], 0x1, 0x0) r7 = accept(r6, &(0x7f00000003c0)=@generic, &(0x7f0000000440)=0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000480)={0x4, {{0xa, 0x4e24, 0x1c, @empty, 0x1}}}, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r8, 0x80044dfc, &(0x7f0000000100)) 21:30:36 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x9, "4d274dc87298fc6da908cd35ac9796d2594bbe8e105a9beeca3c29ad58a5e6ae", 0x2, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x90) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000100)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000001c0)={0xd572, 0x6, 0xf1, 0x87, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]}) 21:30:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000540)=[{&(0x7f00000001c0)="f4ce9e9bd506e00e33cdf8de966b2c2d02f9d82f61236094f3af2c7521577e5236", 0xfffffffffffffe40, 0xffffffffffffffff}, {&(0x7f0000000200)="a2b1d4", 0x0, 0x6}, {&(0x7f0000000300)="9e7fa9294a515024e9e438450352899e76caf8e7e167a1ce673c290246bbf264cbf7f4fc1dde6d8de6728487946642e713696b3efc7561e8730b7c2f3cef68858bd2a594b5cdd5a662feddc6285a7c446dad7901ac1d222dee7c251087427960bdb5179bf3513a772da3a840284cc20511467962c1165bc38d54f201451c4fd87105ed22bcccd474ffcb33c8727bf196526d3c950d32c96de0e5a21fd95c4f8c9a98ec9728d15da4d7effdac77", 0x0, 0x8}, {&(0x7f00000003c0)="049cebe3ba0abf0606f103305725c0c96995edf98c14f901d1ba69c08a3c73a4c2ea19598c4254a8577220dbebfd53b15f45286025189256a74ed0e1726549d36fcdd95e167d339b4dd9dd5d8e07a5b8bbfef9d81694c76841d9a0aa546fe3d281509a57f9b88d56f387d22fd782385bd251d93501594c818b1de67f67d95bf76b1a8f1e7ccc913ba170844a2b802c4e70c17447c2300205d6b29161", 0x0, 0xfffffffffffff8e8}, {&(0x7f0000000480)="2f3bf3a2b31cb2e9cc82c878ec7a17cc2454b50be7c27aa576ebdd6621e0804bca43904b7ebdbb9377069dc6b94b7df906aa77fe403315b6bbd257a244faa54a66d80e82c470913b72a92241d528b04e73b6f58ab88ad9e21f7ad49bd6f9abda46fa434e2fa3f62bc4972782de2402565eedf0968bfa78937e64eea1f75825054813acb360a3cbf2e3bb560ddd6f3ffdea6f27acb34fcbbaa8746fc9ade645c453", 0x0, 0x81}], 0x2800000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000005c0)={0x6, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e24, @remote}}}, 0x108) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:36 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="341cf6446000000010000104000000000000f6531e0a8c7db3276ba9810019", @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nr0\x00', r4}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) ioctl$RTC_PLL_SET(r10, 0x40207012, &(0x7f0000000000)={0xffffffff, 0xfffffffb, 0x67, 0x1, 0xffffffff, 0x101, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) recvmmsg(r11, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ftruncate(r11, 0x5e) [ 394.832300] audit: type=1804 audit(1577050236.633:59): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir712465313/syzkaller.MaEJqL/334/bus" dev="sda1" ino=16962 res=1 21:30:36 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0xa, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) 21:30:36 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 395.124740] FAT-fs (loop4): invalid media value (0x23) [ 395.131274] FAT-fs (loop4): Can't find a valid FAT filesystem [ 395.216924] FAT-fs (loop4): invalid media value (0x23) [ 395.222539] FAT-fs (loop4): Can't find a valid FAT filesystem 21:30:37 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/166, 0xa6}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/253, 0xfd}, {&(0x7f0000001480)=""/189, 0xbd}], 0x7, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000001540)={0x6, 'bond0\x00', {0x775}, 0x101}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001580)=0x1671, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:37 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) fsetxattr$smack_xattr_label(r4, &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)={'vfat\x00'}, 0x6, 0x4) 21:30:37 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:37 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x501800, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:37 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="e33c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x80, 0x0) vmsplice(r7, &(0x7f00000009c0)=[{&(0x7f0000000440)="23247473ba54ff5f84d71843b238590cf0ecf99e995085792ad9291985f6e42b057ef5373d35dc5e7591e0f2c3f9b009e2343405169de7572db7b42e44bd384f2d58cf16b0a722739818c3725df6f0a2f15f7b8e15a6258be96bd6d124b3f2c35745cfa17bf573"}, {&(0x7f00000004c0)="3f7731fe22d86448407b81627c35e84566bde4777edcd9f313cbb4d06ed7f83b2dbe2f3140367f9c96b8703728106234114a0d792235892375b9b464ccceca286a245765a313cf1a43beebcb5cb6bc978540b4839f0b40323fcba01c0fb2644295237c43b55d22975bf33bec3b7be2042f88e77375166de434869c37c9c6d40d558f70d2b5c2b8cef92efe65bda01e"}, {&(0x7f0000000580)="816f62ee9f8b41874007e1cd705da9eee57455a05ea038e8b03673052cb937d18e18cbf7f95cded9f04d0b9218ad6e8d70ab57b116cff8362a02f1bf5f6c6cb98c25a75b82d829fd7e5393e1d5cb0ec08cfb0f54f7fb1015bd60c73db97d5e939e50535f3639d01277df93b808c9ce6da2f2bca15f5938a89e628718d44bb6611aff2aab1b9d10f1de33c422b68b3f893940a6a57b9591a06f8f64979af4a46d39742c27ebaa3ed506f6a6e5e5a5d9c598dd7354ba62b04ee4a88f7fe64fd45093139ddc9ee18834113e2951b5c506979b8094e4dd0a27faeee03d39f7363ea9b36a7aba96012a5962"}, {&(0x7f0000000680)="fd3c715f57b7aa61dc0355cbbe338a268c88a923d08c1ed98dd864259d396b0739c826644044809bbd95ab6805c921ea1b9ab61e2b11528d98f114de838eccef69b0bda0bfa3a418026701e6730d6dac0a51406a64a6f5b3f7b847d2015ecab6b5b3beb177d72fb1127243071d88025c11d43fb2dbbf6332796c6fca69bcbf4c15d1c011cbf85d434b2fd76a63fd59be9132e35463871ec21f559075de7bc1fda9b53e795bca080ddf50a327"}, {&(0x7f0000000740)="f1da6bb98447718fd3fd4bac42479103fcb05e6702632a171d876739547b2b828f50bc77fd788aa1cb9a89042b4458f30f0f26c6064eb6eb0224df5d0a978d7411971c83ea0f195d6dd8f1d6dbca5db8367424f56ddaf4a0fa562cba9a908a8bcee10f877fd87aec338451bd09308a02554ef7ad018874a0edf3d09650f1faef279ebe09dae7df4fc1cd"}, {&(0x7f0000000800)="84157b852cb0be3262e06e7425f3e450cbbf0aaef39838a51435ba11fc36ed9e1e3dd441b960e1b03d1968ae82f1e74537befee980b69c4021d9c6cf3d53fa830fff5572babac22427305f", 0xfffffe80}, {&(0x7f0000000880)="541f01ddc2ec064ca34e2a97f056a02a08c8b76f90726b00bf5300bb383491178bbb78cf3a2069166fca9e02268ae6094e217a22a760bde92b467f56c587cf0d6169a20fcfbc790ff10552b7894d57577ab1340fe48a581f2919ef352b0024d232a28ecb71c85ac587e0057861079f35d03c3d5bb02a9dd7a6bc2bb5bfd9026a91466b2ff5532a19922ee2071b8ca59502c09136707173bad51f5d4ccea79634a0a1b2bf0ae8a42347401426503ecf7c05a7"}, {&(0x7f0000000940)="a5eda456a45b7bc42dccf4f74f2cc24e73bc6a5a729ddc9a05764f4c47cc366c07eb65f8905cbe9697155101acd2a86360ca6383b23d5bf2f686e716857fa3c538b2a61adc84a2748364e8bc"}], 0x86a2a5bdccf5e9c, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x90000000, 0x5, 0x4, 0x20000000, 0x7, {r8, r9/1000+30000}, {0x1, 0x1, 0x0, 0x9, 0x0, 0x6c, "10aa4b34"}, 0xfffffffb, 0x1, @fd, 0x6, 0x0, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000300)={0x1f, {0x1, 0x1, 0x7f, 0x0, 0x5c, 0x3f}}, 0x8) statfs(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xd000, 0x4000}) 21:30:37 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x100008, @ipv4={[], [], @multicast1}}, 0x101fd) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x12000, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000140)='./file1\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe9}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb0eb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0xac}}, 0x20000008) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20028000}, 0xc, &(0x7f0000001780)={&(0x7f0000000440)={0x1314, 0x13, 0x10, 0x70bd25, 0x25dfdbfd, {0x2}, [@generic="5a825ebbb19dfd9bcac16dfa71d9aafe41d943b26055749a6fe439228cc73977f87e945da4908bcdc761a2799253b98d73816a02a6dce31979e5fae9fdd3e8484d3bdedb98ee79ef3d50c682cb93ce2e8fa10e895a0267e3ae6b7761f28676677b658ca7e26a0bb8ca0535bdf9465b89cdb25101a0e91855ad6e2626cee1f3cdc08b524e7175afa42e251773d40bca084920cf0510b09202153b8d97c3a6ed7216be100ad65a4b6e004855b1113f3e9aff198adf479daf14dc", @typed={0x14, 0x34, @ipv6=@dev={0xfe, 0x80, [], 0xf}}, @generic="ac17f80afe16ddd5d1c890fec803a97fa4f5c64125d75aad6163ceec28ed27eaf777b68883f4db93d178dbf287f8fd529a5e73b6fd8d3ed6a91fcdd0b142b91a598141778d4ba5db8aebe831afa3c27d0d85d4306b3d632269f6cb19b45e769d0d24acbeef749d7890b60042ccd4e669f07aab8afcdb6d07bda223", @typed={0x14, 0x73, @ipv6=@mcast2}, @generic="3e785a9d5ea9d70717e1", @generic="1846f006df53a44ebd9cfaeb6710fc204dd77752de0443f777ab23a706ab546a18fc2bd546b2f9c3eea60c327b85a78b077c5611987a8525691f852ad849ec667f30aec402bc18deeca8bba6c1ebca9ef5fe26c2332bd7e38df28f506695e691c781e70bc5795d96869d707df7589009b3be0388b9db2718a0d568fa7b7347084b5d19cc924852fcda4b4b04932de5cd48b7625b39d0e5d040e1f35f220c42b2161672bd7c0f8f701f6e3408c296781a90172b3dbdf2811057db10f66e3bf7548904ea6ff4dc837882797c65818fa7cb7a24f1dce15f70401d3d3f0bff8144c777db0fc2cd2a20ba11bcecb713000605dd0b", @generic="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", @generic="df4304f2d69c610649c69bcd8a75bf4d326315a925f448882a568a64781ff125b9e16897ebb9978475309090205cc3ee8554e232185071076452f2523bbb8af356ea0528652cf3d91c3b6069f3404eb8ab8a044d6893394f5502e9f1f4ede284c5d944ba84b2e077514cda4dceaedf7dc7a48247829a3ef5afb4e2faa6d288ff136b1b7d17972e41d3160ad95c04e25f86446d15c3f3116a6f6e822023b08e2a39879050f564e2"]}, 0x1314}, 0x1, 0x0, 0x0, 0x42465}, 0x20000080) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f00000001c0)) 21:30:37 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa20a}, {r4, 0xc140}, {r5, 0x282c}, {r6, 0x40}, {r1, 0x80}, {r7, 0x10}, {r8, 0x1000}, {r1, 0x2}], 0x8, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:37 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x810}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x100000000}, 0x8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 395.855276] audit: type=1400 audit(1577050237.653:60): avc: denied { setopt } for pid=15090 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:30:37 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0x1ff, 0x4, 0x0, 0x0, @msi={0x1, 0xffffffff, 0x84, 0x9}}, {0x4ea, 0x1, 0x0, 0x0, @irqchip={0x3ff, 0x1}}, {0x231, 0x7, 0x0, 0x0, @irqchip={0x1, 0xd1b}}]}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:38 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x1c0800) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000100)={0x7ff, {{0xa, 0x4e23, 0x1, @remote, 0x2}}, {{0xa, 0x4e22, 0x40, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, 0x108) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:38 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23}, 0x80, 0x0}, 0xfd00) close(r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) rt_sigqueueinfo(r5, 0x2b, &(0x7f00000000c0)={0xf, 0x6, 0xd3c}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r6, 0x40207012, &(0x7f0000000080)={0x101, 0x3ff, 0x9, 0x9, 0x7, 0x7, 0x9}) 21:30:38 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/128], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000017100001080000000000000000d8cf0b0b", @ANYRES32=r7, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x12}, @mcast2, @dev={0xfe, 0x80, [], 0xd}, 0x2, 0x101, 0x5, 0x0, 0x1000, 0x2300008, r7}) r8 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:38 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 396.766223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 21:30:38 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:38 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0086000008000000e300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="4b7c4636735a7545f6110244ab4e691df25bb78a47fadd58b1d00cf7cf2bbd9e7288e7d2629570a78bbceedd216af9388fa7e63488b275fced037d043f4a10705ff29822e545a9e8ea144c0648707b35b284eeae761a2721189a5543de6f132f8f7ff6ce184c182a72df242265f14ebc65c547c6ff1f276d0e"], @ANYBLOB="79000000ff0f0000090000004e0000000200000009000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="826a776118eaaba1b0c376cecd2b7bc08fa6fbc8f3361355c28109d009d142f9e99cb69df7273ddac346d96f4b1f515a7dd1fa1c6ce326d214b5d45d1f634272e3d35ccd435ee4ef6d12a42b04ad0387bea73d010d2846cd17a787e7f243df9b540be7f8ca59e7ae85e30cf6d5b0c499b6e39a29eba9a527c551290f21ae80ed985ba2db671f33dd677d2d6f7b52461dcd792f9742a43b3644904249d58e6b391e"], @ANYBLOB="2b0700004000000001010000ff0f00000300000081000000090000003d2f0000004800000900000001000000060000006cf4ffffd5feffffdd000000030000000600000007000000ff070000080000000000010005000000050000000100010000010000e3fcffff0180ffffd200000066370000da1a0000b000000027010000040000000000002001040000060000000500000003000000cc0f0000000100000200000005000000fb000000800000000100000006000000c16c00000900000071398f3b0000000422080000ffff0000020000000200000005000000080000007808000000000000070000000700000002000000ffffffff10da00008b0000000000000006000000890000000000000004000000008000005c21000081000000018000000100000001000000040000000400000001010000080000000900000001800000040000000400000000000000a70f0000cbfc0000900f000040000000040000000700000000040000010000000600000007000000050000000400000002000000050000003d050000ff7f000005000000030000000000010008000000430400000000040040000000010000000100000040000000ff7f0000040000000600000019f7000034000000070000000100008001000000e77c461701000000030000008000000024190000020600000010000008000000ffffff7fad1c0000010000000800000040000000ff7f0000000000004400000003000000ffff00000500000000100000feffffff4c050000090000001f000000ff0000000700000006000000ffffffff194e00008100000005000000faffffff00fcffff01000000ffff0000000000000400000081000000060000000bfb00006d8300000600000008000000010000003a0000000200000001000000200000009901000000000000ff0f000001000000090000000000000000000100090097bfef7affff07000000df0700000100000001000080ff0000000104000000000000000000000800000009000000ff0f000000000000260000000600000000ffffff3fa5000001010000721600000400000053fbffff02000000ff0700000400000006000000060000000300000087050000000000000010000004000000018000003b00000005000000350000008000000000000000ff0f0000d800000003000000800000000900000005000000b7000000b36e000040000000050000000400000005000000070000000500000001000000000000000000000000000000000000003f00000000000000fffffe00ff0f0000c8705f8ed202e1e7020fa14211f2bd866aa212d3ba531f3740b152544c7a364a87fbeb797ab21da94e45344673a7a3b6200022727e057b3ddb9996ce56287536135976267e05b1954f3260c535f137cfeb00048a2f8fe827ccae64c0679ca1437d922164937fc1ea84a7e08cf1d4313f7bb1729b7faf7063ac9ec362b5e1a62efb22fc2f522e91859647fb91e22e52df03540406cda5f588dfb3e092f6161a5bcf4024d83aebfac6cb34ec755ff2f038b6daa99c9d50a9fbb1676cea309d32a7f8a2a7645b6ce8a65265e4a2b6bb8ecfcf065db1d91b4c8406eb92f94681a51006c78ab57dcc5d48426b63f0258f5a69855093d2723cfe8b322f"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:39 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x0, {}, [@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x70, r6, 0x210, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002000}, 0x54018481) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xfc, r6, 0x0, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x163, 0x3, 0x3}}, {0x8, 0x4, 0x2}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x3}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}}, {0x8, 0x4, 0x1}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x14008030}, 0x40000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r7, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) 21:30:39 executing program 4: r0 = shmget(0x2, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000100)='./bus\x00', 0x17e, 0x40) statfs(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f0000000200)=0x1) 21:30:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000300)='vf\x19t\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffff57a, 0x8, &(0x7f0000002700)=[{&(0x7f0000000340)="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", 0xff, 0x6}, {&(0x7f0000000440)="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", 0x1000, 0x3}, {&(0x7f0000001440)="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", 0x1000, 0x8}, {&(0x7f0000002440)="1393fa0e3a2234ded6badd28275aed990aa284de507ead87605e4cfaff7ce1afa4f22d61d2db643e2a4b5967e8994ebe1ccef0861dad8a0752b2583ec15aa30a95a3a9096e73aaec45b8ff8ca8acbb41ab5c07331df0f70689720b67c37a230991681bd5d110bb38cb5b92660bafe12dbaa7cd688036a1f3a6c696e7e3ec03", 0x7f, 0x5}, {&(0x7f00000024c0)="79337f5f273fc8742d3a123e986742c179c26ad05790ed0df58dbaf9fc5f94486bb38370660cc22958b05b42039b093b405697a2d08b0958398c564f20286cf8086d06741d58bfec0a2b142b1b79d2429b0d5844c7cab72130774c54c1226a9bcb7622a769f6d73026d3a7d648ab74f78c1a410aa4575fdab01e9d9871cedf2f13530347be44c5799df77ff117c276b50d45b09bf86ad82d5c24d1166bfd3c5e028b9ed339d2398473cc3d8d9646be86aa1e4c145066e5cf77d89be68ba7ecd74ec21dfa6febe0", 0xc7, 0x2}, {&(0x7f00000025c0)="d1b4a2d89ab31e8babda99e37e2117e66198b0b51af84de8af2f8dc64354ba077e0da425d6fb9b7919ed6036092f164708191a601295da8b43a37e5ddbf4a80011c5fee311d55f96861d072fb59a9f1ade86dbef0974cd82e416cfdc665667a3a83f5636e519effaa95e5f300d3443551c431fd536eb78e4", 0x78, 0x80001}, {&(0x7f0000002640)="c0bced611631ef62f19baed06c880da276dc1f0a5c674e378980154563b4ffdf2629c28164f3b6370f69663ba7a0c8b318eb91e396942c46", 0x38, 0x401}, {&(0x7f0000002680)="e0ee346756fbff440341230b3c41fef2c3cc5a612ccca62f6ac4420d07f4669770481d576d6275c87f26590d4ba0ea5d83fb7794996eb8b6fa4957446aeddec1204f9d29140546d19cd59cf17707ef979b0692789278dc46e59973a385020067650f1f111467f24c6591df32b8", 0x6d, 0xaf}], 0x80000, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000100)='./bus\x00', 0x0, 0x8}, 0x10) dup(r3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) sendmmsg(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@rc={0x1f, {0x4, 0x0, 0xf8, 0x1, 0xff, 0x2}, 0xd}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000100)="42a4f2fd9c433b2f515d41300f00612661813b6f22c78c2a1919550b3d010a55524ac149f911cd44bcb3f5fa0f9568ff8abc618008781a7aeae7a481b2cfc9869961b9b2b93ba9dc11f46907b3674e4ead3e4eb956ed12ce52e4bd553529365547327e9fa92b8ec2b551a0dc119247fd5c4f34a882ae4dbf2e7247b81ed86ff13a46ba384f0590e4a4a50646454adc8b74722c89ac2ba15cfd3c9cdfa361c874aa45e2a3d2089bf6c0e29425285aaa2086a67dc4a6432b8330114ca4018d4e06736d13b1071bece4f4cbe7cb387778028a685db4ccd760c4c2e2213f0a56cb2573a53a777599e8713de33464c6c4b8a37e6d398618873da2", 0xf8}, {&(0x7f00000012c0)="1785794f6a93b931bc8a66cf19d5a7c11cc06b7c088be7b1ccc66dcf7631ea4151a9c2a77ac73dc8698b205b2db7553225106bf87d89425a83b584ca05f85b1b45106b1a8ae87a7f6df5b6d59cc1b18f6b31e237d7a178ae9fcbe4204d80a86aa2fcf6bc9d50b7ea1866e77506ad4b3585dfeeabf6f06a6c6eefd846e57836f80658ca7ddb6d5fdd64d70a1334d16598cbd9670c99f938bf74bbc9b6d45a7dbd2a39178a054e783bda47324bfa1c97570aa1247d5e949adf5f855516fe69b8860320bb6734c730dd8e4c489565a7aa31", 0xd0}, {&(0x7f00000013c0)="ec98526d6cbeb87a29b76d3670186ed01a90de5167e09a55725306a5b73ed6fa02095dcf77fdecfd98dd14065497661d64d152ef5204411597d83198816954cc90c065e7efa80417b9b9950d1b9b20f7b0bd0a6f927efc190baf5165eb1b9d7333c58173ff9747cab4073dfc9811a6c274507b681f01f77037b4d2e873c57317963a273c1230e4b5f4b3c81502751afcda797c94754ae2071372abc2d87aa25d1d1e1e8b260ddff2118e2003567386e944fe40b2b46580bc1d02996d30089cc0ca0798cfe0e6ddf285fe1b76e64b9ba3eda6fab3ea79af65a5c7c9c3847092876637439c3291c85a019ededaec8c33d879c590133a88", 0xf6}, {&(0x7f0000001bc0)="69af0c3222a2f43489833b0963b7eda535d1a5cbd93fb7eb2a3af19d55a730e5729c470889d2412a212304765551b21df52d82614ce4c25b520ccfa374f950179de3717699f858936b28f376988ae30fcbbc68b13435e3930ed65347f4232d517dd17cdb13"}], 0x5, &(0x7f0000001540)=[{0x70, 0x10d, 0x5, "3d9907c3d7ee624f24f1e727de0ca5bcc3495fcd5d747db5624b5b8f030adb140c3cb1708fa2855ba09f6fac4e4073490687f358c0a92b7cf1113eeb78d0b4f9476c99c8ea7e3d83f6a3d2042d7998f6c3f1fcae857dd9531299f93b266824"}, {0x88, 0x88, 0x2, "6998a76bbceb7531303cf2ea72605ed65e66f2bdb4ef3788341200eba3fff83ec3812af459f99c97b3ceca5b8a31c3e0960466602d603bb8b27d455cec13823c49d8e55be7f5b12d3b20c8e3522866de7e67cd409b356aea4ac2155eb4b34174b64ab381173dd69db38f47afaae1182dd27a"}, {0x92, 0x116, 0x0, "336580674f24b6ee2eb498783d61aee9135fcc7adfce692ffc812a61d1fa8f024910ed63134226246260b06a51cdd92870b93cb7318be05f9d816185791db94a1a9fb6cdec50a9083ee523465836ce07e6ac267f1dfd03472ea0f89e1c865c1046ac4c375946061b555f0042ddd140"}, {0x48, 0x119, 0x8, "5170eca869e4f59547242d29d88d8d48bfb4c8b0e47349b17af07472f677e2b9d772c90d50f83e09c77c3b30b9e210b9304c200c44986d"}, {0x10, 0x10c, 0x200}, {0x20, 0x107, 0x4, "d6f2ab5c55c361cfab4708b1f5700f"}], 0x1f0}}, {{&(0x7f0000001740)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001800)=[{0x50, 0x111, 0x8, "948a89cb81b14087e6b5bfdd0f1ce36202e67ed493fd3251acad2d1bdbf604483da2f04fe94f0fbc55dfa5d78594491630c72b41e77dcf8b323d3324"}, {0xf0, 0x3a, 0xfffffeff, "fef8e28d1682b62b0db5e7d667a5de42b3f01dca02f4b59d9949a0a92ed56aeeb0610a1a311756fa9acfba06de62abf8927fbd2de368a155fb65383f87f8a451195f21c137ea2bbf5e6522cdf924bbfbd8ba26a8899709019de6e8f7c2d5f003f897d3b060aad9c4efaffff2e1b1ca38ebb3cd7a78fa5101b93392f3424f3d7a1a8e187b1644cfb06cb8d42dd025da3a2d8f458c9725972461ec22ea38fdcab8eada35e5cbe930e0d55a5cc1e18e750192196fad2384cfabe73ab69f4afccbea52b669c92b37c669d0aa52afd3daa665641d8c1eaa524e4c4da8943248b074c5"}, {0x110, 0x113, 0xffffffff, "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"}, {0x68, 0x111, 0x800, "6677568993b2b42c3cf274505889221bbce444d83bf9c8eb2e77f0a62b27ff8f5dd2b75fa820b0ee76ac9ddc7ef6ec9a9296d19a411c7125406e71d10ec8f1ffffffffffffd8d63ef106"}], 0x2b8}}], 0x2, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open$cgroup(&(0x7f0000001b40)={0x5, 0x70, 0x40, 0x5, 0x9, 0x4e, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x3}, 0x1000, 0x9a5f803, 0x7, 0x5, 0x95c, 0x1, 0x20}, r1, 0x1, r5, 0x3) 21:30:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:39 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "5c964c953544f644371e98d2a1d0c448"}, 0x11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r1, 0x0, 0x4ffe0, 0x1a) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x80000000, 0x80002) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000140)) 21:30:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0xf781d3fb04b05178, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0xcb4, &(0x7f0000000100)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020401cd01000270fff8", 0xfffffd2d}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x40, 0x400000) 21:30:39 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000003c0)={r5}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x95b7}, &(0x7f0000000200)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000080)={{0x1000, 0xd000, 0x10, 0x0, 0x6, 0xa4, 0x4, 0x0, 0x9, 0x0, 0x81, 0x6}, {0x4, 0x10000, 0xf, 0x0, 0x20, 0x80, 0x17, 0x6e, 0x7, 0x81, 0xfa, 0x3f}, {0x10d001, 0x6000, 0x4, 0x40, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0xff, 0x5}, {0x100000, 0x0, 0xe, 0x1, 0xd, 0x2, 0x40, 0x1, 0xff, 0x8, 0xfb, 0xe1}, {0x4000, 0xfe03278ae257b939, 0xca070d55d7fb9ef3, 0x1, 0x81, 0xff, 0x23, 0x5, 0x7, 0x80, 0xf, 0x6}, {0x0, 0x0, 0xa, 0x4, 0x72, 0x2, 0xfa, 0x9, 0xff, 0x3f, 0x50, 0x5}, {0x1000, 0x6000, 0x735735984620d718, 0x2, 0x20, 0xcc, 0x57, 0x6, 0xfe, 0x5, 0x1f, 0x4}, {0x1, 0x2000, 0x5255c8548fb9013, 0xe8, 0x8, 0x0, 0x68, 0x1, 0x1f, 0x7f, 0xe0, 0x26}, {0x3000, 0x1001}, {0xf000}, 0xc0000001, 0x0, 0x100000, 0x250200, 0x4, 0x4500, 0x6000, [0x1, 0x5, 0x0, 0x1]}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) execveat(r9, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000002c0)='em1\x00', &(0x7f0000000340)='\\\\)R::cpuset\xaeselinuxposix_acl_accessem0*/\x00', &(0x7f0000000380)='usereth0self\x00', &(0x7f0000000440)='\xdd!procvboxnet0\x00'], &(0x7f0000000700)=[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='@wlan1\x00', &(0x7f0000000540)='nodevwlan0\x00', &(0x7f0000000580)='.