}) read(0xffffffffffffffff, &(0x7f0000009f9c)=""/100, 0x64) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x10000400200) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000300)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x78, 0x0, 0x20d, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1000}, 0x1) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000000)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r9, 0x408c563e, &(0x7f00000000c0)={0x8, 0x8, 0x21, "e18360b33ef77ec34ea06645295282452b0ee9b4fc58a546be303dca495d925a88982012f1f21dc803250ffb5b50d5d3f9947fd2fad8aa83baf37ce7", 0x34, "13ab774eb6bcc450df4d9ed222e73928f2adf7eb4d35da23be3a55ae2a95e17a461b595764442cd4d1209e616ffc720a700d9a9a6a5763a4ec285806", 0xb0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r11, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x5c, 0x2, 0x9, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8815) 08:21:06 executing program 2 (fault-call:7 fault-nth:77): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 893.841013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 893.848375] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004c 08:21:06 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 893.942666] ptrace attach of "/root/syz-executor.0"[32451] was attempted by "/root/syz-executor.0"[32454] [ 893.954760] FAULT_INJECTION: forcing a failure. [ 893.954760] name failslab, interval 1, probability 0, space 0, times 0 [ 893.972810] CPU: 1 PID: 32455 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 893.980728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.990218] Call Trace: [ 893.992817] dump_stack+0x13e/0x194 [ 893.996459] should_fail.cold+0x10a/0x14b [ 894.000623] should_failslab+0xd6/0x130 [ 894.004618] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 894.009735] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 894.015316] ? __alloc_skb+0x9a/0x4c0 [ 894.019134] __kmalloc_node_track_caller+0x38/0x70 [ 894.024084] __kmalloc_reserve.isra.0+0x35/0xd0 [ 894.028773] __alloc_skb+0xca/0x4c0 [ 894.032584] ? skb_trim+0x160/0x160 [ 894.036228] ? mark_held_locks+0xa6/0xf0 [ 894.040414] sock_wmalloc+0xa5/0xf0 [ 894.044097] pppoe_sendmsg+0x269/0x710 [ 894.048003] ? pppoe_getname+0x130/0x130 [ 894.052078] ? security_socket_sendmsg+0x83/0xb0 [ 894.056844] ? pppoe_getname+0x130/0x130 [ 894.060914] sock_sendmsg+0xc5/0x100 [ 894.064646] ___sys_sendmsg+0x349/0x840 [ 894.068723] ? copy_msghdr_from_user+0x380/0x380 [ 894.073498] ? trace_hardirqs_on+0x10/0x10 [ 894.077745] ? up_read+0x17/0x30 [ 894.081817] ? save_trace+0x290/0x290 [ 894.085622] ? retint_kernel+0x2d/0x2d [ 894.089524] ? find_held_lock+0x2d/0x110 [ 894.093595] ? __might_fault+0x104/0x1b0 [ 894.097677] __sys_sendmmsg+0x129/0x330 [ 894.101659] ? SyS_sendmsg+0x40/0x40 [ 894.105380] ? SyS_write+0x1b7/0x210 [ 894.109644] ? __mutex_unlock_slowpath+0x75/0x780 [ 894.114499] ? wait_for_completion+0x390/0x390 [ 894.119089] ? vfs_write+0xff/0x4e0 [ 894.122721] ? fput+0xb/0x140 [ 894.125840] ? SyS_write+0x14d/0x210 [ 894.129553] ? SyS_read+0x210/0x210 [ 894.133192] SyS_sendmmsg+0x2f/0x50 [ 894.136825] ? __sys_sendmmsg+0x330/0x330 [ 894.140985] do_syscall_64+0x1d5/0x640 [ 894.145249] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 894.150442] RIP: 0033:0x45c479 [ 894.153897] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.161610] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 894.168885] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 894.176158] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 894.183433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 08:21:06 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 894.190704] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004d 08:21:08 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:08 executing program 2 (fault-call:7 fault-nth:78): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:08 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:08 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$tipc(r3, &(0x7f0000000000), &(0x7f00000000c0)=0x10) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 896.456851] FAULT_INJECTION: forcing a failure. [ 896.456851] name failslab, interval 1, probability 0, space 0, times 0 [ 896.468351] CPU: 0 PID: 32478 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 896.476259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.485616] Call Trace: [ 896.488291] dump_stack+0x13e/0x194 [ 896.491943] should_fail.cold+0x10a/0x14b [ 896.496091] should_failslab+0xd6/0x130 [ 896.500505] kmem_cache_alloc+0x44/0x770 08:21:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x7, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r4}, 0x14) 08:21:09 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 896.504580] ? __lock_acquire+0x5f7/0x4620 [ 896.508828] ? br_allowed_egress+0x3c2/0x6d0 [ 896.513258] skb_clone+0x11c/0x310 [ 896.516899] deliver_clone+0x3f/0xb0 [ 896.520632] br_flood+0x3d2/0x550 [ 896.524206] br_dev_xmit+0x8b5/0xd20 [ 896.528029] ? br_poll_controller+0x10/0x10 [ 896.532375] dev_hard_start_xmit+0x186/0x890 [ 896.537370] __dev_queue_xmit+0x1d91/0x25c0 [ 896.541820] ? find_held_lock+0x2d/0x110 [ 896.545913] ? netdev_pick_tx+0x2e0/0x2e0 [ 896.550160] ? iov_iter_advance+0x8a/0xc70 08:21:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x14, r7, 0x325, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x120, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa936}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf3ef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x82, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa89d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x215}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RATTACH(r9, &(0x7f0000000140)={0x14, 0x69, 0x1, {0x20, 0x3}}, 0x14) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@dev={[], 0x28}, @local, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x4, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @multicast, @mcast2, @multicast, @remote}}}}, &(0x7f0000000080)={0x0, 0x4, [0x954, 0xb1, 0xc84, 0xf9a]}) socket$nl_generic(0x10, 0x3, 0x10) [ 896.554442] ? memcpy+0x35/0x50 [ 896.558175] ? pppoe_sendmsg+0x5c1/0x710 [ 896.562246] pppoe_sendmsg+0x5c1/0x710 [ 896.566281] ? ether_setup+0x2d0/0x2d0 [ 896.570185] ? pppoe_getname+0x130/0x130 [ 896.574576] ? security_socket_sendmsg+0x83/0xb0 [ 896.579463] ? pppoe_getname+0x130/0x130 [ 896.584236] sock_sendmsg+0xc5/0x100 [ 896.588000] ___sys_sendmsg+0x349/0x840 [ 896.592002] ? copy_msghdr_from_user+0x380/0x380 [ 896.597831] ? trace_hardirqs_on+0x10/0x10 [ 896.602182] ? up_read+0x17/0x30 [ 896.605734] ? save_trace+0x290/0x290 [ 896.609712] ? retint_kernel+0x2d/0x2d [ 896.613615] ? find_held_lock+0x2d/0x110 [ 896.617689] ? __might_fault+0x104/0x1b0 [ 