\\\x00', &(0x7f00000005c0)='{!\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='cpuset\x00', &(0x7f0000000680)='ppp1w@&\x00', &(0x7f00000006c0)='\x00'], 0x100) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000780)={[{0x6982, 0x8, 0x1f, 0x1f, 0x80, 0x4, 0x3f, 0x0, 0x1, 0x0, 0xe5, 0x82, 0xa47}, {0x1c0ce585, 0x2, 0xf6, 0x0, 0x9, 0x40, 0x7f, 0x8, 0x11, 0xf2, 0x0, 0xea, 0x4}, {0x7, 0x1, 0x3, 0xfd, 0x7e, 0x4, 0x7f, 0x3, 0x81, 0x1, 0x3f, 0x6, 0x8001}], 0x1}) 21:30:40 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sync() r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x4, 0x38) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="15ae7a4ea62f3d88c3922f67e1146a79"}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x6, @empty, 0x3ff}, @in6={0xa, 0x4e24, 0x10001, @ipv4={[], [], @rand_addr=0xfdf}, 0x401}, @in6={0xa, 0x4e24, 0x7f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x27}}, 0x9ac0}, @in6={0xa, 0x4e23, 0x1, @rand_addr="9fabdda11b25b9a75e800f9b32b52c32", 0x8008}, @in6={0xa, 0x4e21, 0x8001, @remote, 0x3f}], 0xac) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 398.325453] FAT-fs (loop4): bogus number of reserved sectors [ 398.343726] FAT-fs (loop4): Can't find a valid FAT filesystem 21:30:40 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmsg$can_raw(r4, &(0x7f0000000600)={&(0x7f0000000080)=@vsock, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/220, 0xdc}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/156, 0x9c}], 0x4, &(0x7f0000000500)=""/247, 0xf7}, 0x40000000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000100)=[0x28cb, 0x7fff], 0x2, 0x400, 0x9b, 0x0, 0x2022, 0x8001, 0x6, {0x3, 0x8001, 0x3ff, 0x6, 0x0, 0x9, 0x3f, 0x8001, 0xffff, 0x5, 0x1, 0xd3, 0x5, 0x9, "762b1100185a20a547aec2d4daf92c1fb7fdd443831dfa5f41ea09603c63d890"}}) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:40 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc435}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:40 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$unix(0x1, 0x8, 0x0) sendto$unix(r4, &(0x7f0000000080)="dd2d02e906d48539c114c849abb773c76a23d3622b280f68be4fa1806b0daf68134cc55e688daef845075c38a4ab72ecab9aee007c1e3f9c08ca27b9345512b7d062aee6ea0b841aeb112a746a72d0448965b9a5d634af0c96e260cfc19f4ac13148d557e31362519c1ce588e25a1d44fb7e331d96cd7cd9", 0x78, 0x4000, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:40 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:41 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xfffd, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x33c380000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1d) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @window={0x3, 0x0, 0x8b}, @mss], 0x3) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:41 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) prctl$PR_CAPBSET_DROP(0x18, 0xd) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) socket$inet_sctp(0x2, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:41 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./bus/file0\x00') fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000200)={0x3, 0x800}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x0, @rc={0x1f, {0xc9, 0x6, 0x20, 0xf2, 0x9, 0xfc}, 0x50}, @rc={0x1f, {0x89, 0x3, 0xfd, 0x1, 0x50, 0x3d}, 0x3f}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x2}}, 0x81, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)='hsr0\x00', 0x54, 0x6, 0xfffa}) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) mq_unlink(&(0x7f0000000100)='losecurityvboxnet1+lo\x00') 21:30:41 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b86f1f9fd2699e2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8800000}]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000000) 21:30:41 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x600, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$dsp(r6, &(0x7f00000000c0)="d09d5cddb447fc639d9d489a0277ecfb98d666bf5e01e13651c98600ef6b2349b1c166693419690e16bf321f532bbfa2c81572d1745ef8dd1ab036af6081ba991bf71401a45b4a16df54e1c38d99c6a8ac7d5c321028dbf46554347982a4fbc8e9bb1e31df1a61d78e18bfe89dd83cf1f198d12ed4fddd04720e2c935348bfde6351589228ffa8ccebf21efd172ccd05", 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 21:30:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000100)={{0x0, @addr=0x8}, 0x8, 0x250c2add, 0x3}) write(r4, &(0x7f0000000080)="ee06137556c2756e81d6e0ef3cc80fcdb19eac1f14faae02a7a18882e8ecdf215c5d76e8ac456f4cc51ec18cda76dbef4d416dd17059027a8f661315aade91fdd09d40b19ffea73c27bca66710aad4b44ef0f3d6b3b05c9c17a6d31133f546a76b", 0x61) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:42 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x400, 0x8, 0x5, 0x2, 0x72fe8672, 0xfff, 0x5}, 0x20) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:42 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000080)={0x3, {{0x2, 0x4e24, @rand_addr=0x8}}}, 0x88) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x5, @remote, 0x404}}}, 0x38) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x93b}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r5}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10088, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@nodevmap='nodevmap'}, {@access_any='access=any'}, {@cachetag={'cachetag', 0x3d, '[cgroupcgroup'}}, {@fscache='fscache'}, {@fscache='fscache'}, {@access_uid={'access', 0x3d, r8}}, {@access_client='access=client'}, {@msize={'msize', 0x3d, 0x6}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@measure='measure'}]}}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 21:30:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x800) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002640)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x58, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x2) vmsplice(r5, &(0x7f0000002580)=[{&(0x7f0000000200)="846ba919471e51ce31e90503d6f7c8d0db5f", 0x12}, {&(0x7f0000000300)="530c4cd700784bae2c1cd459e335c69bb30748e7120c5ab5af0df72f68f81f8851eda3e9cdcf0e8a60eaa3b0688feae96b1b2150f3b0234e243d852117be4fafcc9b25065baa9257beffff509db1a1d6e96c059b4031cd0b9a5f91fdd73cce99eccc2af56a574c457e6f195369ab2adddf9511f0acd11c5dd6623f4115df21fea072c7198bd380b94716fc9b1d5f7f0dafa32d6d18900cc27f2b93beb67afa382534049d8a1a1e49f57380b082ee273640cd9f49aa8e41c32060807099b926f6274474d1dc9f86edc891604d8e9c4d253b5979e1ac96a8e11deb8dc741995ab6f4a5c2c143b815fc5eb672c1af3a14339f09300f", 0xf4}, {&(0x7f0000000400)="507d08d7c0912c7359b596d7a799b36150c8c4232f0a3f297a0cf1731772d11d52c5989d91f051898063c461d2c8449e9d8739826369dc49761756df45ee52cab2", 0x41}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000240)="d3d4908b1fbece62b79f023d308af30b", 0x10}, {&(0x7f0000001480)="eb1cf6abcec2beab6f026bb310e155752d4d99e0e2d6611b9037c5c05ab2ba08e1ec4cb66ed27a35fe0e0543c4317a3af79ada2ae201", 0x36}, {&(0x7f00000014c0)="58433213d7e9405cf2ed4563e6fc9bd1fc949f176a4502850e72947d0d9f95a4dd0f6c0234bce1350aaf3eda7188f8aa1292b7cc3e84718ea25e664d4f3cd764ed7d9d8ea8c2ee3b1590c4d86600036fc358b21dce7b5f5d8a2283beb10f18056f21689006904a4bb658b7897921d8b630b0e8a55ab0358273bf308526eaf52c30b1b999f6064483ec6308cd4486008627ae5b70e473dd21ade8", 0x9a}, {&(0x7f0000001580)="67e6e976ad37b80ebb5f19e5c08b1f2530cb3fe7b99ff59a8036fe8825b48a0617afb15f6f8c1f7759387ecf2d32bb25add59d79734eac8955b8481474e88a17c5da486234a02156e2976e3226c46897ba7a3ef5924a1624d34b527c60ec4e4876ee026a9653ac670c8828e1b9c5ff1dc7f6fdc020250f56b941897ff1ecd394f7c3e1ffe972d48ab514b50114bc5996c0b9a62c7b04ab20143b865a3b9eb3baa226b5881fc14a1f9399387b2e7399c420e693ef0820b7e3065bedb414d77ed19acab575773be9de809525e2e98923970856700ec205aabab3321f54f14b9aaa2023db4edd639117a736b124548f80928c971ef3450a889ce48b1c86b2e77474a3ffc89ac9206dcdfa47aa115cf580057f9ef1931c3143929756e27850b591afea8c179258384072ff7d5724b8ae335aad12fca093a57242dd45e5189d6d38bc54cde994a17d591a7c8ead68218411f2b2004bb45bae3e114730e9829cbc7eea71207e71eab4f52e295e65ef559711e7a19e914f20a62780f798a7e7b01c7c9f20052787b32bdac08da55d802bc0ae923f66c64cb3fa5329ffe2614fe1f792bbb250f16becd6b66529f527d310a9712eefa035bacbe4f3c45a8b3312a51075c851bb3ed6221cf8a124634edbf978be7b6d6bc649158fa62fe105a397766696c22cad337f7bc53a679be93dcf92ccbc23a3ca366d05a9a1168936d80f8ba1debd6af1859b91d4b24a8a1fa1ad4a8b4d747813c3204ce6eee92d57d1cd951ba6901d850e13fbac37d4dde20c3a30da2eb387a1bcc77afd93f1a882f016543dd51d4fda42ae5a2d9c7987613148206bb2bebcdaf498f01161cdf89d3c95cbdb6078d99b76f8ec13bdf9706116aa0ebbe2afb6b0073711e04e766528e78ba4e09e299653fd00db3f1e80b87568d4196c422a74bd7f9bd660b52f78d5b9d269b5d7746c88c8faecd45036c16d1588134a8e4d36f04584b603fa8ab07b7288bf5ff1e71cf20bcc0d784bff4c826dedd7a42e3dbf4e7b5efb3172b1e2ade23fc7cc0db53f4e6bb0bce9195b439707b853d0fd567cd2d9af8326e54ea32244786d46865e495852552f4fc835afc1b106832566fea3fde08dbc49b7b9a677d3b585c95ce73f2e893a5c36c56e7e523aba56b9b2aee78e94d119a666eb07fd37fe86cb844ed662ef9a2a0b153b2759a744a5d5d062b56dcd88b9e3c98005a3e7e42f95df55be8474beb85ede5b14a3af998a4ce1e017cb2e932930a6544f53d9675fa06acc3bcd425f7051524ef3bc4c9f3ad83a4b3b93f491a64e82fcc59d8d0542512896f75d5220182f7b31be263edb567aa88974b83c24a82ae59766aaf0b1449234ff6db4613039ab3224e9166bc720d1469386ad412b7335f84398f3691d0954434e42e7d62f8ad6f20056402d0eff765e4c1c059a1eaa0f13193da5e6e8b0e68cafa66d3ec6853a8c0f44cbf55521df7476ff7f131e39221322c0e2d35617f8eeb7bae2d302a9b4ebdb1cf552cc2e4345ca5306779ec90265a77422eab121ed7bdf5c1a0d0f96530d02d544cccaca42ee27190cd0f443cb229e71ff6933e684923a533a095f5c6c2d549fa65132707d0a586981a5c0a5a6470bb3e57045b431ddff6525de2a3f610483365c8d09418d53f26ef894bd5d0342fbd0e3d2a1dd10f689257e424fbe42c8095df7e6ae71f410e470ecf542317afd74cffabc0ab7b6f28224ebb02937652456f87d54ff6c2741eab075ec73108721974dd0a110a7befbdce784ae1d6a91b5b1b800c8838a4b7eb80cc183ac8f40066bd5101296c4d7ebcbd5e50087f2fb45d487532df9323f33c29fecf2f4c980c43c8bb653b5b413c790680a4b2196852260a52ed0abfb4535ae063541cf341c66ce89ff351a993bf88519beb63487e35ea93e7bdb3d821e43f8b136c990357ba2b12419bd3a1051a038806c62ff440c00d15f2206ec584c82363734c8c5a91425d3cc735cd6fccd644a86f2bc02f76b15c65eeea0c7fe67dfc48df9f6f8d1a64c0b806d5b13d4c5dc2a555d92bfc8723e6a5478287877ad72abf7f307fb3288c2cdad45dc1644514ace69e4aaaea110d611177e93475798960a4d537eda59deb974a9d2e4b39fd7f37db8f3d55cc462d61553996fdbe9e2093770db15546ced8d7a4f46060ad4b2e176165ee19bdc0a71c49114ec69116c6060831209a8b1d892ac7f7704728c673ea177011c2ba0fba5ad53f77d7486fba74d3eaa35be568fc8ba530f4cd9003e947895dd65cba6261cbd0eb70d3591f788158bb3dd61439bfc9c4e24638b240ecdea66f0fc4fcbc18ae67c196fde1985c7a0b7938a9c21582fc1b433791de547043d180b37727a94f042c81f3f8a1a4297b850fe9085045c1289e848a0c1b47a463cdf9a098d4bdfa821504c372656c3edf5362552d68beb11b06abeab0efc09e8c6e6005364675fdd6274fe784c934fa9b3500ea55054e81c8af788c448783497fc302b7ebe3b5d62f0d137dc2641f3ca61754db03360075da7f8263a4cecdf6b2fb5b32bd39634f7eb7236f477fee49752620ba11316da7e40bf4d1fa31f03ee844b343b410ed62f8b29d4777199cd52ef1763742cb3c292f27df407253281d88ed1ecc7a04f0b4081ba1b92d6247ff7a039188af40bac92f2cd214ed10c7cc35dfa8b3ad05c896f83ef7c1e96ca58d16dd758e4c5cf8ffe169dcfce24f2e01530aa02b4212143b8d5ef84df74631bf50b7259da6b8ee0627941fd3ad8c612c7b0760732186963055004c48622e0f773f872a92b3e08ee90cd3b0d864877f7fb6d62982496e38cbc70d370aa045b7f401ffbaec6fc788d33aad5d0d5751af8992fa50c109cbb6aae7a78984fc3b058f925f627244f648868e25d2d4bb1ec1e1d1fbf080c79a69e72b21f219fb1fa5e8b6222bdaf5d5c5901a4304f4c39c848b300360dba4224eceb96bf5394763cb60e3cd8ca0f941fc84ad95d0e8817498d4a0ae3ecbf398f89d7e68bedd0f1083cb8486ae741348edd868fc7c126678806f50dff1bb467ff7d712307ba8a5f3e6cdc47700334eca8ef35effbf3eeaafd09f9486ef38385c0743d510d1b44551f992d54dae0c00bb0eafe0ce43b5ddfb3f7938be8d8258192ab9d71304f32ccd04f285264546876b365ff5475674faa30ade2d9e86ef8f60093d40ce7abec9fcd3f97b201ec3546ef134d70a44c8e904b60bc582b3221409068cffcc9145befb7b1b0e92e369215f8cdf397c31859033ef694d9bfffb46f2e0da9b82f9553a274d914544412df9764b74fdc70ca2f9bbbe2257163752116bd39bb76a2a99ce08872fc030fdc5d0e2b4076e31e849b0cabd4b33e6856894bf181b81c103935c90a13efc05793201f41ed30d00cc63abcd0736b6efb95bbd76885c9f9c5bc39244c1f585818a12fca417ebe3070265eaa632df1287cab4542c3d87a5fc3726588784ff911abe32036475367bb46144076d7f727ff40a2811016f06cb9287711825eaa98cda372cd312d249e6b927f213f4993ad22de9f24c5ff23e9eed094fe1a02021bb932cd33c885ffa971dcb5cfde80e36f42b5b60d578aa7e83df583c1f1ab416b2fb2069eb020f3e211fa04ed22027f6227f1604efb78fe1ef75c493a39fbb1ee0682eb3dbc5dbedbe4c6b6ddcb996f4776ed69a9c2232128224c1bcf8b1bfb022020297299a4f0e39146771eb6d921a1a11020781978dabbef7b6d474b64a4f9a9658ca5edd35a6415495cea21e82832afc8640dc6beb39f50f1ac78351b5bd68e2baaf217316a29f94812f5016d00208f66d3e453b62c147d83059c9a617169c9f38b40640a0eb1d86e4b8aae16c35adcfe6b1cafc01f39f2a8170649b2904092e781d60fee9d80337a4edf9a8954b797e958d9ccae9e47a5251dde5fab25da1d26128cccb43512e4e2bf3efb24fc4a89adb552f43dc350b78c200bef77ae37492376c1be4188b3cc79536374e93fcc5307d787305bbe6413612dd0bd712ad2c77b59d602617752945fabf46be7de8bd6757be13e5032cbc28fb256aa0a3122486222b098d57192cc6edbab1aebd7542d52416a020274edada6a267d6688a0bd0d8a23571e66c717e07d5708542f97eb9a819fcd4fb7c1394ab9dfe5ffafc7c76c1a7fc727d0d8f101b2147341741cd3a044dc1af50ede0cca3e4f37e7469032f6bc4e10f932d0f33011f11476f14afd2207cd731e6c32ac211a31495c10583b2701e8a5e9cf1ef46b9e3d4d6bc1eff3c27a2593e94b79646f0b3732bbae1add03918221b4b6ccfb8cc83c8418d9d4e56c96b544fa52f94d5574747b74b1d0df66dceec9947a47e97cbcd96e3e79fad77eca487d8aead41db448bd5c21f810c70c6d408b455fa29f792826c19511f4db0669f1fd6254a6623285dc6f66d0398bda3a844673dfaa4a7785f90d68d7a73d8fe70793a3fbdaf874f30cc565c56070634f0f18bf5e485e7b193c46956cbb1fc30279eae6f0463cdc8420f6c3731ff00a4e6d65992d661d94a886897cf417269e06a6a1f93a62fdc2ceaac632f1a61ed6476e766a0337e2644c19bcca0160b144fe4dd5ae94f1c8ba0496b76ec68be155ec66aaa8c4ad8731efcc4fcbdf3b54c167ee449123c41e1f23218f03293ac2ae71ab98aa9beb1df59e6b5e02bda7113a31d6bd94760ea52bd681e29b2f76742e209d05f5d56070320e2f55e7aa6fa0b618a7dacb9809727afd2164973273195f9c3b375752fe1bc2a23255f16d719f6c8a0a1b7539d9f4f1470e2183f2c3c73c3f26cd30b382f48e26759eaf2b88c4572f69c812a8eb130c8834f0884c4c4964ebf2ebac2f38a28dbb3a4b69528a90eddbb214d495af7e6158251359328922d5607290026c299c379bcaef74ac207757c8524278c5e99f18ca13273c9f18ad58b90023f9125729eb7d705973a8448b42ece79e9da8de024c9ab970356ace6e4b78555c3c75bce246011cead6f6a21662e5a9a6627a0df83101d5bbff9396a76f312f06257a14d5c023a66303100cdb178a8ca0978898a54c44c64294a2f0addd7852cfe075793ec72cfb08d3e62c987bfb93bb622881818a73577b664fd586a2aece81a9ea8c6510a83a8d367726459375202482d0c76d16f9d4fe041c3a7520eebbbed2422556bd2dcb170b58e8305df17421102a00e878f2a1ea50800aefa135f90e326a9267dfe5f6736a8323cb03bd598dd6804cfcfb3b075c437a29870e3e670764773518a69819ca355e0d9f8cc75dd4f4a8ce5c12040b31cfae27fab1dc0ed6222300611511c77c0ee3cc9884604ca42fd40adc2ce842e61ee428a7ca4205a6fce5f7592b88d14eece08a8160b5533c5c82a2896676f7d05de6f6bc64c05b42d3c897a290c79b52b016ba24ae05d328408867e7946af9d964a92ed32275f0e6a3df6b0ce165f19043f56435ac1b4e0164e23e33435de469df6fc77274e2964c701fbfb36156b3234aa19496ee80f35fa57df89b9832374db67149d4b73f0ddab06dfebcfb7257e7abbb2d74b7079c5034d0f7513d4f00664671dd0650fb0779f6709a32e698488984b020c1084910c4964bed0d54f15a8da5ed9c73573ee4b0d0d4ac0f9f2d9108c9b50986111859ec413e6c365fa4c9adbcf91549ceb3949e8877ad5c8287a2ba5d58728f1a1ba4217f1d461ce95a025fc85b2d3184875bf8d3688688875733ac48998506738c66da4c9c6468a1409c3a8166135ff1e34555a8861eda2531566c7c7e6e4e84b712d408bd67a06cb3fed7e1c8b412edbe39dc3a97b2535514b46d81a93471c", 0x1000}], 0x8, 0x1) 21:30:42 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3f) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x54b30486e3e1e4fb, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x0, 0x7, 0x3f, 0x4, 0x27dc, 0xbaf, 0x3, 0x1, 0x7, 0x8, 0x40, 0x4, 0xfe3, 0x1, 0x2], 0x5000, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdd, 0xa) 21:30:42 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x37128, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x8cf, &(0x7f0000000180)=0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040), 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:setrans_exec_t:s0\x00', 0x24, 0x3) 21:30:43 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000080)) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) dup3(r5, 0xffffffffffffffff, 0x40000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:30:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x84001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2282, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:43 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000300)={0xb, &(0x7f0000000240)=""/11}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000200)='vfat\x00', 0x5, 0x1) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:43 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES16=r2, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES16, @ANYRES64=r7, @ANYRESHEX, @ANYRESOCT=r1, @ANYRESOCT, @ANYRESDEC], @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES64, @ANYRES16=r6], 0x4a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 21:30:43 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendto$rose(r1, &(0x7f0000000080)="ce69404e62700c2ab424e16c44f0a54fbffb12accb19261f72328ca55aad1f34edb3d688746b27f676c30fb08abd6cf17d05382ba312c9ddaa78553ef8", 0x3d, 0x44885, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000000)=0x3ff) 21:30:43 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/connector\x00') ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000180)={0x8001, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 21:30:43 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) write$cgroup_int(r0, &(0x7f0000003f40)=0xfffffffffffffffc, 0x12) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000003e80)={0x1ff, {{0x2, 0x4e21, @rand_addr=0x100}}}, 0x88) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8080, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003d80), 0x0, 0x45) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:43 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000080)=""/78) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = getegid() setgid(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000000), 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:44 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x40}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:44 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x81, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x3000, 0xfffa, 0x1, 0xff]}, &(0x7f0000000080)=0xc) 21:30:44 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) write$binfmt_misc(r1, &(0x7f0000002980)=ANY=[@ANYBLOB="69e85fb26e5b8ba4afb1df47b3cac3393facfd1bfd42606ee572ce2477560503091da238bf90887d43ad815c499e2c2039b5453ca83f9bc22c283fe3d89ce0f06bdaee019367f31b170f15e5fdcb2e8af69a201a335081686c976f69315db3fb72dfc758689474b811c6d4", @ANYBLOB="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", @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=r4, @ANYPTR, @ANYRESOCT=r0, @ANYRES16=r5], 0x10d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$FUSE_BMAP(r6, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x5}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000002800)=[{&(0x7f00000002c0)="267d3270d94bd5c31b836b620bdb54a5ffe660"}, {&(0x7f0000000340)="49020247e6503b0836467db41441c3d2b96f94125c305bb08ab97679555a6486c4781182df17ce4c9245a210ee38449d70bc484b766948549215343d21c0c7ba6ecce4591ea00b7c93e6b323601669a81bd1e46c1e74a9fd5a73d3a814780e6783c1fd567e555f13642b1d55d7e78108a775bd03f2a22a1d3ef6d7ce05756292cf3369278645a81582358172572835da8533366488e0c4498c9091f7501250328d8cedf0b93e4d993455950b24b6e9355a179fd56418d19fa2f4c81e4b10bcd3442bdb7340e41dfa571e208d505452fdb9e0c165dcc49e2ac1cc9cf446a559beed3c36c6fb98034d78c319cd66f4a9f41279"}, {&(0x7f0000000440)="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"}, {&(0x7f0000001440)="d0bf1c1f604dac8a5b1283c20940964afb5fec2a2f4d6c4d25ca7618a7c9fd03562a2ebd0adb62900eb50e3952867df80414f24511c23bb740017b87a092e737c3c9e95b746b80d25ed7ddb199aaa75b7e73359f5d4b0c062653a42cfd027cb78b7b3c9ef4a2a196c7719ba5f94696db2a3d96d8107afcfe31ea0c24f8f24bfa737da89f71af029320c3f6bdda842e83d2b741ced5f77837f1156aa68200a2a92a936b5a9835047f0d974e45f4da2ec3be93ab789a0d38d966bd03a4ab07bc4a39135c83fd6c4368f68adc4bd98c42a971251fa50afbb1915fe0d490571e93e2adbe6b21bf99fc3975b2dbc306a8ff"}, {&(0x7f0000001540)="689aabfd2a2e58fe62c6249b7aa29bd7c5cbe1c5388d42d8d964783d75a8e8196750fbda571fcdc7263eebdc6df2866bb27723005d9d1912021f24b61f834be5ec5268f043da528d32aefc53f8256b715b90057c81cdfc23829ab34c19e22ffe4449e5b69ca4cd759bac78db29cb4a8373ea3334874b6d889b6fe2831466743c56906bb4b84a36928f108ea0247f2a3b85a94f522f30a8b55fe0952a1f96b4b24a4f33360c854333cdc1a40442e571528cda1610c5999861b202f97feddfa4"}, {&(0x7f0000001600)="36cfdfa512c1ce28db493b5bb0786b9d5bac76386a1d060fbc9a5ee0ab4f1622a69dc085fb750ebf7b9ce8a05ad71e2d2ba732e5640e2997706fd5fea47e6e6076c19e421e45c532d88ed1de7a475623ad16f362057299cb136b1a7851caa940d61d5a8edd79ca015622fa0d5cf26e6afc9ad0cca88cbd576cc5c136e107fe766674ec9a8bed21f1bb3359e239428459c9129ac197e314d9c88d8dbd40237743a52632a83ef0d52f7a633be9a14b1da5979240f7b65138a5ed0f26242b36aea3389f82ac16e4a04338e0866b91a3f9616cce44c600"}, {&(0x7f0000002880)="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"}, {&(0x7f0000001800)="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"}], 0x1000000000000008, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)) get_thread_area(&(0x7f0000000100)={0x5, 0x20001000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r4) 21:30:44 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getpeername(r4, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x7, 0x9, 0x1, 0x1000, r0}) splice(r6, 0x0, r5, 0x0, 0x8001, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 21:30:44 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_buf(r4, 0x0, 0x0, &(0x7f0000000100)="7567f0c192d83cead8eb6a79e008d74bc3aa70eab4ea6aef0af66be49852a905ac4d417097160bc0d1e27eec7ae305256a8b6ff5414cbc12fbf5461c02c85a2396e7eb49ea01e1c777c7b4c258f693a806057d9cc72573b42b49ad7bae6dcfdd2a32e05f353349d9de88b4bb29b6c875f27e1cb59022fa085762bae26df645092f134505126b57838aa42e14e2c29f0dd8436c4b5a636966c1653d49f3e8b626bfb509684719e197d1a15011950e7a1d0f918f144445e6dd2418968c6d1c9ad2af308ccf2d62980a178b5ce777cab580248139817283a9be121b14741f68", 0xde) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000000c0)={0xa30000, 0x3, 0x8, r6, 0x0, &(0x7f0000000080)={0x9a091e, 0xb0b2, [], @p_u8=&(0x7f0000000000)=0x3f}}) ioctl$VT_WAITACTIVE(r7, 0x5607) 21:30:44 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0xfffffffc, 0x4) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000018c0)=0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) sendmmsg$sock(r3, &(0x7f0000001840)=[{{&(0x7f00000000c0)=@hci={0x1f, 0x7, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)="1568e8dd9542ac72744647", 0xb}, {&(0x7f0000000180)="c781ae53befa4157527d72422a1122163bcfa165621e2b3880935fce6329da764882ccaabbbd43fe63316868cb52d22fabb34020982556d22991d1c2c4bc1024d5a617be714f264bc23e6837dd5e6a6665c2a72d39fccc93", 0x58}, {&(0x7f0000000200)="350235ee20ece637a263edc207693f5fdc37cd1c72bc771e7cf6add2bc8b902716884c21c7fd9098f7e9859402bb063dffd1200ce4f63479a8c08f70c44578ea79120427773267b42f2dba94865406db982757cc6786044cf8139193e796d766325d8574c1d418e8fabe673850053548f5832ca9a39d939688b875257644", 0x7e}, {&(0x7f00000002c0)="d73cc5d4f79fc785851a5484b07938e920bd05752730c164f61cf4a51495f107fe4521c1737d9a7a946a7372f6b1c3bed1253b761ff73a3a64dd19d4671a82b8976a15965a095a7a0dcbdc1c683d27210689ed0ecf0aa7290d7c8e0195c9dd436eb0bdf419b7dd518c1ca14983271272580ae83659528f43341840076482578952296151a90aea818a8c152a2bc5e4e3c16ba1a43c2fb61cf7e2c9a3f95bc629a00ea2d223c2bb0b7a70d6f3cf38ce053f90ec25e50ee8d4cb32dc47be7670e01887864ca084d3373e37", 0xca}, {&(0x7f00000003c0)="d8978dd282e4eae1f45a578b967d67451812a862b454274f49444f588b3d6f84d1e4772e069867b1efe1eaebba9e774c8c5eb539a81525996f133f4027f6b88ee376f053860d381715d2e991c03d43bead9d3ceab0aa14f8996f74020486d69c085b13510b41ece8047dc974d2a262c8ceb66ca8ef60f2e90e72027571e7beb3b3584a398dbc65d519c971a43c4078b6c4bbfc2e74a29478679d42c69dd7a590faca18c5be264eff2f20c62f225e4dbcf86e5a1a5f62b0b707a54d3e76709385d7c5829b753f9d214b6f4ca0b6c496be8b93480d9ce2e92609d971d93ae12cd461c4917b733d4e8664e25430d142ff84a0fa92c14fb4", 0xf6}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="b56f70d11bc5279712529daa850e145b41017264f9e320dcaf00779fd497f6f9c93c984936f62c8b58d0056464e00087358ea00ef196416cce9658185249d35a7940abd21e1700ceb127fdaf75b3a5df1eb3fe4cc67ad0ee69a3b75d922c902e4a570b", 0x63}, {&(0x7f0000000640)="14c8062f0bd964df35fa22d096208d8ca95c42a879e8de677a5d94ea0f43066fed917a69bf312d7d06e6bbeaf6cf246f34f6c7fde2ae782d6d9abfd6516e52770e6d57d1b7943879cad7863010c93c7f9e8f2b988c6448e26434aecf98e591dff4969553d4a0d4699d49631e88d3055e23b6eb5e2fe048be901af5b77b1216fd8c0653c9eaa916e1b470ec6bb958f589f18fe2da0e748f23199111f983c50dcd71c0ca6bf168876785262ae592ce1fd7bd95f22db1ff5a3d16b9a98077e2f77fbae65f4a75b73cf6e366466af25ddff481c0d3656ce84d8be9daf90fc9813bc6f8", 0xe1}], 0x8}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}], 0x2, 0x40000000) 21:30:45 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:45 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fcntl$setpipe(r4, 0x407, 0x9) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)={0x2}) close(r2) r5 = socket$inet6(0xa, 0x3, 0x32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0xfffffcb8) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x20000400) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000000c0)={0xfffffbff, 0x1, 0x5, 0x3, 0x14, "cdf9c034e5cbba09bedad996a4c8a6e21b1b56"}) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(r8, 0x4c07) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KDDISABIO(r3, 0x4b37) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='K', 0x1, r4) keyctl$invalidate(0x15, r4) 21:30:45 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffa000/0x4000)=nil}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:45 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x202a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x6, 0x8}, 0x2, 0x0, 0x2}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/35, 0x23}, {0x0}, {0x0}], 0x3) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 21:30:46 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000080)) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='vcan0\x00') write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000200)=0x2) 21:30:46 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') 21:30:46 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x28a00, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 21:30:46 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 404.665086] audit: type=1804 audit(1577050246.463:61): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir712465313/syzkaller.MaEJqL/352/bus/bus" dev="loop4" ino=192 res=1 21:30:46 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x50, r5, 0x76000) 21:30:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0x101, 0x75, 0x2, {0xf6, "777aa2d273f8168d5546b9df586c67b813a2c147af5643b404c007d53f507e33f0e7f53f577478e98936f749e862daf650efd7d16d8dfbda97f290682e95ec9d153d5bde40ad68e7e1652e5fe3321cd6eb17a2c135dfc74f37d107ee64c3c2a150ecd3434970f8c20665494b6bccdb2d3f2580ac174640832d1f0836cd11a6c5b11dfd4306f8a1e3b1bc1093795d13987b3af31418eed8089fa53073fcad04db6eb512e9b2e7c9078c059226f96812a08f4bb65d8691b949afbdac254ff5a54964a5c2a5d5402b5ee5edc136b276c4f2ed7d5e9129beddef9986cb4411d5788d6a45f7a5e3be466c6a8a04a077f5988fc5a42c1d21bf"}}, 0x101) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 21:30:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vt\x00', &(0x7f00000002c0)='./bus\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x40020, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100)) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, [], {0x0, @bt={0x200, 0x1, 0x0, 0x0, 0xdd, 0x10001, 0x6, 0x3, 0x80000000, 0x20, 0x401, 0x2, 0x5, 0x3e29, 0xb, 0x8, {0x100, 0x9}, 0x9, 0x7}}}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000005c0)={0x0, 0x2a82ad3bcf102e28, 0x4, 0x2, 0x3, {0x77359400}, {0x1, 0x1, 0x0, 0x8, 0x80, 0x81, "3cae566e"}, 0x5, 0x2, @userptr=0x2, 0xfffffffa, 0x0, r2}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r9, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r11, 0x407, 0x0) write(r11, &(0x7f0000000340), 0x41395527) ioctl$GIO_FONT(r11, 0x4b60, &(0x7f00000004c0)=""/199) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000003c0)={r10}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000400)={r10, 0x8c, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x18a1045a, @rand_addr="1e7967c09a18d75a17eb826854e83502", 0x7}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x2b9400}, @in6={0xa, 0x4e22, 0x4, @local, 0xff}, @in6={0xa, 0x4e20, 0x5b41, @remote, 0x9}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0xffff}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000480)={r12, 0x4, 0x8, 0x7fffffff, 0x5, 0xffff14bd}, 0x14) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:46 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xa, 0x3}, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0x101, 0x75, 0x2, {0xf6, "777aa2d273f8168d5546b9df586c67b813a2c147af5643b404c007d53f507e33f0e7f53f577478e98936f749e862daf650efd7d16d8dfbda97f290682e95ec9d153d5bde40ad68e7e1652e5fe3321cd6eb17a2c135dfc74f37d107ee64c3c2a150ecd3434970f8c20665494b6bccdb2d3f2580ac174640832d1f0836cd11a6c5b11dfd4306f8a1e3b1bc1093795d13987b3af31418eed8089fa53073fcad04db6eb512e9b2e7c9078c059226f96812a08f4bb65d8691b949afbdac254ff5a54964a5c2a5d5402b5ee5edc136b276c4f2ed7d5e9129beddef9986cb4411d5788d6a45f7a5e3be466c6a8a04a077f5988fc5a42c1d21bf"}}, 0x101) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 21:30:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0x101, 0x75, 0x2, {0xf6, "777aa2d273f8168d5546b9df586c67b813a2c147af5643b404c007d53f507e33f0e7f53f577478e98936f749e862daf650efd7d16d8dfbda97f290682e95ec9d153d5bde40ad68e7e1652e5fe3321cd6eb17a2c135dfc74f37d107ee64c3c2a150ecd3434970f8c20665494b6bccdb2d3f2580ac174640832d1f0836cd11a6c5b11dfd4306f8a1e3b1bc1093795d13987b3af31418eed8089fa53073fcad04db6eb512e9b2e7c9078c059226f96812a08f4bb65d8691b949afbdac254ff5a54964a5c2a5d5402b5ee5edc136b276c4f2ed7d5e9129beddef9986cb4411d5788d6a45f7a5e3be466c6a8a04a077f5988fc5a42c1d21bf"}}, 0x101) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 21:30:46 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005200)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000000000003565ab7ecc552b33ca33fdd93e71471fd0e417c03eca8db7bd3645ddc0bab7408bfe89aa4b1ec71d8231edbc4abc8487392277f35591121c8c4959d7794d4f224c92"], 0x18}}], 0x1c6, 0x8000) 21:30:46 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b86f1f9fd2699e2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8800000}]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000000) 21:30:46 executing program 0: getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}]}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 21:30:47 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000080)=0x3, 0x4) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0xa20a}, {r4, 0xc140}, {r5, 0x282c}, {r6, 0x40}, {r1, 0x80}, {r7, 0x10}, {r8, 0x1000}, {r1, 0x2}], 0x8, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:47 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000080)={0x1, "c7589cd6657c7900addc30b323d2cb07be855fba7e9dd3c7b40d3ecee2361911", 0x8, 0x6, 0x2, 0x10, 0x2}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:47 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b86f1f9fd2699e2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8800000}]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000000) 21:30:47 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_RESERVED(r4, 0x5601, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x420000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000080)={r5, r6, 0x4, 0x3f, &(0x7f0000000000)="ea152c12099e8d1bf087679a8254d98821c35e08fae587c2d843f4b093a4e0be44c80cafb7d7c7af68f91d0fae8e6a13f4a6245b9de3b094c4ad639333ce3e", 0x1, 0xb4, 0x8626, 0x2, 0x4, 0x0, 0x0, 'syz0\x00'}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r9], 0x2}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x228, r9, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x53}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x650256ac}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46898fa6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4699}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x258c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xcd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @rand_addr="834393dfe7cddbffc02f2b8633c5f496", 0x6}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x800) 21:30:47 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'lapb0\x00', 0x9}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fallocate(r4, 0x0, 0x6, 0x6) statfs(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) sendfile(r5, r6, &(0x7f0000000200)=0x9, 0x0) 21:30:47 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b86f1f9fd2699e2}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1f}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r8, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x152}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x8800000}]) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x10000000) 21:30:47 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xa, 0x3}, 0x6) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000080)={{0x1, 0x0, @descriptor="eec2e769d9af7a9b"}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:48 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:48 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) io_submit(0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="40008000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f8dcbe16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da51f45ebf460b26bbc86d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc68287b2e940eb689162949f0e102da9edd02e3913d8b63c4700"/156], 0x1c) sendfile(r4, r4, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:48 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r2}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x31, "35d96968e404fcb131805b8fa6a43e52eac9e5be064c70037da433b1134621512e404b4d5835dcfcfa509e1f43da69f325"}, &(0x7f0000000200)=0x39) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x445, 0xffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000080)) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 406.752759] audit: type=1400 audit(1577050248.553:62): avc: denied { map } for pid=15595 comm="syz-executor.5" path=2F6D656D66643A0B656D31C1F8A68D4EC0A35CE2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=56349 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 21:30:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000100)) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:48 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000000c0)={{0x2, 0x0, 0x2, 0xdc, 'syz1\x00', 0x8000}, 0x4, 0x200, 0x1, r5, 0x8, 0x5a5, 'syz1\x00', &(0x7f0000000080)=['\x7f\x00', 'bdevposix_acl_access\x00', ',\\n\x00', '!', 'GPL\x00', 'loposix_acl_access\x00', '\xf4(\x00', '\x00'], 0x37, [], [0xe1ff, 0x7, 0xffff, 0x1]}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000001c0)) close(r0) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000080)={0x7fffffff, {{0xa, 0x4e23, 0x8000000, @empty, 0xc7aa}}}, 0x88) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0xe660) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10700, 0x0) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0xfffffffffffffffd, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(r4, 0x81, 0x7c, 0x4) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffff8) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x0) fchdir(r3) ppoll(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={0x2}, 0x8) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:49 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000080)={0x1, 0x4, 0x7, 0x5, 0x7}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:49 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000100)='./file0\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:49 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e654ae4c2772064636601806c0d343e00"/29], 0x1, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)='X', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:50 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) prctl$PR_GET_DUMPABLE(0x3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f00000000c0)={0x2, 0x4}, 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r6) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 408.219301] audit: type=1804 audit(1577050250.013:63): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir712465313/syzkaller.MaEJqL/358/file0/file0" dev="loop4" ino=197 res=1 [ 408.247025] encrypted_key: insufficient parameters specified 21:30:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x9, 0x10001, 0x7, 0x6, 0x401, 0x7, 0x8c, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x401, 0x7, 0x3, 0x3e}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={r5, 0xa5, "cecd49ff69344d17722ade7f0d7b3b2a9dbd29b0e7eb2aa9121437fd0450d71d908d206f4692c84a64b723fdbaaf5c4d5f49b713cedb84fe1f7f1cb250355a3aa84da89f09be1a5a8641f3d86b3b76768f836ae9432233009629d8b5a946e95f9d176bd33c3d17404d83d93c284e3ef9b5add7dd92086bdfc176549dc494476de7a56b7a14587c21f38c8661f4b300ca8d746b519243a2e89e0a1e77d464bf6d9dca22593d"}, &(0x7f00000003c0)=0xad) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0xaaaab0a, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x4000000000000}], 0x2000000, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x442, 0x0) write$P9_RSTATFS(r7, &(0x7f0000000180)={0x190}, 0x43) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045002, &(0x7f0000000000)=0x500) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) splice(r5, 0x0, r2, 0x0, 0x3, 0x8) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_newroute={0x34, 