896.621778] __sys_sendmmsg+0x129/0x330 [ 896.625854] ? SyS_sendmsg+0x40/0x40 [ 896.629696] ? SyS_write+0x1b7/0x210 [ 896.633439] ? __mutex_unlock_slowpath+0x75/0x780 [ 896.638302] ? wait_for_completion+0x390/0x390 [ 896.642899] ? vfs_write+0xff/0x4e0 [ 896.646550] ? fput+0xb/0x140 [ 896.649669] ? SyS_write+0x14d/0x210 [ 896.653403] ? SyS_read+0x210/0x210 [ 896.657051] SyS_sendmmsg+0x2f/0x50 [ 896.660701] ? __sys_sendmmsg+0x330/0x330 [ 896.664878] do_syscall_64+0x1d5/0x640 [ 896.668788] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 896.674001] RIP: 0033:0x45c479 [ 896.677201] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.684945] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 896.692223] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 896.699500] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:21:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x63b, 0x4) [ 896.706779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 896.714093] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004e 08:21:09 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:09 executing program 2 (fault-call:7 fault-nth:79): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 896.835755] FAULT_INJECTION: forcing a failure. [ 896.835755] name failslab, interval 1, probability 0, space 0, times 0 [ 896.855734] CPU: 0 PID: 32506 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 896.864099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.873817] Call Trace: [ 896.876519] dump_stack+0x13e/0x194 [ 896.880286] should_fail.cold+0x10a/0x14b [ 896.884694] should_failslab+0xd6/0x130 [ 896.888699] kmem_cache_alloc_node+0x288/0x7a0 [ 896.893321] ? find_held_lock+0x2d/0x110 [ 896.897398] ? lock_sock_nested+0x98/0x100 [ 896.901653] __alloc_skb+0x9a/0x4c0 [ 896.905334] ? skb_trim+0x160/0x160 [ 896.908979] ? mark_held_locks+0xa6/0xf0 [ 896.913061] sock_wmalloc+0xa5/0xf0 [ 896.916704] pppoe_sendmsg+0x269/0x710 [ 896.920606] ? pppoe_getname+0x130/0x130 [ 896.924681] ? security_socket_sendmsg+0x83/0xb0 [ 896.929455] ? pppoe_getname+0x130/0x130 08:21:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001fd) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000000)={0x3, 0x0, [0x8, 0x8, 0x838b, 0x7, 0xfffffff8, 0xf5d, 0x7fffffff, 0x2]}) ptrace$cont(0x9, r1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'ip6_vti0\x00', {0x5}, 0x8001}) 08:21:09 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x8, 0x47) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 896.933518] sock_sendmsg+0xc5/0x100 [ 896.937227] ___sys_sendmsg+0x349/0x840 [ 896.941214] ? copy_msghdr_from_user+0x380/0x380 [ 896.946075] ? trace_hardirqs_on+0x10/0x10 [ 896.950359] ? up_read+0x17/0x30 [ 896.953749] ? save_trace+0x290/0x290 [ 896.957562] ? retint_kernel+0x2d/0x2d [ 896.961467] ? find_held_lock+0x2d/0x110 [ 896.965534] ? __might_fault+0x104/0x1b0 [ 896.969592] __sys_sendmmsg+0x129/0x330 [ 896.973561] ? SyS_sendmsg+0x40/0x40 [ 896.977284] ? SyS_write+0x1b7/0x210 [ 896.981044] ? __mutex_unlock_slowpath+0x75/0x780 [ 896.985900] ? wait_for_completion+0x390/0x390 [ 896.990501] ? vfs_write+0xff/0x4e0 [ 896.994147] ? fput+0xb/0x140 [ 896.997236] ? SyS_write+0x14d/0x210 [ 897.001031] ? SyS_read+0x210/0x210 [ 897.004675] SyS_sendmmsg+0x2f/0x50 [ 897.008305] ? __sys_sendmmsg+0x330/0x330 [ 897.012454] do_syscall_64+0x1d5/0x640 [ 897.016338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 897.021530] RIP: 0033:0x45c479 [ 897.024710] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 897.032432] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 897.039934] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 897.047211] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 897.054499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 897.061772] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000004f 08:21:12 executing program 2 (fault-call:7 fault-nth:80): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:12 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:12 executing program 1: r0 = getpgrp(0x0) get_robust_list(r0, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$nfc_raw(r2, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x3}, 0x10) r3 = getpid() preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000280)=""/1, 0x1}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f0000000700)=""/43, 0x2b}], 0x9, 0x3ff) prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) 08:21:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:12 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mknodat(r3, &(0x7f0000000000)='./bus\x00', 0x7000, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:12 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) 08:21:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 899.500646] FAULT_INJECTION: forcing a failure. [ 899.500646] name failslab, interval 1, probability 0, space 0, times 0 [ 899.519479] CPU: 1 PID: 32530 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 899.527649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.537112] Call Trace: [ 899.540334] dump_stack+0x13e/0x194 [ 899.544019] should_fail.cold+0x10a/0x14b 08:21:12 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 899.548193] should_failslab+0xd6/0x130 [ 899.552195] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 899.557316] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 899.562882] ? __alloc_skb+0x9a/0x4c0 [ 899.566700] __kmalloc_node_track_caller+0x38/0x70 [ 899.571641] __kmalloc_reserve.isra.0+0x35/0xd0 [ 899.576410] __alloc_skb+0xca/0x4c0 [ 899.580151] ? skb_trim+0x160/0x160 [ 899.583976] ? mark_held_locks+0xa6/0xf0 [ 899.588042] sock_wmalloc+0xa5/0xf0 [ 899.591675] pppoe_sendmsg+0x269/0x710 [ 899.595564] ? pppoe_getname+0x130/0x130 [ 899.599625] ? security_socket_sendmsg+0x83/0xb0 [ 899.604400] ? pppoe_getname+0x130/0x130 [ 899.608603] sock_sendmsg+0xc5/0x100 [ 899.612367] ___sys_sendmsg+0x349/0x840 [ 899.616775] ? copy_msghdr_from_user+0x380/0x380 [ 899.621555] ? trace_hardirqs_on+0x10/0x10 [ 899.626228] ? up_read+0x17/0x30 [ 899.629583] ? save_trace+0x290/0x290 [ 899.633553] ? retint_kernel+0x2d/0x2d [ 899.637440] ? find_held_lock+0x2d/0x110 [ 899.641503] ? __might_fault+0x104/0x1b0 [ 899.645634] __sys_sendmmsg+0x129/0x330 [ 899.649663] ? SyS_sendmsg+0x40/0x40 [ 899.653368] ? SyS_write+0x1b7/0x210 [ 899.657097] ? __mutex_unlock_slowpath+0x75/0x780 [ 899.662074] ? wait_for_completion+0x390/0x390 [ 899.666667] ? vfs_write+0xff/0x4e0 [ 899.670289] ? fput+0xb/0x140 [ 899.673451] ? SyS_write+0x14d/0x210 [ 899.677163] ? SyS_read+0x210/0x210 [ 899.680874] SyS_sendmmsg+0x2f/0x50 [ 899.684498] ? __sys_sendmmsg+0x330/0x330 [ 899.688703] do_syscall_64+0x1d5/0x640 [ 899.692678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 899.697861] RIP: 0033:0x45c479 08:21:12 