0x18, 0x400, 0x70bd29, 0x25dfdbfb, {0x1c, 0x20, 0x10, 0x6, 0xfe, 0x1, 0xfd, 0xa, 0x200}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x5}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x7c}]}, 0x34}}, 0x4008049) 21:30:50 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:50 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x85865a350cf7fade, 0x957, 0x3, r4, 0x0, &(0x7f0000000000)={0x990a60, 0x1f, [], @value=0x5f}}) r6 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x800) dup3(r5, r6, 0x0) r7 = socket$inet6(0xa, 0x6, 0x81) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:50 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80, 0x800) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x4004, 0x2, 0x140, {0xa, 0x4e24, 0xfff, @loopback, 0x3}}, 0x24) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000080)) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xa10, 0x122000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000001c0)={0x1ff, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 21:30:50 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)={0x780, 0x1d0, 0x140, 0x20, 0x9, 0x6, 0x8, 0x2, {0x3, 0x6}, {0x4bcf, 0x3}, {0x2, 0xfffffffc, 0x1}, {0x10001, 0x1, 0x1}, 0x4, 0x180, 0x32fb, 0x3ff, 0x0, 0x2, 0xfff, 0xba, 0x2, 0x6, 0x3f, 0x2, 0x2, 0x200, 0x2, 0x15}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:50 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x401, 0x7, 0x2, 0x0, 0x7, 0x2, 0x3, 0x3}}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:51 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) sync_file_range(r0, 0x20, 0x879, 0x4) r1 = accept4$unix(r0, 0x0, &(0x7f00000001c0), 0x800) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x8020, 0x0) preadv(r2, &(0x7f0000001440)=[{&(0x7f0000001340)=""/240, 0xf0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000001480)=0x6) sendto$unix(r1, &(0x7f0000000300)="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", 0xffffffffffffff61, 0x4000, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/nvme-fabrics\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r7 = open(&(0x7f0000001300)='./file0\x00', 0x20200, 0x91ecd09a183edf8f) fchdir(r7) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000280)={0x3f, 'syz0\x00'}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xa) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:51 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r6}}, 0xfffffe65) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) close(r4) r8 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:30:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='\x00\x02\b\x00\x00\x00\x10\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/213, 0xd5}], 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xca05}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0}, 0x6c) r6 = getpid() accept(r1, &(0x7f0000000080)=@generic, &(0x7f0000000140)=0x80) sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpriority(0x1, r6) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) read$char_usb(r4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x19d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7bae3ec3}, 0x0, 0x98a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x9, 0x10001, 0x7, 0x6, 0x401, 0x7, 0x8c, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x401, 0x7, 0x3, 0x3e}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={r5, 0xa5, "cecd49ff69344d17722ade7f0d7b3b2a9dbd29b0e7eb2aa9121437fd0450d71d908d206f4692c84a64b723fdbaaf5c4d5f49b713cedb84fe1f7f1cb250355a3aa84da89f09be1a5a8641f3d86b3b76768f836ae9432233009629d8b5a946e95f9d176bd33c3d17404d83d93c284e3ef9b5add7dd92086bdfc176549dc494476de7a56b7a14587c21f38c8661f4b300ca8d746b519243a2e89e0a1e77d464bf6d9dca22593d"}, &(0x7f00000003c0)=0xad) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0xaaaab0a, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x4000000000000}], 0x2000000, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x442, 0x0) write$P9_RSTATFS(r7, &(0x7f0000000180)={0x190}, 0x43) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045002, &(0x7f0000000000)=0x500) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:51 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x6, 0x8, 0x5b, 0x9}, {0x1, 0xfa, 0x8, 0x100}, {0x8000, 0x28, 0x40, 0x226}, {0xf28f, 0x3, 0x4, 0x7}, {0x8000, 0x7f, 0x1, 0xaa}, {0x6, 0x3f, 0x20, 0xf1}]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:30:51 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000340)=0x40) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xa5eb9a50b53bba2b, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000100)={@loopback, @broadcast, @multicast2}, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000080)=""/77, 0x4d, 0x30001, &(0x7f00000002c0)=@ipx={0x4, 0x3f, 0x80000000, "b30cba4f6a6f"}, 0x80) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="410000ed0900000007000000a1e8903bf28aa309f1e29c9a132bedfd125864976c142eb586d4cd8899417c26e404adb9d6efc7f776568acaa5a71e91328e8c03c1a0300c743384642467f29b511aa29045"]) 21:30:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) [ 410.360542] FAT-fs (loop4): bogus number of reserved sectors [ 410.404865] FAT-fs (loop4): Can't find a valid FAT filesystem 21:30:52 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r6}}, 0xfffffe65) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) close(r4) r8 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:30:52 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x5}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) splice(r0, 0x0, r5, 0x0, 0x10001, 0x0) 21:30:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x9, 0x10001, 0x7, 0x6, 0x401, 0x7, 0x8c, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x401, 0x7, 0x3, 0x3e}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000300)={r5, 0xa5, "cecd49ff69344d17722ade7f0d7b3b2a9dbd29b0e7eb2aa9121437fd0450d71d908d206f4692c84a64b723fdbaaf5c4d5f49b713cedb84fe1f7f1cb250355a3aa84da89f09be1a5a8641f3d86b3b76768f836ae9432233009629d8b5a946e95f9d176bd33c3d17404d83d93c284e3ef9b5add7dd92086bdfc176549dc494476de7a56b7a14587c21f38c8661f4b300ca8d746b519243a2e89e0a1e77d464bf6d9dca22593d"}, &(0x7f00000003c0)=0xad) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0xaaaab0a, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x4000000000000}], 0x2000000, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x442, 0x0) write$P9_RSTATFS(r7, &(0x7f0000000180)={0x190}, 0x43) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045002, &(0x7f0000000000)=0x500) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:52 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r5}, 0xc) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={r5, 0x6, 0x20}, 0xc) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000380)=@abs={0x2, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r6]}}], 0x20, 0x2008000}, 0x40800) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x45001}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYRES16=r9, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x44005}, 0x10854) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getdents64(r7, &(0x7f00000001c0)=""/159, 0x9f) ioctl$TIOCL_PASTESEL(r12, 0x541c, &(0x7f0000000100)) ioctl$FBIO_WAITFORVSYNC(r11, 0x40044620, 0x0) r13 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r14 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r14) open(&(0x7f0000000040)='./bus\x00', 0x46057c, 0x2b) statfs(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000340)={0x281}) 21:30:52 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0xfffffffffffffeac) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:52 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={@local, @dev={0xfe, 0x80, [], 0x2b}, @local, 0xffff, 0x8001, 0x9c0, 0x100, 0x7ff, 0x1a0012, r4}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x0, 0x5e48}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:53 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:53 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xd0, "0211b6235472ed3a9bf42a9c08f53be463258cf62dc7f0d5d98646cfd5a47b7173d29d5ba9825ced058d95a2f09389b342847488f51341dcc6956022f0e3ee68f720b9c7e0d11463377081fc20cfd773e5c0c0e6c8cbb09c30ca8cb72c922f9462d678c37a26b9f53b3616c10174a3335b1184087661a0e86a6f9449348317cf3922d5b36aef51bed849cd046edde56c29386a769bd7f188b24e6a172cc740490726612885ab485f8f9acf439be3a6668c4e5126262c0eb12d1dfb799bfa678b1d06fa98bedab6b75b7bece577d9c269"}, &(0x7f0000000100)=0xd8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x5, 0x20}, &(0x7f0000000200)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0xfffffffffffffffe}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x400000, 0x0) fchdir(r5) r6 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x81, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x8}) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:53 executing program 1 (fault-call:7 fault-nth:0): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:53 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0xa, 0x3, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000080)) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x4000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:30:53 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r6}}, 0xfffffe65) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) close(r4) r8 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 411.995431] FAULT_INJECTION: forcing a failure. [ 411.995431] name failslab, interval 1, probability 0, space 0, times 0 [ 412.007113] CPU: 1 PID: 15825 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 412.016079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.025458] Call Trace: [ 412.028072] dump_stack+0x142/0x197 [ 412.031732] should_fail.cold+0x10f/0x159 [ 412.035907] should_failslab+0xdb/0x130 [ 412.039901] kmem_cache_alloc_node+0x287/0x780 [ 412.044517] __alloc_skb+0x9c/0x500 [ 412.048166] ? skb_trim+0x180/0x180 [ 412.051814] ? trace_hardirqs_on+0x10/0x10 [ 412.056076] sock_wmalloc+0xae/0xf0 [ 412.059721] __ip6_append_data.isra.0+0x2102/0x2af0 [ 412.064773] ? ip6_setup_cork+0x12a0/0x12a0 [ 412.069111] ? ip6_mtu+0x141/0x410 [ 412.072672] ? ip6_setup_cork+0xcac/0x12a0 [ 412.076921] ip6_append_data+0x1c1/0x2f0 [ 412.080997] ? rawv6_mh_filter_unregister+0x20/0x20 [ 412.086042] ? rawv6_mh_filter_unregister+0x20/0x20 [ 412.091186] rawv6_sendmsg+0x107c/0x2d10 [ 412.095270] ? rawv6_bind+0x850/0x850 [ 412.099090] ? avc_has_perm_noaudit+0x420/0x420 [ 412.099105] ? process_measurement+0x58a/0xb80 [ 412.099124] ? __lock_acquire+0x5f7/0x4620 [ 412.099138] ? sock_has_perm+0x1ed/0x280 [ 412.099150] ? selinux_tun_dev_create+0xc0/0xc0 [ 412.099171] ? __lock_is_held+0xb6/0x140 [ 412.108416] inet_sendmsg+0x122/0x500 [ 412.108424] ? inet_sendmsg+0x122/0x500 [ 412.108434] ? inet_recvmsg+0x500/0x500 [ 412.108448] sock_sendmsg+0xce/0x110 [ 412.108461] kernel_sendmsg+0x44/0x50 [ 412.108474] sock_no_sendpage+0x107/0x130 [ 412.108485] ? sock_kzfree_s+0x50/0x50 [ 412.152730] ? perf_trace_lock+0x500/0x500 [ 412.156991] ? pipe_lock+0x63/0x80 [ 412.160547] kernel_sendpage+0x92/0xf0 [ 412.164436] ? sock_kzfree_s+0x50/0x50 [ 412.168337] sock_sendpage+0x8b/0xc0 [ 412.172066] ? kernel_sendpage+0xf0/0xf0 [ 412.176151] pipe_to_sendpage+0x242/0x340 [ 412.180320] ? direct_splice_actor+0x190/0x190 [ 412.184917] __splice_from_pipe+0x348/0x780 [ 412.189275] ? direct_splice_actor+0x190/0x190 [ 412.193854] ? direct_splice_actor+0x190/0x190 [ 412.198426] splice_from_pipe+0xf0/0x150 [ 412.202485] ? splice_shrink_spd+0xb0/0xb0 [ 412.206808] ? security_file_permission+0x89/0x1f0 [ 412.211751] generic_splice_sendpage+0x3c/0x50 [ 412.216399] ? splice_from_pipe+0x150/0x150 [ 412.220721] SyS_splice+0xd92/0x1430 [ 412.224440] ? __sb_end_write+0xc1/0x100 [ 412.228627] ? compat_SyS_vmsplice+0x250/0x250 [ 412.233208] ? do_syscall_64+0x53/0x640 [ 412.237184] ? compat_SyS_vmsplice+0x250/0x250 [ 412.241765] do_syscall_64+0x1e8/0x640 [ 412.245649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.250498] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 412.255674] RIP: 0033:0x45a919 [ 412.258849] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 412.266573] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 412.273833] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 412.281092] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 412.288368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 412.295626] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000a40)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f00000001c0)='./bus\x00', 0x7b, 0xa, &(0x7f0000000840)=[{&(0x7f0000000200)="cca7094551f206c28c875025744197d5bab42e3b82c53d8c27ef57ef7f7d03cf761d3a02ee97aba5c4bc96746a7f4ea9ab4af56341ee68e13c8fcfa496f3fc8f7ce8c86cf231cd3f", 0x48, 0x8}, {&(0x7f0000000300)="f83d5f4c380d638283df006deb0530ee0302ca942360e8a91859af3d889874ae86ac37a82cbeb594122b7bf8a4779fc691a69067a6ca05616445c5c23e14f239af34995e2e83561992079fae54080ec933652523d11cbfa2f4dcf2e525be173b5c3fabe3f552db340093aae6811ad684d94492c75e469d7e1f688aff32290389426448788d4cd56f7c843f6980aa694f6c8aadb090f51be84a37b4867d70e60c304d94a78201f4aa52e1734e788fc21c57cb8f09186eba85067264e39bc9b6e1370c815b136b43a2dd933b7b82f0061ae34ea9696331bde506d46f83ee2cef", 0xdf, 0x1}, {&(0x7f0000000400)="eb00d8011247ae5c224af26fad9f6c8de35b17b23ea085c7ea65e9ca17dcf208fb260823be9e71c1cb7cd0cd17e69308e307fef453d30a46aeb34a", 0x3b, 0xfffffffffffffffc}, {&(0x7f0000000440)="cb9b33b2108e87ef6273cd094eae98827a239bb16c5870dbf5dd00e8a3ead538d82a868225ddbdea4c6563eae5afe948266a", 0x32, 0x6}, {&(0x7f0000000480)="a05b3a921d3446273803692d3579dc44aa1a783e875f4ccfcdcdbb3585c6d6981cdb9562b47a638b", 0x28, 0x6}, {&(0x7f00000004c0), 0x0, 0x1000}, {&(0x7f0000000500)="8c65cba82f1598cb19477fd490ff8fb1c302d8a496121ae27ab2a2fb9cee11ddfe7a48104d9cd20e270bf5fee593476f9fe9a5cfab7c6d93ffeb1d68894df82f28e2a3be568fa453b76ed3b34e26160b2d76dc5b7e89cd181c6d6b7eb05824a900e4d51a8a2a1674df30938385103ddc02fefb054d333191d35d2de40fbdb39074e412b259a03685fb52695846702fed4c435288497e29682b0b46c171f541ee620f9d315f38333958d70ef8b790d4124ac732a468e7edc3bd4af219702930b1bdf5243705", 0xc5}, {&(0x7f0000000600)="6832c84894557a560585364dbdc3bc223b368df565c19cdedbbb2513edd6d92dd2998bc8c771445afb176c66ffc3a59ac419c0294ed1d75ce2740e1429441a39bd0ba54e73e06ed972627abeeeeb", 0x4e, 0xfffffffffffffff7}, {&(0x7f0000000680)="c1f0dff252c6c66f057e309d81bcc480951f9527e164d68552937c05fbd16fd113a858eee1b60b8d38f3d705d13799a98d0d0ec21951044764ef9c995dca92abe6c267afd662bf9e6e5f29033998f778739837e1f6a67df79f4d088c83a1bf9dc7b2e7853fb3ece6c97187ec50ee0cf6d419cd3cefdfef5f84263e4c449e713a6f424265efd7b2844631c24af65336106cc07c51a7e0d8c564f153ce4213b3d08f1c0a51b204a0af53ee40794def4f2eb6efb4d6a212302ca6545666271b1c9f9b290950763fa5e7890d9f6e02282918d12b66ca1e99e0f62588c55514ae6379de9ccbd60c4a67e8", 0xe8}, {&(0x7f0000000780)="d0f7b41accc17377142aca2206320fc49af8f00ef58b1a1a297d8173bdac1485ff15f769bc37fde13ead8dde7d6c4f897fb61ae56bc0fe406be7070ee0918d94d97ad783d4b9f74ded32b19187cb5d9d6552bc22a68d3298831bf5ef2b4a21cd6a4f7cd582925115629a0b4e3be138123f89c13509f01db173f584e150fc228b656c722f54183f9e0a4f52be7f1b79d1afb52ba87190a64ec313d34c545872144e96eecb107d0c451e03f789e7f3f7", 0xaf, 0xc46}], 0x200810, &(0x7f0000000a80)={[{@jdev={'jdev', 0x3d, './bus'}}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@hash_r5='hash=r5'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@euid_lt={'euid<', r1}}, {@uid_lt={'uid<', r3}}, {@obj_role={'obj_role', 0x3d, ']em1selinux[system/vboxnet1vboxnet1*['}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:54 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/48, 0x30, 0x20, &(0x7f0000000080)={0xa, 0x4e21, 0x5ccf, @mcast2, 0x80000000}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 412.509841] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "hash=r5" 21:30:54 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:54 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:54 executing program 1 (fault-call:7 fault-nth:1): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:54 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 412.915269] FAULT_INJECTION: forcing a failure. [ 412.915269] name failslab, interval 1, probability 0, space 0, times 0 [ 412.927043] CPU: 0 PID: 15864 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 412.934944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.934950] Call Trace: [ 412.934972] dump_stack+0x142/0x197 [ 412.934991] should_fail.cold+0x10f/0x159 [ 412.954708] should_failslab+0xdb/0x130 [ 412.958689] kmem_cache_alloc_node_trace+0x280/0x770 [ 412.958706] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 412.958722] __kmalloc_node_track_caller+0x3d/0x80 [ 412.958738] __kmalloc_reserve.isra.0+0x40/0xe0 [ 412.958752] __alloc_skb+0xcf/0x500 [ 412.958763] ? skb_trim+0x180/0x180 [ 412.958780] sock_wmalloc+0xae/0xf0 [ 412.958795] __ip6_append_data.isra.0+0x2102/0x2af0 [ 412.958820] ? ip6_setup_cork+0x12a0/0x12a0 [ 412.999113] ? ip6_mtu+0x141/0x410 [ 413.002655] ? ip6_setup_cork+0xcac/0x12a0 [ 413.006889] ip6_append_data+0x1c1/0x2f0 [ 413.010958] ? rawv6_mh_filter_unregister+0x20/0x20 [ 413.015973] ? rawv6_mh_filter_unregister+0x20/0x20 [ 413.020984] rawv6_sendmsg+0x107c/0x2d10 [ 413.025038] ? rawv6_bind+0x850/0x850 [ 413.028925] ? avc_has_perm_noaudit+0x420/0x420 [ 413.033602] ? process_measurement+0x58a/0xb80 [ 413.038191] ? mark_held_locks+0xb1/0x100 [ 413.042383] ? sock_has_perm+0x1ed/0x280 [ 413.046439] ? selinux_tun_dev_create+0xc0/0xc0 [ 413.051104] inet_sendmsg+0x122/0x500 [ 413.054898] ? inet_sendmsg+0x122/0x500 [ 413.058870] ? inet_recvmsg+0x500/0x500 [ 413.062852] sock_sendmsg+0xce/0x110 [ 413.066553] kernel_sendmsg+0x44/0x50 [ 413.070353] sock_no_sendpage+0x107/0x130 [ 413.074522] ? sock_kzfree_s+0x50/0x50 [ 413.078407] ? perf_trace_lock+0x500/0x500 [ 413.082665] ? pipe_lock+0x63/0x80 [ 413.086494] kernel_sendpage+0x92/0xf0 [ 413.090393] ? sock_kzfree_s+0x50/0x50 [ 413.094296] sock_sendpage+0x8b/0xc0 [ 413.098027] ? kernel_sendpage+0xf0/0xf0 [ 413.102105] pipe_to_sendpage+0x242/0x340 [ 413.106277] ? direct_splice_actor+0x190/0x190 [ 413.110890] __splice_from_pipe+0x348/0x780 [ 413.115234] ? direct_splice_actor+0x190/0x190 [ 413.119836] ? direct_splice_actor+0x190/0x190 [ 413.124429] splice_from_pipe+0xf0/0x150 [ 413.128490] ? splice_shrink_spd+0xb0/0xb0 [ 413.132727] ? security_file_permission+0x89/0x1f0 [ 413.137645] generic_splice_sendpage+0x3c/0x50 [ 413.142228] ? splice_from_pipe+0x150/0x150 [ 413.146541] SyS_splice+0xd92/0x1430 [ 413.150263] ? __sb_end_write+0xc1/0x100 [ 413.154339] ? compat_SyS_vmsplice+0x250/0x250 [ 413.159441] ? do_syscall_64+0x53/0x640 [ 413.163415] ? compat_SyS_vmsplice+0x250/0x250 [ 413.167997] do_syscall_64+0x1e8/0x640 [ 413.171878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.176749] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 413.181955] RIP: 0033:0x45a919 [ 413.185202] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 413.192935] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 413.200229] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 413.207519] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 413.214781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 413.222042] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:55 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB="01849d020000000000e117abe77ddd9334ea64bea44eed1107c1712ace5d1331a46615c027b9e4882d92309e89f3e88e4298e8"]) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x20, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000001c0)) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="6931cd971ab0db61b3d7e2504ef75bd95cc0d2718ceeb5d8d161ef064fe6db36cbbedb7849c6acc786c7f3d322a350be163da680f7be2a2aa6d2c5c0641c6a7d09fb", 0x42}], 0x1, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x0) [ 413.296428] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "hash=r5" 21:30:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000001c0)=""/101) 21:30:55 executing program 3 (fault-call:2 fault-nth:0): recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 413.538784] FAULT_INJECTION: forcing a failure. [ 413.538784] name failslab, interval 1, probability 0, space 0, times 0 [ 413.561238] CPU: 0 PID: 15893 Comm: syz-executor.3 Not tainted 4.14.160-syzkaller #0 [ 413.569192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.578564] Call Trace: [ 413.581189] dump_stack+0x142/0x197 [ 413.584860] should_fail.cold+0x10f/0x159 [ 413.589044] should_failslab+0xdb/0x130 [ 413.593041] __kmalloc+0x2f0/0x7a0 [ 413.596608] ? __lock_acquire+0x5f7/0x4620 [ 413.600865] ? rw_copy_check_uvector+0x1d8/0x290 [ 413.605649] rw_copy_check_uvector+0x1d8/0x290 [ 413.610294] ? check_preemption_disabled+0x3c/0x250 [ 413.615309] import_iovec+0xa2/0x370 [ 413.619013] ? dup_iter+0x260/0x260 [ 413.622806] ? SOFTIRQ_verbose+0x10/0x10 [ 413.626872] vfs_readv+0xb3/0x130 [ 413.630317] ? compat_rw_copy_check_uvector+0x310/0x310 [ 413.635693] ? lock_downgrade+0x740/0x740 [ 413.639839] ? __fget+0x237/0x370 [ 413.643287] ? __fget_light+0x172/0x1f0 [ 413.647259] do_preadv+0x15d/0x200 [ 413.650787] ? do_readv+0x2d0/0x2d0 [ 413.654401] ? SyS_writev+0x30/0x30 [ 413.658011] SyS_preadv+0x31/0x40 [ 413.661453] do_syscall_64+0x1e8/0x640 [ 413.665365] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.670197] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 413.675382] RIP: 0033:0x45a919 [ 413.678565] RSP: 002b:00007f6622590c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 21:30:55 executing program 1 (fault-call:7 fault-nth:2): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:55 executing program 3 (fault-call:2 fault-nth:1): recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 413.686267] RAX: ffffffffffffffda RBX: 00007f6622590c90 RCX: 000000000045a919 [ 413.693787] RDX: 00000000000001a0 RSI: 00000000200017c0 RDI: 0000000000000003 [ 413.701045] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 413.708308] R10: 0000000000f0ffff R11: 0000000000000246 R12: 00007f66225916d4 [ 413.715611] R13: 00000000004c8cc5 R14: 00000000004e0478 R15: 0000000000000004 21:30:55 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 413.819931] FAULT_INJECTION: forcing a failure. [ 413.819931] name failslab, interval 1, probability 0, space 0, times 0 [ 413.831884] CPU: 0 PID: 15904 Comm: syz-executor.3 Not tainted 4.14.160-syzkaller #0 [ 413.839778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.849130] Call Trace: [ 413.851727] dump_stack+0x142/0x197 [ 413.855362] should_fail.cold+0x10f/0x159 [ 413.859517] should_failslab+0xdb/0x130 [ 413.862258] FAULT_INJECTION: forcing a failure. [ 413.862258] name failslab, interval 1, probability 0, space 0, times 0 [ 413.863497] kmem_cache_alloc_node_trace+0x280/0x770 [ 413.863530] ? seq_read+0xc1/0x1280 [ 413.883440] ? __mutex_lock+0x36a/0x1470 [ 413.887530] __kmalloc_node+0x3d/0x80 [ 413.891341] kvmalloc_node+0x4e/0xe0 [ 413.895087] traverse+0x45b/0x880 [ 413.898556] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 413.903484] ? seq_hlist_next+0xc0/0xc0 [ 413.907455] seq_read+0x9e5/0x1280 [ 413.910999] ? __inode_security_revalidate+0xd6/0x130 [ 413.916177] ? seq_lseek+0x3c0/0x3c0 [ 413.919878] ? avc_policy_seqno+0x9/0x20 [ 413.923932] ? selinux_file_permission+0x85/0x480 [ 413.928776] proc_reg_read+0xfa/0x170 [ 413.932573] ? seq_lseek+0x3c0/0x3c0 [ 413.936278] do_iter_read+0x3e2/0x5b0 [ 413.940084] vfs_readv+0xd3/0x130 [ 413.943529] ? compat_rw_copy_check_uvector+0x310/0x310 [ 413.948893] ? __fget+0x237/0x370 [ 413.952335] ? __fget_light+0x172/0x1f0 [ 413.956299] do_preadv+0x15d/0x200 [ 413.959826] ? do_readv+0x2d0/0x2d0 [ 413.963461] ? SyS_writev+0x30/0x30 [ 413.967080] SyS_preadv+0x31/0x40 [ 413.970535] do_syscall_64+0x1e8/0x640 [ 413.974414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.979271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 413.984461] RIP: 0033:0x45a919 [ 413.987642] RSP: 002b:00007f6622590c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 413.995343] RAX: ffffffffffffffda RBX: 00007f6622590c90 RCX: 000000000045a919 [ 414.002602] RDX: 00000000000001a0 RSI: 00000000200017c0 RDI: 0000000000000003 [ 414.009863] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 414.017124] R10: 0000000000f0ffff R11: 0000000000000246 R12: 00007f66225916d4 [ 414.024410] R13: 00000000004c8cc5 R14: 00000000004e0478 R15: 0000000000000004 [ 414.031713] CPU: 1 PID: 15906 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 414.039621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.048990] Call Trace: [ 414.051607] dump_stack+0x142/0x197 [ 414.055247] should_fail.cold+0x10f/0x159 [ 414.059389] should_failslab+0xdb/0x130 [ 414.063418] kmem_cache_alloc_node+0x287/0x780 [ 414.067991] ? trace_hardirqs_on+0x10/0x10 [ 414.072222] __alloc_skb+0x9c/0x500 [ 414.075841] ? skb_trim+0x180/0x180 [ 414.079455] ? trace_hardirqs_on+0x10/0x10 [ 414.083681] sock_wmalloc+0xae/0xf0 [ 414.087295] __ip6_append_data.isra.0+0x2102/0x2af0 [ 414.092308] ? ip6_setup_cork+0x12a0/0x12a0 [ 414.096629] ? ip6_mtu+0x141/0x410 [ 414.100157] ? ip6_setup_cork+0xcac/0x12a0 [ 414.104382] ip6_append_data+0x1c1/0x2f0 [ 414.108427] ? rawv6_mh_filter_unregister+0x20/0x20 [ 414.113456] ? rawv6_mh_filter_unregister+0x20/0x20 [ 414.118459] rawv6_sendmsg+0x107c/0x2d10 [ 414.122513] ? rawv6_bind+0x850/0x850 [ 414.126304] ? avc_has_perm_noaudit+0x420/0x420 [ 414.130972] ? process_measurement+0x58a/0xb80 [ 414.135558] ? __lock_acquire+0x5f7/0x4620 [ 414.139784] ? sock_has_perm+0x1ed/0x280 [ 414.143836] ? selinux_tun_dev_create+0xc0/0xc0 [ 414.148500] ? __lock_is_held+0xb6/0x140 [ 414.152552] inet_sendmsg+0x122/0x500 [ 414.156337] ? inet_sendmsg+0x122/0x500 [ 414.160312] ? inet_recvmsg+0x500/0x500 [ 414.164274] sock_sendmsg+0xce/0x110 [ 414.167975] kernel_sendmsg+0x44/0x50 [ 414.171765] sock_no_sendpage+0x107/0x130 [ 414.175897] ? sock_kzfree_s+0x50/0x50 [ 414.179768] ? perf_trace_lock+0x500/0x500 [ 414.183999] ? pipe_lock+0x63/0x80 [ 414.187541] kernel_sendpage+0x92/0xf0 [ 414.191413] ? sock_kzfree_s+0x50/0x50 [ 414.195284] sock_sendpage+0x8b/0xc0 [ 414.198985] ? kernel_sendpage+0xf0/0xf0 [ 414.203034] pipe_to_sendpage+0x242/0x340 [ 414.207172] ? direct_splice_actor+0x190/0x190 [ 414.211763] ? anon_pipe_buf_release+0x24b/0x2f0 [ 414.216509] __splice_from_pipe+0x348/0x780 [ 414.220834] ? direct_splice_actor+0x190/0x190 [ 414.225407] ? direct_splice_actor+0x190/0x190 [ 414.229973] splice_from_pipe+0xf0/0x150 [ 414.234048] ? splice_shrink_spd+0xb0/0xb0 [ 414.238281] ? security_file_permission+0x89/0x1f0 [ 414.243228] generic_splice_sendpage+0x3c/0x50 [ 414.247821] ? splice_from_pipe+0x150/0x150 [ 414.252131] SyS_splice+0xd92/0x1430 [ 414.255854] ? __sb_end_write+0xc1/0x100 [ 414.259911] ? compat_SyS_vmsplice+0x250/0x250 [ 414.264482] ? do_syscall_64+0x53/0x640 [ 414.268446] ? compat_SyS_vmsplice+0x250/0x250 [ 414.273018] do_syscall_64+0x1e8/0x640 [ 414.276919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.281876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 414.287067] RIP: 0033:0x45a919 [ 414.290239] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 414.297934] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 414.305191] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 414.312463] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 21:30:56 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:56 executing program 3 (fault-call:2 fault-nth:2): recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 414.319750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 414.327019] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:56 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000100)={0xc, {0x4, 0x4, 0x6, 0x3ff}}) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:56 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0xe02e79e632b660eb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) close(r1) 21:30:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) epoll_create(0x3) 21:30:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') prctl$PR_SET_FPEXC(0xc, 0x40000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000100)=0x1) 21:30:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/11, &(0x7f0000000100)=0xb) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x1, 0x5, 0x6, 0x5, 0xc0, 0x3, 0x20, 0xff, 0x5, 0x7f, 0xc0, 0x5, 0x4}, {0x2f, 0x1, 0x2, 0xa9, 0x1, 0x9, 0x9, 0x81, 0x4, 0xa0, 0xff, 0x9, 0x5}, {0x4, 0xc962, 0x1, 0x2, 0x3f, 0x1e, 0x2, 0x20, 0x80, 0x6e, 0x3f, 0x81, 0x1e2}], 0x200}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x1a0, 0xf0ffff) r3 = fanotify_init(0x3a, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x204400, 0x53) fanotify_mark(r3, 0x98, 0x8, r4, &(0x7f0000000180)='./file0\x00') 21:30:56 executing program 1 (fault-call:7 fault-nth:3): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:56 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff32, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x145403, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)='\xa6:-\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r3}, 0xc) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="080f3f015cb3ccb640e50b1246926360b08cbb811e5c37b4716b6da7fd29e6ae83735fda8b1678eee54176241837bf8e031b69d31cfa7c8e", @ANYRES32=r7, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002900)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000002a00)=0xe8) syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='.//ile0\x00', 0x5d, 0x8, &(0x7f0000002840)=[{&(0x7f0000000580)="972939c439668469fe40b90a655f8aa314fcd03a429370cc229eabb9", 0x1c, 0x1856}, {&(0x7f0000000800)="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", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000001800)="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", 0x1000, 0x9}, {&(0x7f00000005c0)="f7dc5c6c113b741e924383ef7ecb22d7a1aedd31535a288181454ed9c626a2df394561a8a8cf9026f11e2cf0ea0ec8b0f7debae3f2", 0x35, 0x3ff}, {&(0x7f0000000600)="1b7ad2e701e248d4e1f838d9d6eab62ed13b6e938f5059937b8cd598575b231d6e4958dfa3a1e476c5219ecdbfcf3381bf14f31be0c9ed3b6ffd2233863d1f39347f10147fcc124c4d04321b9c88b66cbb92a81ec230b9d84576728b7be4fbc29c37fd51da5247fa8b63c38577888c86a53f803a0dde504aeeb0da", 0x7b, 0x4}, {&(0x7f0000000680)="b50e9525c6fb8ffee50e494fdab2a528fdfbe8599febd620919c3b9b3df704c139a3879914a560c8d7ad3df9489146c495af547427c70da819453c06fc303faa23706cb839512a7a63a4758711b1906f5ddb8eec86b19f7c91b6b6d2c2efb9e2662fdc7edd9ab8c1ad7a1b4aab803de2ffd7b309007b7bdec606a3442fff1f7c40dea8a58c394ad4125249fff08abbaa1ae7a10c43a95ce616a9102cdf89db4867679d13061e3a2c8f512d7c1f7e6216f71d3b6af3d429f22b63e2b3d47f2a", 0xbf, 0xffffffffffffffc1}, {&(0x7f0000000740)="4abaf988b827d2f1d1bd438ce383bff3cf4c83de3b0414897a68cd29aa01a6d81f401a11a194e11642e310305f81f9c5beddaf81a36dcdd55f74c0b358a55d2b781cb0e18b4013a8a31af11bb9f6c121b6829e22ef3c527964c2eea56c408c16183bb5343e80b89b161ece", 0x6b, 0x3}, {&(0x7f0000002800)="3cd5b88520938b7c02d4cd3d2e02262b478c3b66", 0x14, 0x4}], 0x40801, &(0x7f0000002a40)={[{@grpid='grpid'}], [{@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r9}}, {@obj_role={'obj_role'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@hash='hash'}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000280)) open(0x0, 0x22000, 0x16) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40a0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000300)={0x0, 0x589, 0xbe, &(0x7f0000000240)=0x100000000}) close(r2) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 414.729668] FAULT_INJECTION: forcing a failure. [ 414.729668] name failslab, interval 1, probability 0, space 0, times 0 [ 414.741083] CPU: 1 PID: 15957 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 414.748988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.758357] Call Trace: [ 414.760960] dump_stack+0x142/0x197 [ 414.764622] should_fail.cold+0x10f/0x159 [ 414.768795] should_failslab+0xdb/0x130 [ 414.772794] kmem_cache_alloc_node_trace+0x280/0x770 [ 414.777916] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 414.783377] __kmalloc_node_track_caller+0x3d/0x80 [ 414.788425] __kmalloc_reserve.isra.0+0x40/0xe0 [ 414.793108] __alloc_skb+0xcf/0x500 [ 414.796740] ? skb_trim+0x180/0x180 [ 414.800383] ? debug_smp_processor_id+0x1c/0x20 [ 414.805065] ? perf_trace_lock+0x109/0x500 [ 414.809315] sock_wmalloc+0xae/0xf0 [ 414.812962] __ip6_append_data.isra.0+0x2102/0x2af0 [ 414.818005] ? ip6_setup_cork+0x12a0/0x12a0 [ 414.822338] ? ip6_mtu+0x141/0x410 [ 414.825887] ? ip6_setup_cork+0xcac/0x12a0 [ 414.830136] ip6_append_data+0x1c1/0x2f0 [ 414.834208] ? rawv6_mh_filter_unregister+0x20/0x20 [ 414.839240] ? rawv6_mh_filter_unregister+0x20/0x20 [ 414.844278] rawv6_sendmsg+0x107c/0x2d10 [ 414.848363] ? rawv6_bind+0x850/0x850 [ 414.852178] ? avc_has_perm_noaudit+0x420/0x420 [ 414.856864] ? process_measurement+0x58a/0xb80 [ 414.861468] ? __lock_acquire+0x5f7/0x4620 [ 414.865719] ? sock_has_perm+0x1ed/0x280 [ 414.869784] ? selinux_tun_dev_create+0xc0/0xc0 [ 414.874460] ? check_preemption_disabled+0x3c/0x250 [ 414.879512] ? __lock_is_held+0xb6/0x140 [ 414.883596] inet_sendmsg+0x122/0x500 [ 414.887408] ? inet_sendmsg+0x122/0x500 [ 414.891398] ? inet_recvmsg+0x500/0x500 [ 414.895408] sock_sendmsg+0xce/0x110 [ 414.899156] kernel_sendmsg+0x44/0x50 [ 414.902983] sock_no_sendpage+0x107/0x130 [ 414.907150] ? sock_kzfree_s+0x50/0x50 [ 414.911050] ? perf_trace_lock+0x500/0x500 [ 414.915312] ? pipe_lock+0x63/0x80 [ 414.918885] kernel_sendpage+0x92/0xf0 [ 414.922781] ? sock_kzfree_s+0x50/0x50 [ 414.926689] sock_sendpage+0x8b/0xc0 [ 414.930422] ? kernel_sendpage+0xf0/0xf0 [ 414.934502] pipe_to_sendpage+0x242/0x340 [ 414.938672] ? direct_splice_actor+0x190/0x190 [ 414.943274] ? anon_pipe_buf_release+0x24b/0x2f0 [ 414.948044] __splice_from_pipe+0x348/0x780 [ 414.952379] ? direct_splice_actor+0x190/0x190 [ 414.957108] ? direct_splice_actor+0x190/0x190 [ 414.961716] splice_from_pipe+0xf0/0x150 [ 414.965805] ? splice_shrink_spd+0xb0/0xb0 [ 414.970062] ? security_file_permission+0x89/0x1f0 [ 414.975013] generic_splice_sendpage+0x3c/0x50 [ 414.979611] ? splice_from_pipe+0x150/0x150 [ 414.983947] SyS_splice+0xd92/0x1430 [ 414.987671] ? __sb_end_write+0xc1/0x100 [ 414.991763] ? compat_SyS_vmsplice+0x250/0x250 [ 414.996363] ? do_syscall_64+0x53/0x640 [ 415.000358] ? compat_SyS_vmsplice+0x250/0x250 [ 415.004967] do_syscall_64+0x1e8/0x640 [ 415.008871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.013745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 415.018950] RIP: 0033:0x45a919 [ 415.022146] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 415.029870] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 415.037154] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 415.044432] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 415.051719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 415.059004] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:57 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:57 executing program 2: unshare(0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x1, 0xd9200, 0x1}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000800)={0x30, 0x5, 0x0, {0x0, 0x1, 0x10001, 0x8}}, 0x30) recvmmsg(r4, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/233, 0xe9}], 0x2, &(0x7f0000000240)=""/33, 0x21}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/168, 0xa8}], 0x5, &(0x7f0000000700)=""/121, 0x79}, 0x9}, {{&(0x7f0000000780)=@un=@abs, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/222, 0xde}, 0x3346}, {{&(0x7f0000000940)=@vsock, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/119, 0x77}, {&(0x7f0000000a40)=""/108, 0x6c}], 0x2, &(0x7f0000000b00)=""/57, 0x39}, 0x2}, {{&(0x7f0000000b40)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/156, 0x9c}, {&(0x7f0000000c80)=""/237, 0xed}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)=""/31, 0x1f}, {&(0x7f0000000e00)=""/156, 0x9c}, {&(0x7f0000000ec0)=""/249, 0xf9}], 0x6, &(0x7f0000001040)=""/248, 0xf8}, 0x8000}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001140)=""/33, 0x21}, {&(0x7f0000001180)=""/192, 0xc0}, {&(0x7f0000001240)=""/14, 0xe}, {&(0x7f0000001280)=""/69, 0x45}, {&(0x7f0000001300)=""/42, 0x2a}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x6, &(0x7f00000023c0)=""/240, 0xf0}, 0xbf}, {{&(0x7f00000024c0)=@xdp, 0x80, &(0x7f0000002600)=[{&(0x7f0000002540)=""/180, 0xb4}], 0x1, &(0x7f0000002640)=""/111, 0x6f}, 0x80000001}], 0x7, 0x44, &(0x7f0000002880)={0x0, 0x1c9c380}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000d80)={0xff, @remote, 0x4e21, 0x3, 'wlc\x00', 0x4, 0x3, 0x8}, 0x2c) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:57 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:57 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x0, 0x4f, {0x0, 0x7530}, {0x3, 0x0, 0x1f, 0x2, 0xf5, 0x1f, "de56605e"}, 0xff, 0x1, @offset=0xf306, 0x1, 0x0, r1}) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0x8, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r3, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:30:57 executing program 1 (fault-call:7 fault-nth:4): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:57 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x1}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) [ 415.589022] FAULT_INJECTION: forcing a failure. [ 415.589022] name failslab, interval 1, probability 0, space 0, times 0 [ 415.601775] CPU: 1 PID: 15996 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 415.609683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.619035] Call Trace: [ 415.621641] dump_stack+0x142/0x197 [ 415.625282] should_fail.cold+0x10f/0x159 [ 415.629460] should_failslab+0xdb/0x130 [ 415.633454] kmem_cache_alloc_node+0x287/0x780 [ 415.638047] ? debug_smp_processor_id+0x1c/0x20 [ 415.642940] ? perf_trace_lock+0x109/0x500 [ 415.647202] __alloc_skb+0x9c/0x500 [ 415.650850] ? skb_trim+0x180/0x180 [ 415.654489] ? debug_smp_processor_id+0x1c/0x20 [ 415.659202] ? perf_trace_lock+0x109/0x500 [ 415.663575] sock_wmalloc+0xae/0xf0 [ 415.667228] __ip6_append_data.isra.0+0x2102/0x2af0 [ 415.672290] ? ip6_setup_cork+0x12a0/0x12a0 [ 415.676626] ? ip6_mtu+0x141/0x410 [ 415.680182] ? ip6_setup_cork+0xcac/0x12a0 [ 415.684433] ip6_append_data+0x1c1/0x2f0 [ 415.688509] ? rawv6_mh_filter_unregister+0x20/0x20 [ 415.693547] ? rawv6_mh_filter_unregister+0x20/0x20 [ 415.698591] rawv6_sendmsg+0x107c/0x2d10 [ 415.702683] ? rawv6_bind+0x850/0x850 [ 415.706512] ? avc_has_perm_noaudit+0x420/0x420 [ 415.711208] ? process_measurement+0x58a/0xb80 [ 415.715814] ? __lock_acquire+0x5f7/0x4620 [ 415.720070] ? sock_has_perm+0x1ed/0x280 [ 415.724145] ? selinux_tun_dev_create+0xc0/0xc0 [ 415.728824] ? check_preemption_disabled+0x3c/0x250 [ 415.733868] ? __lock_is_held+0xb6/0x140 [ 415.737951] inet_sendmsg+0x122/0x500 [ 415.741766] ? inet_sendmsg+0x122/0x500 [ 415.745755] ? inet_recvmsg+0x500/0x500 [ 415.749749] sock_sendmsg+0xce/0x110 [ 415.753481] kernel_sendmsg+0x44/0x50 [ 415.757297] sock_no_sendpage+0x107/0x130 [ 415.761457] ? sock_kzfree_s+0x50/0x50 [ 415.765412] kernel_sendpage+0x92/0xf0 [ 415.769323] ? sock_kzfree_s+0x50/0x50 [ 415.773240] sock_sendpage+0x8b/0xc0 [ 415.776976] ? trace_hardirqs_on+0xd/0x10 [ 415.781147] ? kernel_sendpage+0xf0/0xf0 [ 415.785227] pipe_to_sendpage+0x242/0x340 [ 415.789395] ? direct_splice_actor+0x190/0x190 [ 415.794003] ? __put_page+0xad/0x2f0 [ 415.797739] ? anon_pipe_buf_release+0x22f/0x2f0 [ 415.802523] __splice_from_pipe+0x348/0x780 [ 415.806865] ? direct_splice_actor+0x190/0x190 [ 415.811480] ? direct_splice_actor+0x190/0x190 [ 415.816076] splice_from_pipe+0xf0/0x150 [ 415.820158] ? splice_shrink_spd+0xb0/0xb0 [ 415.824422] ? security_file_permission+0x89/0x1f0 [ 415.829372] generic_splice_sendpage+0x3c/0x50 [ 415.833979] ? splice_from_pipe+0x150/0x150 [ 415.838325] SyS_splice+0xd92/0x1430 [ 415.842063] ? __sb_end_write+0xc1/0x100 [ 415.846155] ? compat_SyS_vmsplice+0x250/0x250 [ 415.850757] ? do_syscall_64+0x53/0x640 [ 415.854751] ? compat_SyS_vmsplice+0x250/0x250 [ 415.859350] do_syscall_64+0x1e8/0x640 [ 415.863257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.868128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 415.873345] RIP: 0033:0x45a919 [ 415.876545] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 415.884273] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 415.891560] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 415.898963] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 415.906251] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 415.913543] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:57 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) kcmp(0x0, r4, 0x0, r5, r2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:57 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:58 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x443, 0xf0ffff) 21:30:58 executing program 1 (fault-call:7 fault-nth:5): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 416.431430] FAULT_INJECTION: forcing a failure. [ 416.431430] name failslab, interval 1, probability 0, space 0, times 0 [ 416.449643] CPU: 1 PID: 16025 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 