executing program 2 (fault-call:7 fault-nth:81): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 899.701041] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 899.708752] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 899.716129] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 899.723585] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 899.730847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 899.738916] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000050 [ 899.828946] FAULT_INJECTION: forcing a failure. [ 899.828946] name failslab, interval 1, probability 0, space 0, times 0 [ 899.840271] CPU: 0 PID: 32558 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 899.848164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.857529] Call Trace: [ 899.860129] dump_stack+0x13e/0x194 [ 899.863886] should_fail.cold+0x10a/0x14b [ 899.868062] should_failslab+0xd6/0x130 [ 899.872052] kmem_cache_alloc+0x44/0x770 [ 899.876123] ? __lock_acquire+0x5f7/0x4620 [ 899.880398] ? br_allowed_egress+0x3c2/0x6d0 [ 899.884808] skb_clone+0x11c/0x310 [ 899.888357] deliver_clone+0x3f/0xb0 [ 899.892082] br_flood+0x3d2/0x550 [ 899.895566] br_dev_xmit+0x8b5/0xd20 [ 899.899376] ? br_poll_controller+0x10/0x10 [ 899.903719] dev_hard_start_xmit+0x186/0x890 [ 899.908134] __dev_queue_xmit+0x1d91/0x25c0 [ 899.912462] ? find_held_lock+0x2d/0x110 [ 899.918526] ? netdev_pick_tx+0x2e0/0x2e0 [ 899.922675] ? iov_iter_advance+0x8a/0xc70 [ 899.926937] ? memcpy+0x35/0x50 [ 899.930302] ? pppoe_sendmsg+0x5c1/0x710 [ 899.934376] pppoe_sendmsg+0x5c1/0x710 [ 899.938266] ? ether_setup+0x2d0/0x2d0 [ 899.942158] ? pppoe_getname+0x130/0x130 [ 899.946209] ? security_socket_sendmsg+0x83/0xb0 [ 899.950973] ? pppoe_getname+0x130/0x130 [ 899.955080] sock_sendmsg+0xc5/0x100 [ 899.958821] ___sys_sendmsg+0x349/0x840 [ 899.962801] ? copy_msghdr_from_user+0x380/0x380 [ 899.967555] ? trace_hardirqs_on+0x10/0x10 [ 899.971798] ? up_read+0x17/0x30 [ 899.975154] ? save_trace+0x290/0x290 [ 899.978948] ? retint_kernel+0x2d/0x2d [ 899.982828] ? find_held_lock+0x2d/0x110 [ 899.986904] ? __might_fault+0x104/0x1b0 [ 899.991025] __sys_sendmmsg+0x129/0x330 [ 899.994988] ? SyS_sendmsg+0x40/0x40 [ 899.998687] ? SyS_write+0x1b7/0x210 [ 900.002410] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.007245] ? wait_for_completion+0x390/0x390 [ 900.011813] ? vfs_write+0xff/0x4e0 [ 900.015522] ? fput+0xb/0x140 [ 900.018624] ? SyS_write+0x14d/0x210 [ 900.022332] ? SyS_read+0x210/0x210 [ 900.025970] SyS_sendmmsg+0x2f/0x50 [ 900.029582] ? __sys_sendmmsg+0x330/0x330 [ 900.033719] do_syscall_64+0x1d5/0x640 [ 900.037615] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.042790] RIP: 0033:0x45c479 [ 900.045961] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.053652] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 900.060916] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 900.068278] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 08:21:12 executing program 2 (fault-call:7 fault-nth:82): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 900.076062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 900.083744] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000051 [ 900.136417] FAULT_INJECTION: forcing a failure. [ 900.136417] name failslab, interval 1, probability 0, space 0, times 0 [ 900.147846] CPU: 1 PID: 32561 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 900.155736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.165088] Call Trace: [ 900.167682] dump_stack+0x13e/0x194 [ 900.171305] should_fail.cold+0x10a/0x14b [ 900.175450] should_failslab+0xd6/0x130 [ 900.179421] kmem_cache_alloc_node+0x288/0x7a0 [ 900.184093] ? find_held_lock+0x2d/0x110 [ 900.188376] ? lock_sock_nested+0x98/0x100 [ 900.192611] __alloc_skb+0x9a/0x4c0 [ 900.196236] ? skb_trim+0x160/0x160 [ 900.199877] ? mark_held_locks+0xa6/0xf0 [ 900.203978] sock_wmalloc+0xa5/0xf0 [ 900.207621] pppoe_sendmsg+0x269/0x710 [ 900.211709] ? pppoe_getname+0x130/0x130 [ 900.215797] ? security_socket_sendmsg+0x83/0xb0 [ 900.220572] ? pppoe_getname+0x130/0x130 [ 900.224630] sock_sendmsg+0xc5/0x100 [ 900.228351] ___sys_sendmsg+0x349/0x840 [ 900.232333] ? copy_msghdr_from_user+0x380/0x380 08:21:12 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) [ 900.237182] ? trace_hardirqs_on+0x10/0x10 [ 900.241415] ? up_read+0x17/0x30 [ 900.244766] ? save_trace+0x290/0x290 [ 900.248551] ? retint_kernel+0x2d/0x2d [ 900.252427] ? find_held_lock+0x2d/0x110 [ 900.256491] ? __might_fault+0x104/0x1b0 [ 900.260546] __sys_sendmmsg+0x129/0x330 [ 900.264523] ? SyS_sendmsg+0x40/0x40 [ 900.268229] ? SyS_write+0x1b7/0x210 [ 900.271972] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.276835] ? wait_for_completion+0x390/0x390 [ 900.281423] ? vfs_write+0xff/0x4e0 [ 900.285068] ? fput+0xb/0x140 [ 900.288183] ? SyS_write+0x14d/0x210 [ 900.291910] ? SyS_read+0x210/0x210 [ 900.295897] SyS_sendmmsg+0x2f/0x50 [ 900.299534] ? __sys_sendmmsg+0x330/0x330 [ 900.303683] do_syscall_64+0x1d5/0x640 [ 900.307652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.312833] RIP: 0033:0x45c479 [ 900.316024] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.324004] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 08:21:12 executing program 2 (fault-call:7 fault-nth:83): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 900.331272] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 900.338988] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 900.346255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 900.353513] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000052 [ 900.412082] FAULT_INJECTION: forcing a failure. [ 900.412082] name failslab, interval 1, probability 0, space 0, times 0 [ 900.423884] CPU: 1 PID: 32572 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 900.431777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.441142] Call Trace: [ 900.443743] dump_stack+0x13e/0x194 [ 900.447370] should_fail.cold+0x10a/0x14b [ 900.451543] should_failslab+0xd6/0x130 [ 900.455518] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 900.460727] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 900.466212] ? __alloc_skb+0x9a/0x4c0 [ 900.470055] __kmalloc_node_track_caller+0x38/0x70 [ 900.474975] __kmalloc_reserve.isra.0+0x35/0xd0 [ 900.479632] __alloc_skb+0xca/0x4c0 [ 900.483255] ? skb_trim+0x160/0x160 [ 900.486998] ? mark_held_locks+0xa6/0xf0 [ 900.491049] sock_wmalloc+0xa5/0xf0 [ 900.494667] pppoe_sendmsg+0x269/0x710 [ 900.498540] ? pppoe_getname+0x130/0x130 [ 900.502604] ? security_socket_sendmsg+0x83/0xb0 [ 900.507406] ? pppoe_getname+0x130/0x130 [ 900.511464] sock_sendmsg+0xc5/0x100 [ 900.515173] ___sys_sendmsg+0x349/0x840 [ 900.519149] ? copy_msghdr_from_user+0x380/0x380 [ 900.523907] ? trace_hardirqs_on+0x10/0x10 [ 900.528218] ? up_read+0x17/0x30 [ 900.531579] ? save_trace+0x290/0x290 [ 900.535462] ? retint_kernel+0x2d/0x2d [ 900.539349] ? find_held_lock+0x2d/0x110 [ 900.543409] ? __might_fault+0x104/0x1b0 [ 900.547475] __sys_sendmmsg+0x129/0x330 [ 900.551446] ? SyS_sendmsg+0x40/0x40 [ 900.555171] ? SyS_write+0x1b7/0x210 [ 900.558889] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.563801] ? wait_for_completion+0x390/0x390 [ 900.568382] ? vfs_write+0xff/0x4e0 [ 900.572014] ? fput+0xb/0x140 [ 900.575200] ? SyS_write+0x14d/0x210 [ 900.578927] ? SyS_read+0x210/0x210 [ 900.582550] SyS_sendmmsg+0x2f/0x50 [ 900.586205] ? __sys_sendmmsg+0x330/0x330 [ 900.590345] do_syscall_64+0x1d5/0x640 [ 900.594322] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.599506] RIP: 0033:0x45c479 [ 900.602676] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.610374] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 900.617681] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 900.624946] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 900.632207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 900.639469] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000053 08:21:15 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:15 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) fallocate(r2, 0x1, 0x7, 0x400) 08:21:15 executing program 2 (fault-call:7 fault-nth:84): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:15 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) creat(&(0x7f0000000000)='./bus\x00', 0xa3) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f00000003c0)=""/4096) 08:21:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) chdir(&(0x7f0000000000)='./file0\x00') ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:15 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xcfac04150da4f113}, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$RTC_WIE_ON(r8, 0x700f) ptrace$cont(0x18, r4, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x101, 0x1, 0xfff, 0x7ff, 0x2, "a0612e51263cc4b82bb41412a54f700a82892a"}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) syz_init_net_socket$ax25(0x3, 0x5, 0x8) ptrace$cont(0x9, r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r10, 0x401845ef, &(0x7f0000000200)={0x0, 0xffffff80, 0x7, 0x1, 0x3081, 0x3}) [ 902.588674] FAULT_INJECTION: forcing a failure. [ 902.588674] name failslab, interval 1, probability 0, space 0, times 0 [ 902.599959] CPU: 0 PID: 32581 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 902.607858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.611522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pig=32596 comm=syz-executor.1 [ 902.617217] Call Trace: [ 902.617239] dump_stack+0x13e/0x194 08:21:15 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102083dff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x7, 0x6, 0x4, 0x4, 0xfffffffd, 0x4, 0x0, 0x3]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f0000000040), 0x4) ptrace$cont(0x9, r1, 0x0, 0x0) [ 902.617256] should_fail.cold+0x10a/0x14b [ 902.617272] should_failslab+0xd6/0x130 [ 902.617281] kmem_cache_alloc+0x44/0x770 [ 902.617292] ? __lock_acquire+0x5f7/0x4620 [ 902.617308] ? br_allowed_egress+0x3c2/0x6d0 [ 902.637721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pig=32596 comm=syz-executor.1 [ 902.640082] skb_clone+0x11c/0x310 [ 902.640097] deliver_clone+0x3f/0xb0 [ 902.640108] br_flood+0x3d2/0x550 [ 902.640124] br_dev_xmit+0x8b5/0xd20 08:21:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x38) ptrace$cont(0x9, r3, 0x0, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x81, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x20010, r6, 0x3) [ 902.640133] ? br_poll_controller+0x10/0x10 [ 902.640147] dev_hard_start_xmit+0x186/0x890 [ 902.640161] __dev_queue_xmit+0x1d91/0x25c0 [ 902.699448] ? find_held_lock+0x2d/0x110 [ 902.703528] ? netdev_pick_tx+0x2e0/0x2e0 [ 902.707685] ? iov_iter_advance+0x8a/0xc70 [ 902.712644] ? memcpy+0x35/0x50 [ 902.715941] ? pppoe_sendmsg+0x5c1/0x710 [ 902.720017] pppoe_sendmsg+0x5c1/0x710 [ 902.723923] ? ether_setup+0x2d0/0x2d0 [ 902.728027] ? pppoe_getname+0x130/0x130 [ 902.732110] ? security_socket_sendmsg+0x83/0xb0 [ 902.736883] ? pppoe_getname+0x130/0x130 [ 902.740939] sock_sendmsg+0xc5/0x100 [ 902.744649] ___sys_sendmsg+0x349/0x840 [ 902.748636] ? copy_msghdr_from_user+0x380/0x380 [ 902.753396] ? trace_hardirqs_on+0x10/0x10 [ 902.757665] ? up_read+0x17/0x30 [ 902.761021] ? save_trace+0x290/0x290 [ 902.764926] ? retint_kernel+0x2d/0x2d [ 902.769034] ? find_held_lock+0x2d/0x110 [ 902.773165] ? __might_fault+0x104/0x1b0 [ 902.777259] __sys_sendmmsg+0x129/0x330 [ 902.781237] ? SyS_sendmsg+0x40/0x40 [ 902.784990] ? SyS_write+0x1b7/0x210 [ 902.788713] ? __mutex_unlock_slowpath+0x75/0x780 [ 902.793626] ? wait_for_completion+0x390/0x390 [ 902.798205] ? vfs_write+0xff/0x4e0 [ 902.801826] ? fput+0xb/0x140 [ 902.804921] ? SyS_write+0x14d/0x210 [ 902.808629] ? SyS_read+0x210/0x210 [ 902.812328] SyS_sendmmsg+0x2f/0x50 [ 902.815943] ? __sys_sendmmsg+0x330/0x330 [ 902.820090] do_syscall_64+0x1d5/0x640 [ 902.823971] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 902.829321] RIP: 0033:0x45c479 [ 902.832494] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 902.840187] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 902.847446] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 902.854741] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 902.862008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 902.869272] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000054 08:21:15 executing program 2 (fault-call:7 fault-nth:85): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 902.951997] FAULT_INJECTION: forcing a failure. [ 902.951997] name failslab, interval 1, probability 0, space 0, times 0 [ 902.967510] CPU: 0 PID: 32611 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 902.975437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.984889] Call Trace: [ 902.987499] dump_stack+0x13e/0x194 [ 902.991144] should_fail.cold+0x10a/0x14b [ 902.995313] should_failslab+0xd6/0x130 [ 902.999567] kmem_cache_alloc_node+0x288/0x7a0 [ 903.004160] ? find_held_lock+0x2d/0x110 [ 903.008262] ? lock_sock_nested+0x98/0x100 [ 903.012516] __alloc_skb+0x9a/0x4c0 [ 903.016166] ? skb_trim+0x160/0x160 [ 903.019829] ? mark_held_locks+0xa6/0xf0 [ 903.023905] sock_wmalloc+0xa5/0xf0 [ 903.027543] pppoe_sendmsg+0x269/0x710 [ 903.031452] ? pppoe_getname+0x130/0x130 [ 903.035553] ? security_socket_sendmsg+0x83/0xb0 [ 903.040317] ? pppoe_getname+0x130/0x130 [ 903.044470] sock_sendmsg+0xc5/0x100 [ 903.048201] ___sys_sendmsg+0x349/0x840 [ 903.052182] ? copy_msghdr_from_user+0x380/0x380 [ 903.057070] ? trace_hardirqs_on+0x10/0x10 [ 903.061312] ? up_read+0x17/0x30 [ 903.064729] ? save_trace+0x290/0x290 [ 903.068645] ? retint_kernel+0x2d/0x2d [ 903.072537] ? find_held_lock+0x2d/0x110 [ 903.076603] ? __might_fault+0x104/0x1b0 [ 903.080682] __sys_sendmmsg+0x129/0x330 [ 903.085170] ? SyS_sendmsg+0x40/0x40 [ 903.088874] ? SyS_write+0x1b7/0x210 [ 903.092606] ? __mutex_unlock_slowpath+0x75/0x780 [ 903.097448] ? wait_for_completion+0x390/0x390 [ 903.102065] ? vfs_write+0xff/0x4e0 [ 903.105708] ? fput+0xb/0x140 [ 903.110461] ? SyS_write+0x14d/0x210 [ 903.114185] ? SyS_read+0x210/0x210 [ 903.117826] SyS_sendmmsg+0x2f/0x50 [ 903.121439] ? __sys_sendmmsg+0x330/0x330 [ 903.125574] do_syscall_64+0x1d5/0x640 [ 903.129477] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 903.134665] RIP: 0033:0x45c479 [ 903.138104] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 08:21:15 executing program 2 (fault-call:7 fault-nth:86): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 903.145824] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 903.153102] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 903.160482] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 903.167955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 903.175228] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000055 [ 903.218492] FAULT_INJECTION: forcing a failure. [ 903.218492] name failslab, interval 1, probability 0, space 0, times 0 [ 903.231111] CPU: 0 PID: 32615 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 903.239111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.248471] Call Trace: [ 903.251491] dump_stack+0x13e/0x194 [ 903.255126] should_fail.cold+0x10a/0x14b [ 903.259386] should_failslab+0xd6/0x130 [ 903.264927] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 903.270036] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 903.275510] ? __alloc_skb+0x9a/0x4c0 [ 903.279331] __kmalloc_node_track_caller+0x38/0x70 [ 903.284270] __kmalloc_reserve.isra.0+0x35/0xd0 [ 903.288935] __alloc_skb+0xca/0x4c0 [ 903.292563] ? skb_trim+0x160/0x160 [ 903.296182] ? mark_held_locks+0xa6/0xf0 [ 903.300235] sock_wmalloc+0xa5/0xf0 [ 903.303858] pppoe_sendmsg+0x269/0x710 [ 903.307752] ? pppoe_getname+0x130/0x130 [ 903.311813] ? security_socket_sendmsg+0x83/0xb0 [ 903.316560] ? pppoe_getname+0x130/0x130 [ 903.320607] sock_sendmsg+0xc5/0x100 [ 903.324357] ___sys_sendmsg+0x349/0x840 [ 903.328320] ? copy_msghdr_from_user+0x380/0x380 [ 903.333120] ? trace_hardirqs_on+0x10/0x10 [ 903.337358] ? up_read+0x17/0x30 [ 903.340711] ? save_trace+0x290/0x290 [ 903.344507] ? retint_kernel+0x2d/0x2d [ 903.348402] ? find_held_lock+0x2d/0x110 [ 903.352479] ? __might_fault+0x104/0x1b0 [ 903.356574] __sys_sendmmsg+0x129/0x330 [ 903.360562] ? SyS_sendmsg+0x40/0x40 [ 903.364300] ? SyS_write+0x1b7/0x210 [ 903.368034] ? __mutex_unlock_slowpath+0x75/0x780 [ 903.372891] ? wait_for_completion+0x390/0x390 [ 903.377501] ? vfs_write+0xff/0x4e0 [ 903.381151] ? fput+0xb/0x140 [ 903.384264] ? SyS_write+0x14d/0x210 [ 903.388073] ? SyS_read+0x210/0x210 [ 903.391706] SyS_sendmmsg+0x2f/0x50 [ 903.395335] ? __sys_sendmmsg+0x330/0x330 [ 903.400020] do_syscall_64+0x1d5/0x640 [ 903.404070] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 903.409268] RIP: 0033:0x45c479 08:21:16 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r5 = creat(&(0x7f0000000000)='./bus\x00', 0xa3) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 903.412458] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.420170] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 903.427443] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 903.434718] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 903.442035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 903.449308] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000056 08:21:18 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:18 executing program 2 (fault-call:7 fault-nth:87): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:18 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffe98) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x111041, 0x0) r2 = socket(0x2000000000000022, 0x2, 0x11) close(r2) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r5, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0x10}}}, 0x24}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000780)={r9, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000840)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7, @remote, 0x3}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x98) 08:21:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:18 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 905.613354] FAULT_INJECTION: forcing a failure. [ 905.613354] name failslab, interval 1, probability 0, space 0, times 0 [ 905.625263] CPU: 0 PID: 32631 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 905.634111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.642053] delete_channel: no stack [ 905.643468] Call Trace: [ 905.643496] dump_stack+0x13e/0x194 [ 905.643515] should_fail.cold+0x10a/0x14b [ 905.643530] should_failslab+0xd6/0x130 08:21:18 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x2, {0x1, 0x2008, 0x2}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x10083, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 905.643540] kmem_cache_alloc+0x44/0x770 [ 905.651072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32637 comm=syz-executor.3 [ 905.653467] ? __lock_acquire+0x5f7/0x4620 [ 905.653484] ? br_allowed_egress+0x3c2/0x6d0 [ 905.653502] skb_clone+0x11c/0x310 [ 905.653513] deliver_clone+0x3f/0xb0 [ 905.653525] br_flood+0x3d2/0x550 [ 905.697094] br_dev_xmit+0x8b5/0xd20 [ 905.700824] ? br_poll_controller+0x10/0x10 [ 905.705178] dev_hard_start_xmit+0x186/0x890 [ 905.709607] __dev_queue_xmit+0x1d91/0x25c0 [ 905.713945] ? find_held_lock+0x2d/0x110 [ 905.718032] ? netdev_pick_tx+0x2e0/0x2e0 [ 905.722193] ? iov_iter_advance+0x8a/0xc70 [ 905.726447] ? memcpy+0x35/0x50 [ 905.730912] ? pppoe_sendmsg+0x5c1/0x710 [ 905.735023] pppoe_sendmsg+0x5c1/0x710 [ 905.738917] ? ether_setup+0x2d0/0x2d0 [ 905.742866] ? pppoe_getname+0x130/0x130 [ 905.747020] ? security_socket_sendmsg+0x83/0xb0 [ 905.751788] ? pppoe_getname+0x130/0x130 [ 905.755839] sock_sendmsg+0xc5/0x100 [ 905.759542] ___sys_sendmsg+0x349/0x840 [ 905.763531] ? copy_msghdr_from_user+0x380/0x380 [ 905.768324] ? trace_hardirqs_on+0x10/0x10 [ 905.772595] ? up_read+0x17/0x30 [ 905.775983] ? save_trace+0x290/0x290 [ 905.779799] ? retint_kernel+0x2d/0x2d [ 905.783702] ? find_held_lock+0x2d/0x110 [ 905.787773] ? __might_fault+0x104/0x1b0 [ 905.791894] __sys_sendmmsg+0x129/0x330 [ 905.796006] ? SyS_sendmsg+0x40/0x40 [ 905.799731] ? SyS_write+0x1b7/0x210 [ 905.803468] ? __mutex_unlock_slowpath+0x75/0x780 [ 905.808328] ? wait_for_completion+0x390/0x390 [ 905.812931] ? vfs_write+0xff/0x4e0 [ 905.816566] ? fput+0xb/0x140 [ 905.819678] ? SyS_write+0x14d/0x210 [ 