416.457568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.466935] Call Trace: [ 416.469543] dump_stack+0x142/0x197 [ 416.473188] should_fail.cold+0x10f/0x159 [ 416.477357] should_failslab+0xdb/0x130 [ 416.481340] kmem_cache_alloc_node_trace+0x280/0x770 [ 416.486439] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 416.491882] __kmalloc_node_track_caller+0x3d/0x80 [ 416.496801] __kmalloc_reserve.isra.0+0x40/0xe0 [ 416.501459] __alloc_skb+0xcf/0x500 [ 416.505098] ? skb_trim+0x180/0x180 [ 416.508722] ? debug_smp_processor_id+0x1c/0x20 [ 416.513382] ? perf_trace_lock+0x109/0x500 [ 416.517618] sock_wmalloc+0xae/0xf0 [ 416.521235] __ip6_append_data.isra.0+0x2102/0x2af0 [ 416.526247] ? ip6_setup_cork+0x12a0/0x12a0 [ 416.530554] ? ip6_mtu+0x141/0x410 [ 416.534075] ? ip6_setup_cork+0xcac/0x12a0 [ 416.538298] ip6_append_data+0x1c1/0x2f0 [ 416.542367] ? rawv6_mh_filter_unregister+0x20/0x20 [ 416.547369] ? rawv6_mh_filter_unregister+0x20/0x20 [ 416.552460] rawv6_sendmsg+0x107c/0x2d10 [ 416.556522] ? rawv6_bind+0x850/0x850 [ 416.560329] ? avc_has_perm_noaudit+0x420/0x420 [ 416.564983] ? process_measurement+0x58a/0xb80 [ 416.569555] ? __lock_acquire+0x5f7/0x4620 [ 416.573792] ? sock_has_perm+0x1ed/0x280 [ 416.577835] ? selinux_tun_dev_create+0xc0/0xc0 [ 416.582485] ? check_preemption_disabled+0x3c/0x250 [ 416.587495] ? __lock_is_held+0xb6/0x140 [ 416.591540] inet_sendmsg+0x122/0x500 [ 416.595322] ? inet_sendmsg+0x122/0x500 [ 416.599277] ? inet_recvmsg+0x500/0x500 [ 416.603251] sock_sendmsg+0xce/0x110 [ 416.606963] kernel_sendmsg+0x44/0x50 [ 416.610749] sock_no_sendpage+0x107/0x130 [ 416.614892] ? sock_kzfree_s+0x50/0x50 [ 416.618775] kernel_sendpage+0x92/0xf0 [ 416.622662] ? sock_kzfree_s+0x50/0x50 [ 416.626533] sock_sendpage+0x8b/0xc0 [ 416.630231] ? trace_hardirqs_on+0xd/0x10 [ 416.634361] ? kernel_sendpage+0xf0/0xf0 [ 416.638405] pipe_to_sendpage+0x242/0x340 [ 416.642558] ? direct_splice_actor+0x190/0x190 [ 416.647123] ? __put_page+0xad/0x2f0 [ 416.650819] ? anon_pipe_buf_release+0x22f/0x2f0 [ 416.655642] __splice_from_pipe+0x348/0x780 [ 416.659947] ? direct_splice_actor+0x190/0x190 [ 416.664520] ? direct_splice_actor+0x190/0x190 [ 416.669088] splice_from_pipe+0xf0/0x150 [ 416.673138] ? splice_shrink_spd+0xb0/0xb0 [ 416.677360] ? security_file_permission+0x89/0x1f0 [ 416.682277] generic_splice_sendpage+0x3c/0x50 [ 416.686853] ? splice_from_pipe+0x150/0x150 [ 416.691175] SyS_splice+0xd92/0x1430 [ 416.694869] ? __sb_end_write+0xc1/0x100 [ 416.698918] ? compat_SyS_vmsplice+0x250/0x250 [ 416.703484] ? do_syscall_64+0x53/0x640 [ 416.707459] ? compat_SyS_vmsplice+0x250/0x250 [ 416.712040] do_syscall_64+0x1e8/0x640 [ 416.715926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.720773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 416.725958] RIP: 0033:0x45a919 21:30:58 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0xa0d5a694cbe04197, 0x20, 0x3c0, 0x300, 0x5, 0x2, 0x0, 0x0, {0x8001, 0x9}, {0x8048c, 0x4}, {0x3}, {0x2cf, 0x0, 0x1}, 0x0, 0x0, 0x200040, 0x743, 0x0, 0x1ff, 0x8, 0x10001, 0x0, 0x9, 0x200, 0x20, 0x20, 0x402, 0x3, 0x4}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)={0xf8, 0x7, 0x4, 0x8, 0x2, {r3, r4/1000+10000}, {0x4, 0x2, 0x2e, 0xe9, 0x8, 0xff, "dcc8a475"}, 0x7fff, 0x1, @userptr=0x4, 0x5, 0x0, r2}) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x1f) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r7) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$FUSE_LSEEK(r8, &(0x7f0000000340)={0x18, 0x0, 0x7, {0x8}}, 0x18) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:58 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, 0xce, {0x0, 0x5}}, 0x20) [ 416.729183] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 416.736926] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 416.744192] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 416.751471] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 416.758727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 416.765995] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:30:58 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x119000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000080)={0x347, [0x9]}, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f0000000000)) [ 416.920412] QAT: Invalid ioctl [ 416.924276] QAT: Invalid ioctl 21:30:58 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:59 executing program 1 (fault-call:7 fault-nth:6): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:59 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/251}], 0x23a1a946d9b2668, 0x3) 21:30:59 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 417.288601] FAULT_INJECTION: forcing a failure. [ 417.288601] name failslab, interval 1, probability 0, space 0, times 0 [ 417.300588] CPU: 0 PID: 16058 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 417.308496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.317911] Call Trace: [ 417.320497] dump_stack+0x142/0x197 [ 417.324175] should_fail.cold+0x10f/0x159 [ 417.328327] should_failslab+0xdb/0x130 [ 417.332293] kmem_cache_alloc_node+0x287/0x780 [ 417.336863] ? check_preemption_disabled+0x3c/0x250 [ 417.341883] __alloc_skb+0x9c/0x500 [ 417.345516] ? skb_trim+0x180/0x180 [ 417.349131] ? trace_hardirqs_on+0x10/0x10 [ 417.353356] sock_wmalloc+0xae/0xf0 [ 417.356971] __ip6_append_data.isra.0+0x2102/0x2af0 [ 417.362010] ? ip6_setup_cork+0x12a0/0x12a0 [ 417.366325] ? ip6_mtu+0x141/0x410 [ 417.369857] ? ip6_setup_cork+0xcac/0x12a0 [ 417.374082] ip6_append_data+0x1c1/0x2f0 [ 417.378186] ? rawv6_mh_filter_unregister+0x20/0x20 [ 417.383191] ? rawv6_mh_filter_unregister+0x20/0x20 [ 417.388211] rawv6_sendmsg+0x107c/0x2d10 [ 417.392266] ? rawv6_bind+0x850/0x850 [ 417.396057] ? avc_has_perm_noaudit+0x420/0x420 [ 417.400711] ? retint_kernel+0x2d/0x2d [ 417.404590] ? sock_has_perm+0x1ed/0x280 [ 417.408687] ? selinux_tun_dev_create+0xc0/0xc0 [ 417.413350] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 417.418094] inet_sendmsg+0x122/0x500 [ 417.421877] ? inet_sendmsg+0x122/0x500 [ 417.425833] ? inet_recvmsg+0x500/0x500 [ 417.429792] sock_sendmsg+0xce/0x110 [ 417.433491] kernel_sendmsg+0x44/0x50 [ 417.437293] sock_no_sendpage+0x107/0x130 [ 417.441439] ? sock_kzfree_s+0x50/0x50 [ 417.445495] kernel_sendpage+0x92/0xf0 [ 417.450599] ? sock_kzfree_s+0x50/0x50 [ 417.454485] sock_sendpage+0x8b/0xc0 [ 417.458225] ? trace_hardirqs_on+0xd/0x10 [ 417.462367] ? kernel_sendpage+0xf0/0xf0 [ 417.466419] pipe_to_sendpage+0x242/0x340 [ 417.470556] ? direct_splice_actor+0x190/0x190 [ 417.475159] ? __put_page+0xad/0x2f0 [ 417.478895] ? anon_pipe_buf_release+0x22f/0x2f0 [ 417.483638] __splice_from_pipe+0x348/0x780 [ 417.487949] ? direct_splice_actor+0x190/0x190 [ 417.492524] ? direct_splice_actor+0x190/0x190 [ 417.497094] splice_from_pipe+0xf0/0x150 [ 417.501156] ? splice_shrink_spd+0xb0/0xb0 [ 417.505380] ? security_file_permission+0x89/0x1f0 [ 417.510314] generic_splice_sendpage+0x3c/0x50 [ 417.514905] ? splice_from_pipe+0x150/0x150 [ 417.519222] SyS_splice+0xd92/0x1430 [ 417.522953] ? __sb_end_write+0xc1/0x100 [ 417.527010] ? compat_SyS_vmsplice+0x250/0x250 [ 417.531586] ? do_syscall_64+0x53/0x640 [ 417.535557] ? compat_SyS_vmsplice+0x250/0x250 [ 417.540129] do_syscall_64+0x1e8/0x640 [ 417.544041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.548893] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 417.554069] RIP: 0033:0x45a919 [ 417.557244] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 417.564939] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 417.572209] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 417.579466] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 21:30:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)={0x3, 0x5, 0x4, 0x800, 0x0, {}, {0x2, 0x0, 0x5, 0xf8, 0x0, 0x1f, "920c7900"}, 0x20, 0x4, @planes=&(0x7f00000003c0)={0x8596, 0x0, @userptr=0x9, 0x5}, 0x6373ea2c, 0x0, 0xffffffffffffffff}) sendmsg$rds(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/220, 0xdc}], 0x1, &(0x7f0000000640)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/31, 0x1f}, &(0x7f0000000600), 0x12}}], 0x30, 0x10}, 0x80) recvmmsg(r0, &(0x7f0000003140), 0x0, 0x180, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={0x0, 0xd1, 0x113}, 0x0, &(0x7f00000006c0)="d403fbb44cf856f6b416c91d33934d02c1d0146445911fe710ed94a5882b71b326777e107d660cc74a5db73b18c838e565685ff05a2a07667a0f9c33fffcf32ea949f2f616c94cab10d600f01ad5731fc2af43822c669f5caa15ae56c2dffd8dd349158b227cff27efcc3346360ab8a17c706a27b870f1365f7e21a560a0df4d3d1c0fefd2c7ea88b835ee4158b6e9163349beffdd22814f77df7e26d3f544deffe0b6bed5a65c482475c6fa5526156a7948c503910fb811a43657abc4d51140b24e965c00"/209, &(0x7f00000007c0)="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") r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x123}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x55}, 0x8001) preadv(r2, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:30:59 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x400000000000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 417.586720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 417.593979] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 [ 417.719547] QAT: Invalid ioctl [ 417.725724] QAT: Invalid ioctl 21:30:59 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = msgget$private(0x0, 0x310) msgsnd(r3, &(0x7f0000000300)={0x3, "5b628716027b1b76e1447927501bed5e0bdec6a5a30439e11ab6492240a4f665b0f5150055ecc0aefba477bd6450dae5f415c18773c5c9a27b1ed707abea889753e486823fd7eba2fc2e2d2f24d3489bf40b9da60008d2132d822f5716d0c22c3093f3c17dad3ecfc2c9b681fa4337a3424d1eb5d874fb8e63cac4e621f2f487ac1cf05e319d031ff93cf6a3110a0311dd1057fe196e5c48f8a3fe96e02247b7ff954fbef69ecf1b80b3232b5894840784493f8c6b0449b41f90073d2481dabe085214dc71799cc29ba5f3f007967d4aa1703b28771c257b4e060151584c65a36e0ee4a21307d0a695cea3a56399cd01589941a8f28321c21179de5daf255f451ed86f8d4c435c8241d2f66a9c7314bcef5ec985f9607408763a10fd3a6d00fa2f4af26a17b7ec8d40da86b50768266bcc8e5c9462f44433b3768736bd889eaa57c4546a4cf3da7f413c718dc69d53bc97a23b6ba80d4b911fbd623811e371645feed3504f5aa74181da94695ad5d740ea22143f42f3bb56b1061f841cd3f4212b142c384f292a64bd951eaf450187b4aab3f716eac80377a9f53e5b49a15276d700d3f3f29724ebbc2c192184fe2ff14789f3cf61bd5e43198d9a1741e64d4ce898e43daf53161efeaa32fba02efa4aff651bfce1a7c06990eb06aa05692d42824b2e22507d01c4b9832799ef37a2cc9f10727e3768572dd4801a682305080efd24cfc85f1914d12589e8e812583cb9e0633733cb2c28384be548b57b51412cb74424ce3a03a7fe8b09eaa176bbf1a26e2116b52c9b1b8df1a481687a335435b68d639fc16aaf544d46f13b0b6d86081d751f107c8429028ae515eccce850ae1e1eb93de7c4842cd699e5b354ff427d4326947655883bc2f8cbfcd50e503b8735ff22692c03a2b6fa29c383d4f6b8e936ec9ba0fe19cca582959dc99acd98db99313637edd66b00a5d724622f923c478275a6d4fbc5aa516deb832ff2472b5f853a4a717ca08d200cd00e955b7889909a074ebdb1aae17ae8c39053ee95b6a666f0c44d9ae4c7b9a6878f17b4087b0b52d94a4790acc5fa67b71a07bc36eea261eece691c0784d7e1f7ab73fda80d8d573db13acda9ce34612cc70d6aed17450bf53fa9ac67eec3de3fd54f4bf89be29cf26c9cea607ef5048d5b43eddc5f60b153c32abcfd42b05b9449e5014735accff7355523e32cc0cd2ba4a1606bb2a5e08c036b54d8076ad5814fb260e0a5400de7a3b29d5bccfb67e697202054f971c73590ab2d41167c9d7f80043d35bc08169194845d7037552c815f810b73a010ad8b57e894d8980de1f4226367ed89307dd49ddf4539678abd08103645a0f69c3555c6f52ea3062c2c0255de05c9871582997a8d6437f63e262b542a69509ab4a4c73f9de6db0e9f100772d555754960595e06ae169d5c71aee4e3d8b8067f520b25cd3cdeb597812680d99f06ec28362b54be30267a4a9d657c0fec594bf4f5253c7a608ee4c7ccde9328683b643717ab27f220506cd07fafe5e9dbb9793b1e2ecb14bc19ec2437792b274b7b90a8ff7023d1fb92142b163076fd6deb0a5532d19ec0956f37b4514ab513b6f99d24920818bfce977c1153501d36ca03a10c5c8432b6deb6455a580451870ddb12f66893ddebbd4648ce07201fe7fa38916b7296793156ef0dc4849c1ebd6bee927bbd86cd9bd36dbdda22f2f7e0ee4cb89ca74e361284a3c9653d23a3bb6435881e3ac2c9cb1b7e6a66fff729d7642f4051bc15a402a69106eef068eaae29212239d0a140683db7b2819034add10da3ed51e3929095f484819d0248d246126af54d01c7b2f9c8018807046daab0cbe6324bad7076c63bd0b39b566d73116b65e3db8ffc74f92b0a705eb08f6fe716fdf10a9e086f748c05172576073ffc9ee334858ef87812a569dfe68bef9433e482693209ee3f8dee0217ec0c0edce9fb15f897ad7082d98e3f3d6b167e11c37da411e3308847c26c358640ef92266d82c39f84a94ff1cea03e343a5ee5609575ea3b73a7bb5708a8bb88f92a9c6a04e9426d3e3a6accce54391bcd92b040bf1ed7a0375c4a8a38efab7527b0a342a941cff2f8a98ff2e9b0e070c4cc24bac3dcb82ff9e5705374f95d94e7037f782d149aeb48674eaa296016c95c1b72c76bba9cc232e75cf829fc164fc06284571138fa2c1eceb82f6fdb2dec0b5b0a58088cb3619283568ea8286c08b53306c388b5956e48cd46ea042a72c7f2c281c29e7bbbff9880563c11e007190f6eb702453c8c475264fc0e1e8b2a6289d45aea17b5a4628790b3c5b5f15a00610c0cc9333ad0aaa05e5eac6fb3694db451881dc943460aeebdeaeae3677206094aaaa679fee1dc288e577a6812d80606f0d47b0127fcffbdb37464aee88d626cb48a0dab1005933be3cb8d529bbce69e2aa09ad7f0f498a00fd92b613d8cee6d1847c3f7b9bcfb333f740a58d06cbcc878ced90dade2dc4f7cdc45d09ff53ac8c91eabc89fefaf978cc35b11bb422c9c0823667366a6055edee07f00186dda4df8392f335a4c177fb9b4f8cb97b9f172b35a65465ef196d46c05cab313a4932a2fffc6bc3e14d19c544d22aa2693d208ac5cde28b7f6e62b5d724991953161b85aad30ebc09df5d039c1be7ac89388aa441c880fe82add2ae4f49203a30cc864d1a6a1fc82abf2644f43ad8eb67a6105cfb7bd941a6c1b5711d424e7406705a322c59a892e262299eb31e316edd7d1b699b991bd77f0ec7a30fecc076e2afe7c0d2fd11ae45c818db52c870917c873ee5c48bef12d7a389c2922587b55b2a9f2ad068a95ece88b451091b3b9a07bf804ec2a0b419cca9f2cbc8736768e56acac5a9e3c5cd14c67869e6daae60fd42f99ae29b420b2db625653e3cb04cc443b5738722750b5d3e43fc9aaafd43a343a6cfd39f94e0afa8374ca43ede7770ce1a116f504a61650e940645eef7a938369604eeac2a3756d0eb60ca8c21c07bb7ad6872589f2c2a33f4d79079ba9a75e8e7c2b2219ea8882d0dc2c32eaba901853eb2e9c2dc10a1548ace214646d309018246e2aaf2eb0e43d75bbddebd6fabe2f940c9240722a88b4e99efbd84f5a075ac725e46416442ebfa2ef2743c41d07e7406e9cfece49be4250763f1c5732d0b3d2d7f84787be47e312417ae17863182980fb257cf8c1d81a96fbd6910ce5a366fa7bcacfcddcf6d7492ffa741a2ca78542ae93a4092378f32d8337f0494e945d9d81d69f6358d00a1bfb031c93737141e424bbd4c52645164522e13666c1b2e366f8d24917444e74f319f40ced6128a153b4c131b20a062ec3e8d49cbd5434d4596fef03b289f39f661caa2f8f6fcd4c327ffab2629324059a7968b97d5e345782f9ed98f098c7011e2ef908b31682ac87b55a5673369f02899124fe8274818a074594e38bb2a1e9b5b2adc77812c4bb482335e7ed42818091c3dd87126accc6dbf0eabaf86910b3125be78c6e81bcc0b57555cf24b33afef964aea20c57a5b12c5cf7abe6f827e927440842c064fb35857979f5c932b1ac3355ef0897f2c51ef837b8ba9665dd302b6a20bed274ea4688c01654fef3fe90c27a131162f2fd5e1efc40501bfa0ff2242b503e5f744d116acc53f084c0d95dbf47830c335be7609e2ce2ac023f5ee23f687b5d8c186aa5906c82673600d0938485ccadad68592d8e7dc002cd7da933ea4b1f4a2b1401e12ff8ab4bd4fff1793ed4c7903e639f67fa5b331b653df57b597e456c85c29a8c8ff4203e4ec37d07cbc8ddce42e751efaac1aea9606eb913cccd7e0c758e5623a0fc4a3bf9db9ce14e14a1275afc7b240932e6d85c5b51388d3a85fa8fcde4a24d017add7d9ba85e2d1af79034cc0f38ebd78e3f57a783172b2b4f683224ab90e0c889b8b5fb41d3cc3ba97673507c1fa3af28a7a5ae6f26671141c5025622592a8a782be41e1ac6ce27427019daceb26c6d242c992cb3a17feabed72e6ada3dccbafa0e9ad93d60696348a771302820e96313daafcca4eb9e3a28fb704c84675bc3a8db6eda5af4de16fa87422f7f65215b3c4f442dd719c37ffae7d954ed9cdb2121c9264571d6b6213b6999bf719e6206970fa4a4090c7541f05a04b0a5838bb530f842ab533b9d3ab5ab2e38a50084623e38839c377020bfd5ca2f6b89a4a46bf261b3679c7dfca0693b60aa63af9290fffcc5ec7b02fef84330972848aea304e4486c8061ebb2f5f30358c425679b3b9a6a76449dc68d2622aba7b67997ed462d0176f7a90da84f29d1ddb4afb2d674ab156b56e5f68679032188370bc543d99616ea262f01ea4498532fcf1cfe4a15457094f5d22c22b6b4b1f1d59a8427c13d48e0d32aac052d8cca2fd41b0699c366e107c1c364a472a6080c6c65ad996258dd0c6078d7418d43c0ee366a7d9f147e3f404b0a865ffed4ccfc2d76082538af3a4342bd9a94d7905dd9d7b30c981c713cc33638950206609bdde6d1db6ab5f61ccf7d01c953f84e24b6eb1143b06e623338a08d93a4199741c498de356d06ca74395330bcf6ec6c833389981821646ebfdf5d9a87c81ceb954f628b93a83ddcd3fcb666b9d6c68982943690420ad6204a8661fcba6af76279c5f350b55cbc79e82ef34b688f6af56593f8a523589cef8e6f300b75da275c9f6033d750af21b0a5f00738330a27a05e1d045c15f729b2f3713b5ebc3b6f3f282114726affc5f3c30b3d53ff461a47e87e010d865bb60195f063ea55d75596bfefda65fbce237c1bdd48958fa04ee81a58898c095dc20afd8c7b87dfe882524616108f9507173f625d5a12d9ada26eeda6cbdfe27549654866f6e43d8452afbfc7b3147fc7932b0b160196a1f94aaed1cb0606bb3e7e90a5e873699f037cf3be703a536d075949d00e92956ca99ea0da7044fdff90a9560ea2116df43bf0d346d721267439432d9405503351a804858455c000ee993f4d807805c3dbfbc7218d3339ba1cf83bcf62f5da9d99f51fa390b16bf4d4179bf5fc8566646c27653525d11d9c498f4afea3f60cad08164462bd4ac3e36ae1ae1d75916c0a362c4e57388766b2ff1adc721e73d22710b22e7398ed467c0da599306907a903e12669c5ee9ff799fbcc89b7788c997093a5012673739f8c3b707a38e772c33e1b08a36f7152634ecfe2f3d8f424bb7c712481d68215330edaab4d87d4572f87358f625360c2414f07a3b292451b91a2ea6a101dde93e2baae432d7432cdd9653b13a052ba3e31b4a01e975b9c06604bab2d463de2f4dbb7f38185988a1c1918f46a7e6b9d07e64c223840e399515fab01cccc4dad1d8b2dbe90aa7ff1ca3de63658099f636b269c6aa48f5b1cfe79ce16d349ebd779457d6b8a5a6e0703836d41b28d60682990a061dbe10f2e50b6235a5994e868ae6935beaefd0add009093752402d9b21fd5568ba7be821a2cf825e1fdb5d1ec6e17a8bdd63a26f8806f8d910814a7388b3dfcd8ca1f825e5c5311934b1bcf58e6451af198bb1727a8980f4aba01a186a74bef3c5c201f29efabf64942a9018d75ae7945f995e64a308378b7e163aaf897879e0e9f9e109311ab2ece50d64bd162cfc7aabda54782a806e77a3f01cf0cb9f8dd88d2bf49527b62690689fbbbab43ca3a11622894e7188d3f342d808c54f38470bf0ac1e8f6e52ff2c696d96b1268e7c8c16b9d884990359c2f547b8b1461320af552bbb696f261dedf8007db6b6972e1dbe9343543906819d293c7085c12cdb285c4d42b7c9a98ef17e05367d1ac268f310a31efb140bdaa5e4a2d"}, 0x1008, 0x1800) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:30:59 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) lsetxattr$smack_xattr_label(&(0x7f0000000140)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x880000, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x108000400000003a) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40000, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x9, @remote}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a3b5) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000004c0)=0x1bf) quotactl(0x1, &(0x7f0000000380)='./bus/file0\x00', r8, &(0x7f0000000640)="1aabc748738dd8047688c20b250cfe0cdd991f0305548224994ac9439a5e78ba7e742889f51ee3a16b943c0ec422435eec2798e3ca2d91998cf860a9") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x200000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r10, 0x40286608, &(0x7f0000000300)={0x5, 0x2, 0x0, 0x140, 0xb25, 0x3}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x5, 0x0) recvmmsg(r12, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r13 = dup3(r12, r10, 0x0) ioctl$KDGETKEYCODE(r13, 0x4b4c, &(0x7f0000000340)={0x2, 0x800}) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000010000104000000001000000000000000", @ANYRES32=r16, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca64c35db94ac71c09bc005a704ffa4db495839146fa5f6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd2010000000000000096de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00000000000000"], 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108020700000000040000000000", @ANYRES32=r16, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002400000225bd7000ffdbdf2500000000", @ANYRES32=r16, @ANYBLOB="09000a0000020000000000000000000000000000e27c9d"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:59 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:30:59 executing program 1 (fault-call:7 fault-nth:7): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:30:59 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r4 = socket$key(0xf, 0x3, 0x2) write$binfmt_aout(r4, &(0x7f0000000300)={{0xcc, 0x81, 0x8, 0x174, 0x387, 0x8000, 0x1ad, 0x9}, "216cb35a1d57932ae654fb973f139544a7cf07183c158c553815c5eac8fbcb9334751dd41b19998c7b657543ac46344e030aa7bc15ba7e71a9f96d0e0e92991d053b1db8a395ff63b50402a288025f1c0d92963f256c648228e93a2e53b7ee6c74fee3a4db321f073f725a1ef71be14e22c6ee836f589cf280d3c2199c1d12007244d03ca3dc134619d0a9fd37c9c0340a5d5e4895b38c5a964bf16fb8f848c872edca4111ebbf762b98daf84bb7936e1980ce5d4d136a3a46180cf255108a688027123d74ee06a66a94f5bd49a394bdfb66ad9f9e405fbc0f1213cee945e0edf583ee6dbde81b19cee0eaef0aaa413da746735f9ec8cbc52869cfdec0a1155d8f6d94c3a9bbdbded8688750a09ce584cd486534caaae99c3f8e8d87d53bec5f64292e646c4ea8d870076eab30e3ec634f4b9dc66d2b64548e1cec1c8e9b82916f233497670c03c11bab87e2bc88d793b2ec854e3b1b4de0c660fc99292610ffba1e26a7eb543ab45974bb9cfd1b62ac12bc808babc2ad5e090f7f1317d5a4b30e6c1969e6d85e25ee3b7e05e3d62e7528072ce9cae31041c6a5249d82a889cbf6f253437788792333015d595681bab466fa375a76ae1a14f2b6ad3b2b56ace52acf17c1be2cf3eb412183756537ec739cb66aa2a58dc0996e73f0078afc29599127e348388e583f1077e3c0f47976eb1ee4352e2b68476646a9a074c4e81942193955a1938104446faf9743fe8491e052ce68b4b27cdc84fd1b6dad79d33ddd2a6a633851d42d9a47e4e73106e74f5f1f8030f3252c88a059b1a8e42ebf8d28f9ae59d11b0e51f3714d0836a6446c6d0b05d4c991492f9b5bfd347b0b6a1bf9ff6647a3a6cf453335c2f83cadbf6ab7cec13763bd78aa73ca1e5e8498c9af962130909ca4444f29c47e532b5a4b23a7beb6292e24644a081f5b498d987df434b046bfcf7ec946c645c948ac9fe1c4975d8c3279b0dc0ba20d6e2fb01144ed2fb2499f138d96b55a864cd5a4570ca4cfac185387195a1e73bf033b209378375fb86df20e7fb9d3da6a177027d14a3033b6f06f79fbc5e8ef8a01e69bb83d41e9d8e925471aebde72ff20a2eb2b585632c3e796a3b5fdbb4b5d7ba1ed5389ec1207640cdca3b8234618f2d8b7510e913944d8090279b1913dac5bb3d176e7d544e30eeeeedc4145568144a1b28f6ffc356e6d0ef899e6d4795c402bc8d8bca1fcdaa0c87d846d280704e24dd417f1efe841649a114e8f6b85c2c249cd77991fcee0fd26a3b265501a7a38ca8f67852cffe2bff6fec70998dd46b09ae2c6dcdc92caf24d903a272566b3a63e06156f11a6203694fbeaccaa0d26426272d3afe07eb684341dceeb916416c80b2dcb74f100eb33d54ad53af5be6a0660ec79fbbfb33cc5823a6078800daf3d091ff6c2ed6066e556bcf28ffa9a808eb4f2d05b1526260934e70274e81cf0e75b3c1c73f2a8e310439cf534ffd129ac5ccd41d83e8002daa855cfa9e9fd6ce1f107243ffd89c87207b26a645291ba09fa63b37a67236128204190d2f0a2b5901ba84aedd2f429193d195623a78b0021b8669aa8b1166ec40fa17a9e2b4328f484294d6a9cf4ca42557bfa61f125237190c7a755cf1952a59dece67b2ab36aa9f450b5c6f93e4f11f14ccf3a06aacc231df84ef5ad26ae3c91120c18fc0a2a4ee741263349e8989fbcdeda69c38163e7214a713069100c67d93aca3000dfd01e7e10313d66af40ede7f196785e5b83754ca3f77b0b12307ccf7a8f2464b93dbd31ba379ca37e6965f4a69faa80a068f9cba19ceaf69ea725b4d58638564063c83b54d494f273b35983e4c30d17f68a20986d810aa3a5f18323d132aa8f861efe50b4d9e6a8ea995661c2b0ed1da801a701857f5b9eb5f6ba81866b3e3ebca92a31cbaee4ae1d13d1a21b0679c17ba39b2cd4e68cd6abdd4f6057043496a7aca20de3bef1db75fd0567c59f36e988bfc9e1d7b23a7ca458d71ff8341ea80918fc29e1d5398f14f15ca8169d77b9d70f1d7b6a388a0adc4d3effcd8d159188ee6ed6ac674b2a1c94bc352bf8e091594b5517c0fdc7302489611d414c0271c764b1bb393b6019ab75a77927ca36b6c2a219ecf6a9500c47ac66909956e793d9944d04b428247aeed2277a97832801aa6ad79ff897132f6e70b6f62ecec5113446a7ffe011ae9117d43c209fa131467d82c63a0e03b413a8f7e77751cf54722dbe954e64e1720b8ed8c6cdf90c2869f98c7eebc9af9999e4b01c91c13a30facde60bc6f8476cbc059a4d77731665d8be4b5e1d0127c40bd42747b8a490ef95b262ffd84848d834babc21eb568c0406bf53096f4fbcfd71de50a55a376e88335669b0d00517afc344175f89895c87b06213125fdd5b3c5cf13c129e39e88d196f682bc5c5570a7e33f68b5755f135a191a9a6d47155196199e1a45dafc92324b94dcf7f652a9abcfa67dedd17a23d279539f578638f0a796c5113935fa3f5e9206c966aa1bda28f5c599db360d45d915ffcb14553aad64a282a633987af7f322cf95219c52be0fbc70d2d95d0989147741c68f170117bbf9e7fae76ebd0a110169b01d66b4c69635396dfd80dc92daff6a30b3945dfec853b0aa8405c1d70e1a6b6be3922665217034aa4c3306cbbd163c6b1ad63e33e0a632b4f22feac6ca53b8687b2f1961a37be2eaa2b7bb2a8e51fd2fa6c5953eb7e263ddff21e001b8b24bea3bd493664e80b34b2670b248c3035fe6a365061b665baff98e6f4c79a435a8c44de0ec10a5a6fc2de2da4b2aa08bd0a94ffac522eb65c8357e35c8a87dc4e34b78a9362308f5e9e4969fce6b3ace3832fa7329fa63e14d286d711364a473f9162d64e9c1f1e6bc9f92930d75dccf93de700a22cc87fdd9a596b407565e580cdd35ead9ed5f3dfe4608e316841d97d821012168d5c0584292a6ee1d20959ab25d8a22dd12b263545f8d641218664b33088f880bc58b110ba26782ff45c074443a7c0626959da5762853fc3841f1b4c7e56b6d03695c188b940d391f57def180bc692bf127456df9f4befc42ff2e92801c195b6a5a9c32fa5a5fcfbcf24d5a4b5215e4ecc5e7957ec0bd8ff466a1518a3a96d6de2cf489827c574a23b1f591640c4637dbc1dbb0007760cfc5a9f598fb9aa4505d2ccdf81b67a82be94485c6bbde3dd478487e8727d6ead6f6191462f57a3074690d40edf04f980d884190915945435bee263eb56745b103398e7ad5a52f13f328bf8115b7d673312bdf1cc342403ad58adabfc7668f2ae5c7517f78f27a244b3c7ff6ed583411058558cfb274c01753db049576c630642111ffa9e92a09e3c32384b987748d85879360ba7d0499a29b5234bb40aae6d874d8c86bc03f689fa6b38b48105bb9c0cef43b64b149f971ce2b1325dceb54f106b233df20c81fc36a33ad112d58e1637c0664009852ad82de21f09fd590e7eb2c5297f1a79afef673e3a519a84ff2d67f6702811ccd7dcccd4c0fad3933deaf6e05d0d831fc8ee2846bcc781e6502a75b86800dbdf166c9bdb20098b0d2ce2f6346679682f652a3d303303ad2652708dae8bedb505d315ed3daa78e043916c04a565b54f0880caa49774471deaee5a50d7cedc41399e30ff013ce568d339ab0ce6bcc6afd7c923afff8763077fcd4b4e39e352652b47b235a7e4565d0d1eed3df60b026f7f56f33415e4ef5e29f33a18785c663a30f577edd85256b66171720830d70304e4b74a3c557da2284f6319aefdb272078ad6543799402c94656649ce75311c34cd25b2aea93eb6b787f82331e3757ce818e4232908cf610657ce64575847caf33a0d2258e93bd11ab88087ada62230c45e217051d19715a9fd0a3ff1ec158b748f228dad026981828dd3107cec5e4d258ee55aad3aba12a720323feea4ab5128dda1ac224185e33931b228dec6593c1d1d50c478098fad5a99312b70d318a10659ae4182d00df3110709050e40c5becc90cce34861b530472461fa57aa77276bfbe3e436d1ce1b671f4ebc69a02e19316cbaa66b348670d685ed7bbbb0cb2a81bccf4ef8c57bf23661079fc6c210151803d48cb21678cf46d284036eb15f09c08c2134a978d163b233c8a585c622a33828e865a3ea017919914112752414aa012e2c1b08fe98ae0118a776a124012d4381cf9aef5ff395221a8e3a3550de140f89b62056615367d84e2f27de8e63ee9b3cd436d77b34f0dbc82607d43a2ddf34bae81bdb8a86191b6499172f34a361a014273e6f5e35c74f37dce47c9f29515aa68b1cfee70bcde73536690055e4b4d652b5ce8e424b823c47af64ee074574b5cd0cb802b35b29315ac79922e0fc2a6ddd357b1542cae0864ef2ffe66c4d48de947ef52904293617984ed6b3bfaa530782677fbf56db5928940244f1d01a96489796f7d69f37349629f57b29479e812f55d2bc8ba33e5b36c7ce0c452b775f1d98cd7923275d95b9352dd4db3c8da1435fbd2136e65e3a36ecdfd48b428dd17b014c98642a4d08f8e6dc904c587679d548e062c2ec55f5bb2006e56dad2670ac9a7503b0d34f51be1655a6b391b718450401a4f9a8b809c84ac13857b59268d35287118c551e5d3f3fe1d40587ac34690b0f1fb51bb61a7f81ae678c6051d72fc6c6d6e8ae15ec4f485b0ec8f21c12693ec9b425cd481224b5998ec2471fd8eee3750eb7ca13653abdce5d0b11370ad3d63e5e899ac805263c99b886386c71ba8f6ae37d7fc44d6d595f6fec45b973d7c4ee2b30e417d05649d73d7b5e11d330a82f8ac04539148bdabce00a4b0c38b4985c0f01664c92cec855664f42e8a4dade96548d99964f633fcddc4c0aea44f0ea7c15dad857a5b91a2f847f5364f99c2643f4f30401c65984a94874ba5bbf3e35a8b8cceb9a248de66298401783f836a597d9273edf8b57c3c0cca77dc33e748026271a28a395244319c357139a78a56739aa1dcb0b6b3d91ef46fe7959cb90bbb82afb8dce37ee805256f81a31ae639626181e4dcab83226f8508b8d8d9558ff61b635db433807dd83905fa6072b9c205f20167835216154dc781d2635ba15c31a4c8aecbaef2d60c5a29838f06bc5bbf21ae80fb3e369bf53c9ed29990d85e1ceda42b34614854a3edc0f1596141962e0ec133cb1fe058db3d8926012e725e676becc0bc7765b3b3fabe750c0c206c0515fc25c8f7eec956277464b6c55811059ab9758791d9d563fb3489a53c8d86ee0a61a030e6e3d08f1e34429a66c7c04a6034ace5e2a5a5bc99b198f50a356d52d7e57041f314e83618bdfde98b34e0862237c669a165325cf05f81fdde1d742fa4a4e77bd5cca5217f400e4b4ddd763886f917b0542571c657b888b4bd4cddd531d544996c71ecb109eaf6f9307f744f8e904734386d9390c65feb1fe3a30cd03118a842d024e5d83372216bf4c2f9dc459c8cf82fd6c228d342eaf8e080d9cd4a7a2a949f92f0f35ca29446d5a76d4daa7369f2a32651827df2a3f01c9d34bb7b68857a0955ce05806ce2b280052e31706ba5c4ed6b49f1b751fb23801cb9bf52e88e07102332a984bbd1e5a9398441edafa8b61b6ba864ee8b0b3bc26e5ecf3d72a5ca5e777fdc62bf9020d2b8cc79a108a31d465b815456c4155fcd715ab8e664884e3e905173bd3e625c7043cb3e42ee5a397edf9a3e9b0cec8837391e45defbc13b5fe5520021c10e263cecc5358d422a61d7777fad6964865de51041a577c7393425ec70065da35e34a890a75952009ef6e23ad806451b63368caac8e1d2027e4ff9b499a"}, 0x1020) statfs(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000001c0)={0x0, 'bcsh0\x00', {0x4}, 0x70d9}) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x2c, &(0x7f0000001340)=""/229, &(0x7f0000000100)=0xe5) [ 418.110802] FAULT_INJECTION: forcing a failure. [ 418.110802] name failslab, interval 1, probability 0, space 0, times 0 [ 418.122306] CPU: 1 PID: 16096 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 418.130227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.139594] Call Trace: [ 418.142192] dump_stack+0x142/0x197 [ 418.145840] should_fail.cold+0x10f/0x159 [ 418.150014] should_failslab+0xdb/0x130 [ 418.154107] kmem_cache_alloc_node_trace+0x280/0x770 [ 418.159215] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 418.164676] __kmalloc_node_track_caller+0x3d/0x80 [ 418.169611] __kmalloc_reserve.isra.0+0x40/0xe0 [ 418.174319] __alloc_skb+0xcf/0x500 [ 418.177938] ? skb_trim+0x180/0x180 [ 418.181559] ? trace_hardirqs_on+0x10/0x10 [ 418.185806] sock_wmalloc+0xae/0xf0 [ 418.189433] __ip6_append_data.isra.0+0x2102/0x2af0 [ 418.194470] ? ip6_setup_cork+0x12a0/0x12a0 [ 418.198788] ? ip6_mtu+0x141/0x410 [ 418.202324] ? ip6_setup_cork+0xcac/0x12a0 [ 418.206555] ip6_append_data+0x1c1/0x2f0 [ 418.210607] ? rawv6_mh_filter_unregister+0x20/0x20 [ 418.215623] ? rawv6_mh_filter_unregister+0x20/0x20 [ 418.220635] rawv6_sendmsg+0x107c/0x2d10 [ 418.224696] ? rawv6_bind+0x850/0x850 [ 418.228491] ? avc_has_perm_noaudit+0x420/0x420 [ 418.233160] ? process_measurement+0x58a/0xb80 [ 418.237740] ? __lock_acquire+0x5f7/0x4620 [ 418.241984] ? sock_has_perm+0x1ed/0x280 [ 418.246035] ? selinux_tun_dev_create+0xc0/0xc0 [ 418.250706] ? __lock_is_held+0xb6/0x140 [ 418.256418] inet_sendmsg+0x122/0x500 [ 418.260209] ? inet_sendmsg+0x122/0x500 [ 418.264184] ? inet_recvmsg+0x500/0x500 [ 418.268148] sock_sendmsg+0xce/0x110 [ 418.271854] kernel_sendmsg+0x44/0x50 [ 418.275649] sock_no_sendpage+0x107/0x130 [ 418.279785] ? sock_kzfree_s+0x50/0x50 [ 418.283684] kernel_sendpage+0x92/0xf0 [ 418.287570] ? sock_kzfree_s+0x50/0x50 [ 418.291458] sock_sendpage+0x8b/0xc0 [ 418.295161] ? trace_hardirqs_on+0xd/0x10 [ 418.299300] ? kernel_sendpage+0xf0/0xf0 [ 418.303370] pipe_to_sendpage+0x242/0x340 [ 418.307511] ? direct_splice_actor+0x190/0x190 [ 418.312081] ? __put_page+0xad/0x2f0 [ 418.315782] ? anon_pipe_buf_release+0x22f/0x2f0 [ 418.320529] __splice_from_pipe+0x348/0x780 [ 418.324850] ? direct_splice_actor+0x190/0x190 [ 418.329428] ? direct_splice_actor+0x190/0x190 [ 418.333999] splice_from_pipe+0xf0/0x150 [ 418.338061] ? splice_shrink_spd+0xb0/0xb0 [ 418.342294] ? security_file_permission+0x89/0x1f0 [ 418.347218] generic_splice_sendpage+0x3c/0x50 [ 418.351788] ? splice_from_pipe+0x150/0x150 [ 418.356100] SyS_splice+0xd92/0x1430 [ 418.359807] ? __sb_end_write+0xc1/0x100 [ 418.363894] ? compat_SyS_vmsplice+0x250/0x250 [ 418.368633] ? do_syscall_64+0x53/0x640 [ 418.372618] ? compat_SyS_vmsplice+0x250/0x250 [ 418.377197] do_syscall_64+0x1e8/0x640 [ 418.381093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.385935] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 418.391115] RIP: 0033:0x45a919 [ 418.394292] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 418.401998] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 21:31:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) [ 418.409256] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 418.416513] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 418.423771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 418.431030] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:00 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f00000001c0)="0dc1e61fe928315d07c1c0c47daf6ab174112e0bbbd98358449614a710db399929c31e9709256141087f6f17dc1b5cde413d21edff92fe0f717983a9b9a3", 0x3e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0xfffff0e7, 0x8, r1, 0x0, &(0x7f0000000080)={0x1af1871, 0x9, [], @p_u32=&(0x7f0000000040)=0xffffffff}}) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000100)={0x0, "77606f79444a437f3ca28b768c1c83ff1ecc568038b83c0ef5e7675a02416057", 0x3, 0x1, 0x0, 0x80, 0x8}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sync() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000180)) 21:31:00 executing program 3: chdir(&(0x7f0000000000)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4200, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) 21:31:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r4, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x4000000000000015, &(0x7f0000000000)=[{0xd9c, 0x9}, {0x3, 0x3}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x3) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0x0, 0xc47, 0x1ff, 0x5, 0x200, 0x6, 0xfffffffffffffffc, 0x1, 0xc0a, 0x1ff, 0x6, 0x20, 0x4, 0xff, 0x4, 0x7], 0x100000, 0x4}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x0) dup(0xffffffffffffffff) [ 418.673284] bond0: Enslaving bridge2 as an active interface with an up link [ 418.727438] audit: type=1804 audit(1577050260.523:64): pid=16134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir094021405/syzkaller.xWOcBy/261/bus" dev="sda1" ino=16913 res=1 21:31:00 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:31:00 executing program 1 (fault-call:7 fault-nth:8): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:00 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40001) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000180)={0x4, 0x5, 0x8001, 0x92, &(0x7f0000000080)=""/146, 0x1000, &(0x7f00000002c0)=""/4096, 0x13, &(0x7f0000000140)=""/19}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f00000001c0)={0x0, 0x5, 0x1, 0xa0, &(0x7f0000ff9000/0x4000)=nil, 0x7f}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffb7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c1, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 418.983783] FAULT_INJECTION: forcing a failure. [ 418.983783] name failslab, interval 1, probability 0, space 0, times 0 [ 418.995505] CPU: 1 PID: 16149 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 419.003404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.012763] Call Trace: [ 419.015347] dump_stack+0x142/0x197 [ 419.019011] should_fail.cold+0x10f/0x159 [ 419.023171] should_failslab+0xdb/0x130 [ 419.027156] kmem_cache_alloc_node+0x287/0x780 [ 419.031746] ? trace_hardirqs_on+0x10/0x10 [ 419.036003] __alloc_skb+0x9c/0x500 [ 419.039651] ? skb_trim+0x180/0x180 [ 419.043288] ? trace_hardirqs_on+0x10/0x10 [ 419.047545] sock_wmalloc+0xae/0xf0 [ 419.051182] __ip6_append_data.isra.0+0x2102/0x2af0 [ 419.056215] ? ip6_setup_cork+0x12a0/0x12a0 [ 419.060540] ? ip6_mtu+0x141/0x410 [ 419.064187] ? ip6_setup_cork+0xcac/0x12a0 [ 419.068411] ip6_append_data+0x1c1/0x2f0 [ 419.072473] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.077495] ? rawv6_mh_filter_unregister+0x20/0x20 [ 419.082515] rawv6_sendmsg+0x107c/0x2d10 [ 419.086595] ? rawv6_bind+0x850/0x850 [ 419.090404] ? avc_has_perm_noaudit+0x420/0x420 [ 419.095070] ? process_measurement+0x58a/0xb80 [ 419.099655] ? __lock_acquire+0x5f7/0x4620 [ 419.103909] ? sock_has_perm+0x1ed/0x280 [ 419.107972] ? selinux_tun_dev_create+0xc0/0xc0 [ 419.110187] protocol 88fb is buggy, dev hsr_slave_0 [ 419.112645] ? __lock_is_held+0xb6/0x140 [ 419.112661] inet_sendmsg+0x122/0x500 [ 419.112670] ? inet_sendmsg+0x122/0x500 [ 419.112680] ? inet_recvmsg+0x500/0x500 [ 419.112694] sock_sendmsg+0xce/0x110 [ 419.112707] kernel_sendmsg+0x44/0x50 [ 419.117766] protocol 88fb is buggy, dev hsr_slave_1 [ 419.121766] sock_no_sendpage+0x107/0x130 [ 419.121774] ? sock_kzfree_s+0x50/0x50 [ 419.121800] kernel_sendpage+0x92/0xf0 [ 419.121811] ? sock_kzfree_s+0x50/0x50 [ 419.161795] sock_sendpage+0x8b/0xc0 [ 419.165508] ? trace_hardirqs_on+0xd/0x10 [ 419.169672] ? kernel_sendpage+0xf0/0xf0 [ 419.173741] pipe_to_sendpage+0x242/0x340 [ 419.177895] ? direct_splice_actor+0x190/0x190 [ 419.182497] ? __put_page+0xad/0x2f0 [ 419.186209] ? anon_pipe_buf_release+0x22f/0x2f0 [ 419.190962] __splice_from_pipe+0x348/0x780 [ 419.195559] ? direct_splice_actor+0x190/0x190 [ 419.200141] ? direct_splice_actor+0x190/0x190 [ 419.204713] splice_from_pipe+0xf0/0x150 [ 419.208768] ? splice_shrink_spd+0xb0/0xb0 [ 419.213025] ? security_file_permission+0x89/0x1f0 [ 419.217972] generic_splice_sendpage+0x3c/0x50 [ 419.222571] ? splice_from_pipe+0x150/0x150 [ 419.226911] SyS_splice+0xd92/0x1430 [ 419.230626] ? __sb_end_write+0xc1/0x100 [ 419.234724] ? compat_SyS_vmsplice+0x250/0x250 [ 419.239300] ? do_syscall_64+0x53/0x640 [ 419.243273] ? compat_SyS_vmsplice+0x250/0x250 [ 419.247866] do_syscall_64+0x1e8/0x640 [ 419.251746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.256587] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 419.261767] RIP: 0033:0x45a919 [ 419.264946] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 419.272665] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 419.279922] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.287183] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 419.294443] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 419.301701] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:01 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="d69bb5cb303f0bdd2d5c6535c1626c49cd16531cc67c5772c3047c", 0x1b) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x81, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x3}, 0x80, 0x5, 0xfffffff7, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x480000, 0x1ff, {r3}, {r5}, 0x0, 0x217}) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000100)='./file0\x00', 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='K', 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='user\x00', &(0x7f0000000300)=@secondary='builtin_and_secondary_trusted\x00') 21:31:01 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x61, 0x8600) pwritev(r3, &(0x7f0000002200)=[{&(0x7f0000000200)="f0f8a47f49a4f56130bcb634914baa2b8477bec18327ceab66c71a2440f5dc13b0faeacbe2fda3b1823c539967410466811c51d97070c8f48303b4e4030c83c0d6d8342c43d6d872fbd5406ec0a4c706c4da", 0x52}, {&(0x7f0000000ec0)="031032f4e13da4789da6c2548563c643a667ca51765d97e91b9ea3004a34b534f06e6d91b66f032fa3368b1190507eab66926087d48c35605c1b02b9d7882abc621a3b3ab00e15f7e135ab91da4cba162d4e0d1f454b84729b6ab60856c6b3e1962a8c5268379a7e277e5c1013792f928300a56b3cad7c9eb0516e57223b", 0x7e}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="46502d5c525deaccbf2f3643ec40f8e5c72f2161adef2b7ebc516083226b133c0bd9d274ef50bbf1f622801d39000968ce9cb7989b79a82e8775f87a1b850e2d2d8bdaef0f0ed14b4e4bf9af238a492e208aeebef4d140a9172b70f1a12412f2ae9f87b33904978baa4ad9e83a0354a31fb70e7d93354a143576ae99ab6cd1ef2c5dc3323ae292018ca360adf2b0696cb4366c7ce97c242cf1acd0a8f1ff76b774556adb298878d71afefd535f4d6a706f7fe61b9be930b3ab7348e74091148112ef6376d95623128796862e6246e50c9e212ce5dcd36540331f32c4", 0xdc}, {&(0x7f0000002040)="19046c74125eabfc3ed10bfd98420bff42c9d35ed786e2cfb9e3d8ec78e6d4051eb3d9d8086bf54b016787f72e3b5c967e07e744330e44a991ab04aed8e07a6da44e41262f948f1fb64542b9213c6121e130334941d42cd27cc6684a89c5e9f445b30bca2c069df2deafb23f184921fb65a47e5afe55fdae26b8be655fc6e62ea7b800537b17e5745e36237385c5f408a6734b94220ce4ca47e9f647dda422735e1a8091e19df7e0e201aba2b6918fdfb3092a062f1be0fa5e8cf820a9902593ae15b7892a165852bb94742b040b3e541abba63f8de810fa4639a15d4263ca7e2f820a73", 0xe4}, {&(0x7f0000002140)="a78260554fd0eff6a6fed93dd3be9d440c72078e384754b39881780df311bd27aaab08894e2226f154538646e83519cb4788dcf082638154104aef937dd39c9c7a26db9dcc73c107b7ed0f651439e3738e9c6259a7c72cd29dc82122a1fe81840daa", 0x62}, {&(0x7f00000021c0)="e8769b027ee218e0", 0x8}], 0x7, 0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6f, 0xff, 0xc1, 0x8000, 0x3, 0x6, 0x8, 0x4388, 0x40, 0x28d, 0x0, 0x96, 0x38, 0x1, 0x7ff, 0x2, 0x1400}, [{0x4, 0xa333, 0x206, 0x0, 0x5, 0x2, 0x40, 0x3}, {0x6, 0x20, 0x0, 0x1000, 0x3, 0x5, 0xd2c}], "ccc762b74b53342f546904a55cbd094908f12bd58b7a887cefa6ee6b7fafdcd8f5330efc999d86779edcfba61e53c6dc7cdfa1413334e06c387d78e056b3a4e12256cd6ac2bec09825a52c09df46c61cffa8cfa7b76e37673eae97b83077db3d12bcfa3888bc668e6d439b48e00c4c6ff0b3da418acaf0725373579a997168714b2753c5be88843ad2f4d6ca8f457e3a0078db0f678bde5611cba28dd6593efa1ab8886d484dc6131fe97fb0170d8b41a50816586a726539162a9f65dcfa85697b484951d8e956e8bbdc6dac7364b583b061e1c4c3974270bd7c252972668e269a5ee1261e84839a76634f0f91c368ec15", [[], [], [], [], [], [], [], [], [], []]}, 0xba1) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000002440)={'bond0\x00', &(0x7f0000002380)=@ethtool_rx_ntuple={0x35, {0x8, @ah_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000, 0x20}, @sctp_ip4_spec={@local, @rand_addr=0x6ba, 0x4e21, 0x4e20, 0x2}, 0x5, 0xfff, 0x5, 0x81, 0xffffffffffffffff}}}) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000002480)={0x18, 0x0, 0x0, 0x1c57}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000002280)="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") [ 419.573311] audit: type=1804 audit(1577050261.373:65): pid=16138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir094021405/syzkaller.xWOcBy/261/bus" dev="sda1" ino=16913 res=1 21:31:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1f3e4c8aa45b796e, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/248, 0xf8, 0x40002021, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:01 