905.823400] ? SyS_read+0x210/0x210 [ 905.827039] SyS_sendmmsg+0x2f/0x50 [ 905.830663] ? __sys_sendmmsg+0x330/0x330 [ 905.834810] do_syscall_64+0x1d5/0x640 [ 905.838703] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.843890] RIP: 0033:0x45c479 [ 905.847426] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 905.855135] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 08:21:18 executing program 2 (fault-call:7 fault-nth:88): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 905.862400] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 905.869678] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 905.876968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 905.884338] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000057 [ 905.996922] FAULT_INJECTION: forcing a failure. [ 905.996922] name failslab, interval 1, probability 0, space 0, times 0 [ 906.018838] CPU: 1 PID: 32648 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 906.026770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.036168] Call Trace: [ 906.038798] dump_stack+0x13e/0x194 [ 906.042455] should_fail.cold+0x10a/0x14b [ 906.046628] should_failslab+0xd6/0x130 [ 906.050628] kmem_cache_alloc_node+0x288/0x7a0 [ 906.055257] ? find_held_lock+0x2d/0x110 [ 906.059338] ? lock_sock_nested+0x98/0x100 [ 906.063608] __alloc_skb+0x9a/0x4c0 [ 906.067261] ? skb_trim+0x160/0x160 [ 906.070914] ? mark_held_locks+0xa6/0xf0 [ 906.075175] sock_wmalloc+0xa5/0xf0 [ 906.078821] pppoe_sendmsg+0x269/0x710 [ 906.082844] ? pppoe_getname+0x130/0x130 [ 906.086934] ? security_socket_sendmsg+0x83/0xb0 [ 906.091800] ? pppoe_getname+0x130/0x130 [ 906.095884] sock_sendmsg+0xc5/0x100 [ 906.099621] ___sys_sendmsg+0x349/0x840 [ 906.103782] ? copy_msghdr_from_user+0x380/0x380 [ 906.108574] ? trace_hardirqs_on+0x10/0x10 [ 906.113441] ? up_read+0x17/0x30 [ 906.116825] ? save_trace+0x290/0x290 [ 906.120638] ? retint_kernel+0x2d/0x2d [ 906.124537] ? find_held_lock+0x2d/0x110 [ 906.128895] ? __might_fault+0x104/0x1b0 [ 906.132996] __sys_sendmmsg+0x129/0x330 [ 906.136990] ? SyS_sendmsg+0x40/0x40 [ 906.140720] ? SyS_write+0x1b7/0x210 [ 906.144493] ? __mutex_unlock_slowpath+0x75/0x780 [ 906.149486] ? wait_for_completion+0x390/0x390 [ 906.154116] ? vfs_write+0xff/0x4e0 [ 906.157778] ? fput+0xb/0x140 [ 906.160908] ? SyS_write+0x14d/0x210 [ 906.165002] ? SyS_read+0x210/0x210 [ 906.168646] SyS_sendmmsg+0x2f/0x50 [ 906.172294] ? __sys_sendmmsg+0x330/0x330 [ 906.176544] do_syscall_64+0x1d5/0x640 [ 906.180454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 906.185658] RIP: 0033:0x45c479 [ 906.188862] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.196583] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 906.207772] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 906.215144] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 906.222422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 906.229786] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000058 08:21:18 executing program 2 (fault-call:7 fault-nth:89): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 906.323395] FAULT_INJECTION: forcing a failure. [ 906.323395] name failslab, interval 1, probability 0, space 0, times 0 [ 906.335385] CPU: 1 PID: 32651 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 906.343278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.353504] Call Trace: [ 906.356244] dump_stack+0x13e/0x194 [ 906.359914] should_fail.cold+0x10a/0x14b [ 906.364080] should_failslab+0xd6/0x130 [ 906.368076] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 906.373194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 906.378661] ? __alloc_skb+0x9a/0x4c0 [ 906.382484] __kmalloc_node_track_caller+0x38/0x70 [ 906.387421] __kmalloc_reserve.isra.0+0x35/0xd0 [ 906.390761] delete_channel: no stack [ 906.392097] __alloc_skb+0xca/0x4c0 [ 906.392110] ? skb_trim+0x160/0x160 [ 906.392123] ? mark_held_locks+0xa6/0xf0 [ 906.392136] sock_wmalloc+0xa5/0xf0 [ 906.392150] pppoe_sendmsg+0x269/0x710 [ 906.392162] ? pppoe_getname+0x130/0x130 [ 906.398149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=32652 comm=syz-executor.3 [ 906.399532] ? security_socket_sendmsg+0x83/0xb0 [ 906.399546] ? pppoe_getname+0x130/0x130 [ 906.399555] sock_sendmsg+0xc5/0x100 [ 906.399565] ___sys_sendmsg+0x349/0x840 [ 906.448635] ? copy_msghdr_from_user+0x380/0x380 [ 906.453678] ? trace_hardirqs_on+0x10/0x10 [ 906.457932] ? up_read+0x17/0x30 [ 906.461320] ? save_trace+0x290/0x290 [ 906.465130] ? retint_kernel+0x2d/0x2d [ 906.469907] ? find_held_lock+0x2d/0x110 08:21:19 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x40, 0x0) read$dsp(r1, &(0x7f0000000240)=""/183, 0xb7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) read(r0, &(0x7f0000009f9c)=""/100, 0x64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xbc, 0x10, 0x7fff, 0x400}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r5, 0x5}, 0x8) creat(&(0x7f0000000040)='./bus\x00', 0x119) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x9) 08:21:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 906.473986] ? __might_fault+0x104/0x1b0 [ 906.478081] __sys_sendmmsg+0x129/0x330 [ 906.482590] ? SyS_sendmsg+0x40/0x40 [ 906.486323] ? SyS_write+0x1b7/0x210 [ 906.490068] ? __mutex_unlock_slowpath+0x75/0x780 [ 906.495062] ? wait_for_completion+0x390/0x390 [ 906.499668] ? vfs_write+0xff/0x4e0 [ 906.503315] ? fput+0xb/0x140 [ 906.506535] ? SyS_write+0x14d/0x210 [ 906.510272] ? SyS_read+0x210/0x210 [ 906.513919] SyS_sendmmsg+0x2f/0x50 [ 906.517581] ? __sys_sendmmsg+0x330/0x330 [ 906.521761] do_syscall_64+0x1d5/0x640 [ 906.525942] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 906.531143] RIP: 0033:0x45c479 [ 906.534445] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.542307] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 906.549600] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 906.556970] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 906.564243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 08:21:19 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x2, {0x1, 0x2008, 0x2}}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x10083, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) read(r0, &(0x7f0000009f9c)=""/100, 0x64) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:19 executing program 2 (fault-call:7 fault-nth:90): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 906.572652] R13: 00000000000008d2 R14: 00000000004cb36d R15: 0000000000000059 [ 906.623701] FAULT_INJECTION: forcing a failure. [ 906.623701] name failslab, interval 1, probability 0, space 0, times 0 [ 906.635133] CPU: 0 PID: 32665 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 906.643027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.652405] Call Trace: [ 906.654999] dump_stack+0x13e/0x194 [ 906.658740] should_fail.cold+0x10a/0x14b [ 906.662991] should_failslab+0xd6/0x130 [ 906.666978] kmem_cache_alloc+0x44/0x770 [ 906.671046] ? __lock_acquire+0x5f7/0x4620 [ 906.675294] ? br_allowed_egress+0x3c2/0x6d0 [ 906.679825] skb_clone+0x11c/0x310 [ 906.683388] deliver_clone+0x3f/0xb0 [ 906.687226] br_flood+0x3d2/0x550 [ 906.691483] br_dev_xmit+0x8b5/0xd20 [ 906.695236] ? br_poll_controller+0x10/0x10 [ 906.699692] dev_hard_start_xmit+0x186/0x890 [ 906.704107] __dev_queue_xmit+0x1d91/0x25c0 [ 906.708442] ? find_held_lock+0x2d/0x110 [ 906.712510] ? netdev_pick_tx+0x2e0/0x2e0 [ 906.716649] ? iov_iter_advance+0x8a/0xc70 [ 906.720892] ? memcpy+0x35/0x50 [ 906.724169] ? pppoe_sendmsg+0x5c1/0x710 [ 906.728257] pppoe_sendmsg+0x5c1/0x710 [ 906.732159] ? ether_setup+0x2d0/0x2d0 [ 906.736052] ? pppoe_getname+0x130/0x130 [ 906.740115] ? security_socket_sendmsg+0x83/0xb0 [ 906.744891] ? pppoe_getname+0x130/0x130 [ 906.748985] sock_sendmsg+0xc5/0x100 [ 906.752780] ___sys_sendmsg+0x349/0x840 [ 906.756892] ? copy_msghdr_from_user+0x380/0x380 [ 906.761649] ? trace_hardirqs_on+0x10/0x10 [ 906.765888] ? up_read+0x17/0x30 [ 906.769334] ? save_trace+0x290/0x290 [ 906.773677] ? retint_kernel+0x2d/0x2d [ 906.777597] ? find_held_lock+0x2d/0x110 [ 906.781930] ? __might_fault+0x104/0x1b0 [ 906.786112] __sys_sendmmsg+0x129/0x330 [ 906.790097] ? SyS_sendmsg+0x40/0x40 [ 906.793991] ? SyS_write+0x1b7/0x210 [ 906.797731] ? __mutex_unlock_slowpath+0x75/0x780 [ 906.802582] ? wait_for_completion+0x390/0x390 [ 906.807167] ? vfs_write+0xff/0x4e0 [ 906.810893] ? fput+0xb/0x140 [ 906.813989] ? SyS_write+0x14d/0x210 [ 906.817696] ? SyS_read+0x210/0x210 [ 906.821325] SyS_sendmmsg+0x2f/0x50 [ 906.825194] ? __sys_sendmmsg+0x330/0x330 [ 906.829349] do_syscall_64+0x1d5/0x640 [ 906.833253] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 906.838582] RIP: 0033:0x45c479 [ 906.841794] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.849503] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 906.856792] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 906.864066] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 906.871461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 906.878970] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000005a 08:21:21 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:21 executing program 2 (fault-call:7 fault-nth:91): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000000500000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000000100000000000000000000000010000010010000000000000000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 08:21:21 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="334aad31ed26f537585b4869215f213f79e500a6325ef67221411460e747c2b4d4477b243be2ab541547edd887a015f889dc035e4fde9e4bb2700d24df4fcff733a457194bbe1c670bbf9f086ad5bfd7dd7d3bebf4b66507de2658c780845585d56016feaa9379a650b90bcda92989060eb593e400f9d160f444559935cceeb787afd6238978596e0d2fc6d8ffca3e3dc8ba5bbfb65ddab63c1d5dd91fa9b0cb947c36e6b1e6a1780f536ff06d8c", 0xae, 0x800, &(0x7f0000003580)={0x11, 0x8, r4, 0x1, 0x8, 0x6, @random="2efa4affbb44"}, 0x14) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:21 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000090a000/0x2000)=nil, 0x2000}, 0x1}) read(r0, &(0x7f0000009f9c)=""/100, 0x64) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 08:21:21 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:21 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 908.659579] FAULT_INJECTION: forcing a failure. [ 908.659579] name failslab, interval 1, probability 0, space 0, times 0 [ 908.688056] CPU: 0 PID: 32678 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 908.696033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.705657] Call Trace: [ 908.708353] dump_stack+0x13e/0x194 [ 908.712005] should_fail.cold+0x10a/0x14b [ 908.716327] should_failslab+0xd6/0x130 [ 908.720343] kmem_cache_alloc_node+0x288/0x7a0 [ 908.725224] ? find_held_lock+0x2d/0x110 [ 908.729308] ? lock_sock_nested+0x98/0x100 [ 908.733753] __alloc_skb+0x9a/0x4c0 [ 908.737522] ? skb_trim+0x160/0x160 [ 908.741172] ? mark_held_locks+0xa6/0xf0 [ 908.745254] sock_wmalloc+0xa5/0xf0 [ 908.748900] pppoe_sendmsg+0x269/0x710 [ 908.752808] ? pppoe_getname+0x130/0x130 [ 908.756902] ? security_socket_sendmsg+0x83/0xb0 [ 908.761667] ? pppoe_getname+0x130/0x130 [ 908.765739] sock_sendmsg+0xc5/0x100 [ 908.769485] ___sys_sendmsg+0x349/0x840 [ 908.773574] ? copy_msghdr_from_user+0x380/0x380 [ 908.778358] ? trace_hardirqs_on+0x10/0x10 [ 908.782748] ? up_read+0x17/0x30 [ 908.786220] ? save_trace+0x290/0x290 [ 908.790226] ? retint_kernel+0x2d/0x2d [ 908.794131] ? find_held_lock+0x2d/0x110 [ 908.798211] ? __might_fault+0x104/0x1b0 [ 908.802363] __sys_sendmmsg+0x129/0x330 [ 908.806361] ? SyS_sendmsg+0x40/0x40 [ 908.810087] ? SyS_write+0x1b7/0x210 [ 908.813938] ? __mutex_unlock_slowpath+0x75/0x780 [ 908.818806] ? wait_for_completion+0x390/0x390 [ 908.823431] ? vfs_write+0xff/0x4e0 [ 908.827121] ? fput+0xb/0x140 [ 908.830239] ? SyS_write+0x14d/0x210 [ 908.834490] ? SyS_read+0x210/0x210 [ 908.838152] SyS_sendmmsg+0x2f/0x50 [ 908.841790] ? __sys_sendmmsg+0x330/0x330 [ 908.845948] do_syscall_64+0x1d5/0x640 [ 908.849851] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 908.855431] RIP: 0033:0x45c479 08:21:21 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:21 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 08:21:21 executing program 2 (fault-call:7 fault-nth:92): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 908.858630] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 908.866346] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 908.873628] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 908.881270] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 908.889073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 908.896356] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000005b [ 908.978192] FAULT_INJECTION: forcing a failure. [ 908.978192] name failslab, interval 1, probability 0, space 0, times 0 [ 908.991302] CPU: 0 PID: 32700 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0 [ 908.999229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.008619] Call Trace: [ 909.011220] dump_stack+0x13e/0x194 [ 909.015017] should_fail.cold+0x10a/0x14b [ 909.019188] should_failslab+0xd6/0x130 [ 909.023187] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 909.028294] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 909.033802] ? __alloc_skb+0x9a/0x4c0 [ 909.038232] __kmalloc_node_track_caller+0x38/0x70 [ 909.043164] __kmalloc_reserve.isra.0+0x35/0xd0 [ 909.048738] __alloc_skb+0xca/0x4c0 [ 909.052353] ? skb_trim+0x160/0x160 [ 909.055982] ? mark_held_locks+0xa6/0xf0 [ 909.060113] sock_wmalloc+0xa5/0xf0 [ 909.063858] pppoe_sendmsg+0x269/0x710 [ 909.068007] ? pppoe_getname+0x130/0x130 [ 909.072080] ? security_socket_sendmsg+0x83/0xb0 [ 909.076836] ? pppoe_getname+0x130/0x130 [ 909.080891] sock_sendmsg+0xc5/0x100 [ 909.084611] ___sys_sendmsg+0x349/0x840 [ 909.088583] ? copy_msghdr_from_user+0x380/0x380 [ 909.093331] ? trace_hardirqs_on+0x10/0x10 [ 909.097559] ? up_read+0x17/0x30 [ 909.100915] ? save_trace+0x290/0x290 [ 909.104713] ? retint_kernel+0x2d/0x2d [ 909.108629] ? find_held_lock+0x2d/0x110 [ 909.112870] ? __might_fault+0x104/0x1b0 [ 909.117045] __sys_sendmmsg+0x129/0x330 [ 909.121012] ? SyS_sendmsg+0x40/0x40 [ 909.124721] ? SyS_write+0x1b7/0x210 [ 909.128557] ? __mutex_unlock_slowpath+0x75/0x780 [ 909.133413] ? wait_for_completion+0x390/0x390 [ 909.137993] ? vfs_write+0xff/0x4e0 [ 909.141626] ? fput+0xb/0x140 [ 909.144740] ? SyS_write+0x14d/0x210 [ 909.148463] ? SyS_read+0x210/0x210 [ 909.152088] SyS_sendmmsg+0x2f/0x50 [ 909.155728] ? __sys_sendmmsg+0x330/0x330 [ 909.159989] do_syscall_64+0x1d5/0x640 [ 909.163890] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 909.169117] RIP: 0033:0x45c479 08:21:21 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 909.172294] RSP: 002b:00007f835fdc4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 909.180428] RAX: ffffffffffffffda RBX: 00007f835fdc56d4 RCX: 000000000045c479 [ 909.187729] RDX: 04000000000000eb RSI: 000000002000d180 RDI: 0000000000000006 [ 909.195089] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 909.202608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 909.209869] R13: 00000000000008d2 R14: 00000000004cb36d R15: 000000000000005c [ 1144.800283] INFO: task syz-executor.1:7512 blocked for more than 140 seconds. [ 1144.808083] Not tainted 4.14.172-syzkaller #0 [ 1144.813185] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1144.821209] syz-executor.1 D25440 7512 1 0x00000004 [ 1144.826943] Call Trace: [ 1144.829676] ? __schedule+0x7b8/0x1ca0 [ 1144.833638] ? rwsem_down_write_failed+0x5a3/0xbb0 [ 1144.838752] ? __sched_text_start+0x8/0x8 [ 1144.843019] ? mark_held_locks+0xa6/0xf0 [ 1144.847091] ? _raw_spin_unlock_irq+0x24/0x80 [ 1144.851667] schedule+0x8d/0x1b0 [ 1144.855400] rwsem_down_write_failed+0x5c3/0xbb0 [ 1144.860223] ? rwsem_down_read_failed+0x390/0x390 [ 1144.865086] ? selinux_capable+0x40/0x40 [ 1144.869501] ? save_trace+0x290/0x290 [ 1144.873359] ? call_rwsem_down_write_failed+0x13/0x20 [ 1144.878557] call_rwsem_down_write_failed+0x13/0x20 [ 1144.883647] down_write+0x4f/0x90 [ 1144.887114] ? vfs_unlink+0xc0/0x480 [ 1144.890889] vfs_unlink+0xc0/0x480 [ 1144.894442] do_unlinkat+0x315/0x5d0 [ 1144.898185] ? do_rmdir+0x340/0x340 [ 1144.901897] ? __detach_mounts+0x2e0/0x2e0 [ 1144.906312] ? __do_page_fault+0x35b/0xb40 [ 1144.910632] ? do_syscall_64+0x4c/0x640 [ 1144.915315] ? SyS_unlinkat+0x70/0x70 [ 1144.919117] do_syscall_64+0x1d5/0x640 [ 1144.923075] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1144.928275] RIP: 0033:0x45c1c7 [ 1144.931523] RSP: 002b:00007ffd2feffa38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1144.939247] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c1c7 [ 1144.947117] RDX: 00007ffd2feffa50 RSI: 00007ffd2feffa50 RDI: 00007ffd2feffae0 [ 1144.954526] RBP: 0000000000000b9a R08: 0000000000000000 R09: 0000000000000009 [ 1144.962174] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffd2ff00b70 [ 1144.969467] R13: 0000000001c64940 R14: 0000000000000000 R15: 00007ffd2ff00b70 [ 1144.977146] [ 1144.977146] Showing all locks held in the system: [ 1144.983599] 1 lock held by khungtaskd/1057: [ 1144.988365] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1144.997572] 2 locks held by getty/7466: [ 1145.001821] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.011077] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.020798] 2 locks held by getty/7467: [ 1145.024775] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.034167] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.043659] 2 locks held by getty/7468: [ 1145.047614] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.056677] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.066320] 2 locks held by getty/7469: [ 1145.070339] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.079302] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.088790] 2 locks held by getty/7470: [ 1145.092856] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.102594] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.112045] 2 locks held by getty/7471: [ 1145.116104] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.125269] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.134641] 2 locks held by getty/7472: [ 1145.138614] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 1145.147640] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 1145.157047] 3 locks held by syz-executor.1/7512: [ 1145.161900] #0: (sb_writers#4){.+.+}, at: [] mnt_want_write+0x3a/0xb0 [ 1145.170291] #1: (&type->i_mutex_dir_key#3/1){+.+.}, at: [] do_unlinkat+0x201/0x5d0 [ 1145.179759] #2: (&sb->s_type->i_mutex_key#9){++++}, at: [] vfs_unlink+0xc0/0x480 [ 1145.189195] 2 locks held by syz-executor.1/32643: [ 1145.194106] #0: (sb_writers#4){.+.+}, at: [] vfs_write+0x3a6/0x4e0 [ 1145.202797] #1: (&sb->s_type->i_mutex_key#9){++++}, at: [] ext4_file_write_iter+0x1d5/0xdc0 [ 1145.213123] [ 1145.214756] ============================================= [ 1145.214756] [ 1145.222448] NMI backtrace for cpu 1 [ 1145.226109] CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 4.14.172-syzkaller #0 [ 1145.233546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.243013] Call Trace: [ 1145.245597] dump_stack+0x13e/0x194 [ 1145.249228] nmi_cpu_backtrace.cold+0x57/0x93 [ 1145.253853] ? irq_force_complete_move.cold+0x7b/0x7b [ 1145.259051] nmi_trigger_cpumask_backtrace+0x139/0x17e [ 1145.264420] watchdog+0x5e2/0xb80 [ 1145.267881] ? hungtask_pm_notify+0x50/0x50 [ 1145.272204] kthread+0x30d/0x420 [ 1145.275602] ? kthread_create_on_node+0xd0/0xd0 [ 1145.280314] ret_from_fork+0x24/0x30 [ 1145.284211] Sending NMI from CPU 1 to CPUs 0: [ 1145.288784] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff86401cbe [ 1145.289737] Kernel panic - not syncing: hung_task: blocked tasks [ 1145.302506] CPU: 1 PID: 1057 Comm: khungtaskd Not tainted 4.14.172-syzkaller #0 [ 1145.309984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.319332] Call Trace: [ 1145.321913] dump_stack+0x13e/0x194 [ 1145.325645] panic+0x1f9/0x42d [ 1145.328820] ? add_taint.cold+0x16/0x16 [ 1145.332797] ? printk_safe_flush+0xac/0x110 [ 1145.337125] watchdog+0x5f3/0xb80 [ 1145.341192] ? hungtask_pm_notify+0x50/0x50 [ 1145.345519] kthread+0x30d/0x420 [ 1145.348894] ? kthread_create_on_node+0xd0/0xd0 [ 1145.353549] ret_from_fork+0x24/0x30 [ 1145.359113] Kernel Offset: disabled [ 1145.362870] Rebooting in 86400 seconds..