executing program 1 (fault-call:7 fault-nth:9): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:01 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000309, 0xf0ffff) 21:31:01 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:31:01 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 419.932359] FAULT_INJECTION: forcing a failure. [ 419.932359] name failslab, interval 1, probability 0, space 0, times 0 [ 419.945250] CPU: 0 PID: 16193 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 419.953319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.962826] Call Trace: [ 419.965454] dump_stack+0x142/0x197 [ 419.969119] should_fail.cold+0x10f/0x159 [ 419.973309] should_failslab+0xdb/0x130 [ 419.977333] kmem_cache_alloc_node_trace+0x280/0x770 21:31:01 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001780)=@un=@abs, 0x2d5, &(0x7f00000001c0), 0x0, &(0x7f0000001840)=""/48}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)=""/217}, {&(0x7f00000003c0)=""/183}], 0x0, &(0x7f0000000480)=""/4096}, 0x5717}, {{&(0x7f0000001480)=@sco, 0x0, &(0x7f0000001900)=[{&(0x7f0000001880)}, {&(0x7f00000018c0)=""/10}]}, 0x7f}], 0x1, 0x40002000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x2, 0x4, 0x80000000, 0x0, {0x77359400}, {0x1, 0x8, 0x80, 0x8, 0x1, 0x80, "d3bbeb6b"}, 0x7, 0xe5325f64d72a2a0c, @userptr=0x3, 0x401, 0x0, r2}) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000003c0)={r6}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x8204, 0x0, 0x7fffffff, r6}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r7, 0x100, 0x10}, 0xc) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 419.982473] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 419.987966] __kmalloc_node_track_caller+0x3d/0x80 [ 419.992925] __kmalloc_reserve.isra.0+0x40/0xe0 [ 419.997622] __alloc_skb+0xcf/0x500 [ 420.001276] ? skb_trim+0x180/0x180 [ 420.004930] sock_wmalloc+0xae/0xf0 [ 420.008580] __ip6_append_data.isra.0+0x2102/0x2af0 [ 420.013855] ? retint_kernel+0x2d/0x2d [ 420.017771] ? ip6_setup_cork+0x12a0/0x12a0 [ 420.022123] ip6_append_data+0x1c1/0x2f0 [ 420.026194] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.031418] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.036733] rawv6_sendmsg+0x107c/0x2d10 [ 420.040967] ? rawv6_bind+0x850/0x850 [ 420.044810] ? avc_has_perm_noaudit+0x420/0x420 [ 420.049501] ? finish_task_switch+0x178/0x650 [ 420.054017] ? find_held_lock+0x35/0x130 [ 420.058211] ? mark_held_locks+0xb1/0x100 [ 420.062398] ? sock_has_perm+0x1ed/0x280 [ 420.066485] ? selinux_tun_dev_create+0xc0/0xc0 [ 420.071174] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.076414] inet_sendmsg+0x122/0x500 [ 420.080239] ? inet_sendmsg+0x122/0x500 [ 420.084232] ? inet_recvmsg+0x500/0x500 [ 420.088234] sock_sendmsg+0xce/0x110 [ 420.091964] kernel_sendmsg+0x44/0x50 [ 420.095782] sock_no_sendpage+0x107/0x130 [ 420.099940] ? sock_kzfree_s+0x50/0x50 [ 420.103849] ? check_preemption_disabled+0x3c/0x250 [ 420.108886] kernel_sendpage+0x92/0xf0 [ 420.112787] ? sock_kzfree_s+0x50/0x50 [ 420.116692] sock_sendpage+0x8b/0xc0 [ 420.120413] ? kernel_sendpage+0xf0/0xf0 [ 420.124485] pipe_to_sendpage+0x242/0x340 [ 420.128648] ? direct_splice_actor+0x190/0x190 [ 420.133230] ? __put_page+0xad/0x2f0 [ 420.136946] ? anon_pipe_buf_release+0x22f/0x2f0 [ 420.141708] __splice_from_pipe+0x348/0x780 [ 420.146031] ? direct_splice_actor+0x190/0x190 [ 420.150626] ? direct_splice_actor+0x190/0x190 [ 420.155210] splice_from_pipe+0xf0/0x150 [ 420.159277] ? splice_shrink_spd+0xb0/0xb0 [ 420.163523] ? security_file_permission+0x89/0x1f0 [ 420.168458] generic_splice_sendpage+0x3c/0x50 [ 420.173043] ? splice_from_pipe+0x150/0x150 [ 420.177363] SyS_splice+0xd92/0x1430 [ 420.181143] ? __sb_end_write+0xc1/0x100 [ 420.185220] ? compat_SyS_vmsplice+0x250/0x250 [ 420.189807] ? do_syscall_64+0x53/0x640 [ 420.193782] ? compat_SyS_vmsplice+0x250/0x250 [ 420.198366] do_syscall_64+0x1e8/0x640 [ 420.202256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.207110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 420.212299] RIP: 0033:0x45a919 [ 420.215490] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 420.223204] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 21:31:02 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000180)) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000080)={'veth0_to_team\x00', 0xd04, 0xd2}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 420.230475] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 420.237750] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 420.245063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 420.252335] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:02 executing program 1 (fault-call:7 fault-nth:10): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:02 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) 21:31:02 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) r9 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 420.782115] FAULT_INJECTION: forcing a failure. [ 420.782115] name failslab, interval 1, probability 0, space 0, times 0 [ 420.793878] CPU: 1 PID: 16226 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 420.801966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.811486] Call Trace: [ 420.814108] dump_stack+0x142/0x197 [ 420.817784] should_fail.cold+0x10f/0x159 [ 420.821987] should_failslab+0xdb/0x130 [ 420.826100] kmem_cache_alloc_node+0x287/0x780 21:31:02 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000000)=0x1) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 420.830720] ? trace_hardirqs_on+0x10/0x10 [ 420.834981] __alloc_skb+0x9c/0x500 [ 420.834993] ? skb_trim+0x180/0x180 [ 420.835005] ? trace_hardirqs_on+0x10/0x10 [ 420.835018] sock_wmalloc+0xae/0xf0 [ 420.842274] __ip6_append_data.isra.0+0x2102/0x2af0 [ 420.842297] ? ip6_setup_cork+0x12a0/0x12a0 [ 420.842308] ? ip6_mtu+0x141/0x410 [ 420.842317] ? ip6_setup_cork+0xcac/0x12a0 [ 420.842330] ip6_append_data+0x1c1/0x2f0 [ 420.871399] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.876459] ? rawv6_mh_filter_unregister+0x20/0x20 [ 420.881515] rawv6_sendmsg+0x107c/0x2d10 [ 420.885610] ? rawv6_bind+0x850/0x850 [ 420.889429] ? avc_has_perm_noaudit+0x420/0x420 [ 420.894116] ? process_measurement+0x58a/0xb80 [ 420.898709] ? __lock_acquire+0x5f7/0x4620 [ 420.903211] ? sock_has_perm+0x1ed/0x280 [ 420.907461] ? selinux_tun_dev_create+0xc0/0xc0 [ 420.912298] ? __lock_is_held+0xb6/0x140 [ 420.916364] inet_sendmsg+0x122/0x500 [ 420.920284] ? inet_sendmsg+0x122/0x500 [ 420.924269] ? inet_recvmsg+0x500/0x500 [ 420.928404] sock_sendmsg+0xce/0x110 [ 420.932135] kernel_sendmsg+0x44/0x50 [ 420.935941] sock_no_sendpage+0x107/0x130 [ 420.940102] ? sock_kzfree_s+0x50/0x50 [ 420.944009] kernel_sendpage+0x92/0xf0 [ 420.947902] ? sock_kzfree_s+0x50/0x50 [ 420.951798] sock_sendpage+0x8b/0xc0 [ 420.955601] ? trace_hardirqs_on+0xd/0x10 [ 420.959763] ? kernel_sendpage+0xf0/0xf0 [ 420.964058] pipe_to_sendpage+0x242/0x340 [ 420.968225] ? direct_splice_actor+0x190/0x190 [ 420.972825] ? __put_page+0xad/0x2f0 [ 420.976561] ? anon_pipe_buf_release+0x22f/0x2f0 [ 420.981467] __splice_from_pipe+0x348/0x780 [ 420.985807] ? direct_splice_actor+0x190/0x190 [ 420.990485] ? direct_splice_actor+0x190/0x190 [ 420.995088] splice_from_pipe+0xf0/0x150 [ 420.999334] ? splice_shrink_spd+0xb0/0xb0 [ 421.003582] ? security_file_permission+0x89/0x1f0 [ 421.008521] generic_splice_sendpage+0x3c/0x50 [ 421.013275] ? splice_from_pipe+0x150/0x150 [ 421.018039] SyS_splice+0xd92/0x1430 [ 421.021769] ? __sb_end_write+0xc1/0x100 [ 421.026077] ? compat_SyS_vmsplice+0x250/0x250 [ 421.030735] ? do_syscall_64+0x53/0x640 [ 421.034726] ? compat_SyS_vmsplice+0x250/0x250 [ 421.039444] do_syscall_64+0x1e8/0x640 [ 421.043338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.048201] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 421.053903] RIP: 0033:0x45a919 [ 421.057106] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 421.064822] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 421.072110] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 421.079610] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 421.087356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 421.094950] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:02 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x8001, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0xffffffffffffffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3) splice(r4, 0x0, r1, 0x0, 0x1, 0x8) 21:31:03 executing program 1 (fault-call:7 fault-nth:11): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000000)={'netpci0\x00', @ifru_hwaddr=@dev={[], 0x17}}) close(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x1, r4}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:03 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) dup(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r8 = creat(&(0x7f00000000c0)='./bus\x00', 0x8) fallocate(r8, 0x0, 0x0, 0x1000100) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000280)=""/128) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r9 = open(0x0, 0x2000, 0x2) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000100)=0x9) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) setresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=r11, @ANYBLOB, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="348a1458781828744c703c034396835740a0267f8845915557f69abeca82a2d38682178239d5fea3552a6736d66e", @ANYRES32=r12, @ANYBLOB="ffff", @ANYRES32, @ANYBLOB="08009894", @ANYRES32, @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1000020000000000200002000000"], 0x11, 0x2) 21:31:03 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) r9 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 421.579716] FAULT_INJECTION: forcing a failure. [ 421.579716] name failslab, interval 1, probability 0, space 0, times 0 [ 421.595000] CPU: 1 PID: 16251 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 421.603061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.612448] Call Trace: [ 421.615077] dump_stack+0x142/0x197 [ 421.618893] should_fail.cold+0x10f/0x159 [ 421.623097] should_failslab+0xdb/0x130 [ 421.627122] kmem_cache_alloc_node_trace+0x280/0x770 [ 421.632274] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 421.637767] __kmalloc_node_track_caller+0x3d/0x80 [ 421.642744] __kmalloc_reserve.isra.0+0x40/0xe0 [ 421.647459] __alloc_skb+0xcf/0x500 [ 421.651117] ? skb_trim+0x180/0x180 [ 421.654764] ? trace_hardirqs_on+0x10/0x10 [ 421.659157] sock_wmalloc+0xae/0xf0 [ 421.662802] __ip6_append_data.isra.0+0x2102/0x2af0 [ 421.662829] ? ip6_setup_cork+0x12a0/0x12a0 [ 421.662839] ? ip6_mtu+0x141/0x410 [ 421.662848] ? ip6_setup_cork+0xcac/0x12a0 [ 421.672358] ip6_append_data+0x1c1/0x2f0 [ 421.672371] ? rawv6_mh_filter_unregister+0x20/0x20 [ 421.672387] ? rawv6_mh_filter_unregister+0x20/0x20 [ 421.672401] rawv6_sendmsg+0x107c/0x2d10 [ 421.672423] ? rawv6_bind+0x850/0x850 [ 421.672437] ? avc_has_perm_noaudit+0x420/0x420 [ 421.672448] ? process_measurement+0x58a/0xb80 [ 421.672464] ? __lock_acquire+0x5f7/0x4620 [ 421.672478] ? sock_has_perm+0x1ed/0x280 [ 421.672488] ? selinux_tun_dev_create+0xc0/0xc0 [ 421.724688] ? __lock_is_held+0xb6/0x140 21:31:03 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r0 = socket(0x2, 0x3, 0xf9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x208, 0x208, 0x0, 0x110, 0x110, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'batadv0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TTL={0x28, 'TTL\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/242, 0x68}, {&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000200)=""/219, 0xfcde}, {&(0x7f00000008c0)=""/30, 0x10}, {&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/183, 0xb7}], 0x8, 0xf0fffc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x1110, r2, 0x2) [ 421.728795] inet_sendmsg+0x122/0x500 [ 421.731782] xt_limit: Overflow, try lower: 0/0 [ 421.732764] ? inet_sendmsg+0x122/0x500 [ 421.732775] ? inet_recvmsg+0x500/0x500 [ 421.732790] sock_sendmsg+0xce/0x110 [ 421.732803] kernel_sendmsg+0x44/0x50 [ 421.732817] sock_no_sendpage+0x107/0x130 [ 421.732826] ? sock_kzfree_s+0x50/0x50 [ 421.732849] kernel_sendpage+0x92/0xf0 [ 421.757417] ? sock_kzfree_s+0x50/0x50 [ 421.769420] sock_sendpage+0x8b/0xc0 [ 421.769434] ? trace_hardirqs_on+0xd/0x10 [ 421.769446] ? kernel_sendpage+0xf0/0xf0 [ 421.769460] pipe_to_sendpage+0x242/0x340 [ 421.769474] ? direct_splice_actor+0x190/0x190 [ 421.769485] ? __put_page+0xad/0x2f0 [ 421.769496] ? anon_pipe_buf_release+0x22f/0x2f0 [ 421.769508] __splice_from_pipe+0x348/0x780 [ 421.777387] ? direct_splice_actor+0x190/0x190 [ 421.777404] ? direct_splice_actor+0x190/0x190 [ 421.777415] splice_from_pipe+0xf0/0x150 [ 421.777428] ? splice_shrink_spd+0xb0/0xb0 [ 421.777449] ? security_file_permission+0x89/0x1f0 [ 421.777463] generic_splice_sendpage+0x3c/0x50 [ 421.777473] ? splice_from_pipe+0x150/0x150 [ 421.777484] SyS_splice+0xd92/0x1430 [ 421.785694] ? __sb_end_write+0xc1/0x100 [ 421.785718] ? compat_SyS_vmsplice+0x250/0x250 [ 421.785729] ? do_syscall_64+0x53/0x640 [ 421.785741] ? compat_SyS_vmsplice+0x250/0x250 [ 421.785754] do_syscall_64+0x1e8/0x640 [ 421.785764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.785782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 421.785792] RIP: 0033:0x45a919 [ 421.799072] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 421.799085] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 421.799096] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 421.799102] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 421.799109] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 421.799115] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:03 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r5, 0x4010641c, &(0x7f0000000340)={r6, &(0x7f00000002c0)=""/40}) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r7 = syz_open_pts(0xffffffffffffffff, 0x60000) ioctl$VT_WAITACTIVE(r7, 0x5607) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x3}, 0x8) r9 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x1000, 0x7fff}, {0x7fff, 0x1f}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x7}, r8, 0xe, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x1, 0x4) 21:31:04 executing program 1 (fault-call:7 fault-nth:12): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 422.414588] FAULT_INJECTION: forcing a failure. [ 422.414588] name failslab, interval 1, probability 0, space 0, times 0 [ 422.427369] CPU: 1 PID: 16281 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 422.435471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.445144] Call Trace: [ 422.447774] dump_stack+0x142/0x197 [ 422.451453] should_fail.cold+0x10f/0x159 [ 422.455654] should_failslab+0xdb/0x130 [ 422.459761] kmem_cache_alloc_node+0x287/0x780 [ 422.464382] ? debug_smp_processor_id+0x1c/0x20 [ 422.469096] ? perf_trace_lock+0x109/0x500 [ 422.473373] __alloc_skb+0x9c/0x500 [ 422.477036] ? skb_trim+0x180/0x180 [ 422.480692] ? debug_smp_processor_id+0x1c/0x20 [ 422.485399] ? perf_trace_lock+0x109/0x500 [ 422.489665] sock_wmalloc+0xae/0xf0 [ 422.493338] __ip6_append_data.isra.0+0x2102/0x2af0 [ 422.498417] ? ip6_setup_cork+0x12a0/0x12a0 [ 422.502770] ? ip6_mtu+0x141/0x410 [ 422.506343] ? ip6_setup_cork+0xcac/0x12a0 [ 422.510853] ip6_append_data+0x1c1/0x2f0 [ 422.514951] ? rawv6_mh_filter_unregister+0x20/0x20 [ 422.520004] ? rawv6_mh_filter_unregister+0x20/0x20 [ 422.525072] rawv6_sendmsg+0x107c/0x2d10 [ 422.529184] ? rawv6_bind+0x850/0x850 [ 422.533113] ? avc_has_perm_noaudit+0x420/0x420 [ 422.537818] ? process_measurement+0x58a/0xb80 [ 422.542446] ? __lock_acquire+0x5f7/0x4620 [ 422.546732] ? sock_has_perm+0x1ed/0x280 [ 422.550831] ? selinux_tun_dev_create+0xc0/0xc0 [ 422.555537] ? check_preemption_disabled+0x3c/0x250 [ 422.561559] ? __lock_is_held+0xb6/0x140 [ 422.565659] inet_sendmsg+0x122/0x500 [ 422.569501] ? inet_sendmsg+0x122/0x500 [ 422.573510] ? inet_recvmsg+0x500/0x500 [ 422.577526] sock_sendmsg+0xce/0x110 [ 422.581375] kernel_sendmsg+0x44/0x50 [ 422.585215] sock_no_sendpage+0x107/0x130 [ 422.589396] ? sock_kzfree_s+0x50/0x50 [ 422.593513] kernel_sendpage+0x92/0xf0 [ 422.597518] ? sock_kzfree_s+0x50/0x50 [ 422.601438] sock_sendpage+0x8b/0xc0 [ 422.605183] ? trace_hardirqs_on+0xd/0x10 [ 422.609367] ? kernel_sendpage+0xf0/0xf0 [ 422.613462] pipe_to_sendpage+0x242/0x340 [ 422.617753] ? direct_splice_actor+0x190/0x190 [ 422.622454] ? __put_page+0xad/0x2f0 [ 422.626202] ? anon_pipe_buf_release+0x22f/0x2f0 [ 422.630995] __splice_from_pipe+0x348/0x780 [ 422.635419] ? direct_splice_actor+0x190/0x190 [ 422.640042] ? direct_splice_actor+0x190/0x190 [ 422.644793] splice_from_pipe+0xf0/0x150 [ 422.648910] ? splice_shrink_spd+0xb0/0xb0 [ 422.653333] ? security_file_permission+0x89/0x1f0 [ 422.658387] generic_splice_sendpage+0x3c/0x50 [ 422.663017] ? splice_from_pipe+0x150/0x150 [ 422.667374] SyS_splice+0xd92/0x1430 [ 422.671120] ? __sb_end_write+0xc1/0x100 [ 422.675229] ? compat_SyS_vmsplice+0x250/0x250 [ 422.679983] ? do_syscall_64+0x53/0x640 [ 422.683994] ? compat_SyS_vmsplice+0x250/0x250 [ 422.688611] do_syscall_64+0x1e8/0x640 [ 422.692527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.697412] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 422.702627] RIP: 0033:0x45a919 [ 422.705836] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 422.713577] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 422.720871] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 422.728333] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 422.735628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 422.742925] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:04 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) semget(0x3, 0x95bf306cf544ad85, 0x208) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x20, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x80, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xc2c7f829b54a499c, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) dup(r5) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f00000001c0)) 21:31:04 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xfffffffffffffcf1}}], 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') setitimer(0x1, &(0x7f0000000000), &(0x7f0000000040)) preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:04 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) r9 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r10, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:04 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) gettid() r4 = socket$inet6(0xa, 0x6, 0x2) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl(r5, 0x1ff, &(0x7f0000000080)="f2853d67bf6788de2cb8611962e840cf47680154bef4cec6aea2dc8ddb5899f3fb79d5751ad93c7f24c07711e098d0b769a6bdd894e89219559ba92af280497ea1c275b064f3d778b57d9c0833c4609a1d4166a2f71526c6e2dbc4aa8ca3b00bbfdddbdbde7bc4c4557f02ae62638abb4c27a4e1246d9cdda655a5cc44808e4b40391c315340715062188b075b9ec5770327fee0b15827e16f00416a8600f7abd13bf39accb501240fe0b288541550877a9f35930476fe26509ac2ba1819ff06db7ff036736c8b345c0a85a84e254e3a5a27907e926d4588b150cb5722fdbf0280853848f4a409583b6376afaa") 21:31:04 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x0) 21:31:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) [ 422.966111] audit: type=1804 audit(1577050264.763:66): pid=16291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir712465313/syzkaller.MaEJqL/376/bus" dev="sda1" ino=16706 res=1 21:31:05 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r7 = dup3(r3, r6, 0x40000) r8 = socket(0x0, 0x0, 0x8) getsockname$tipc(r8, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:05 executing program 1 (fault-call:7 fault-nth:13): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:05 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x2d8, 0x0, 0x1c7}}], 0x1, 0x40000020, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "5ad015e0a119a6b0"}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x1}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r3, 0x181, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='\f', 0x1}]) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x800, r1, &(0x7f0000000140)="27aab8f9e015e0b29ee2eb4c98abe87121af811968dc63fe8106dd45c91a07e9f48f3ee3c40a5c02149ecca24d187ba2c41f584d612c2433b9f61d206eb2e205fea1697bf662bdda93de78dbd9", 0x4d, 0x6}]) preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 423.343747] FAULT_INJECTION: forcing a failure. [ 423.343747] name failslab, interval 1, probability 0, space 0, times 0 [ 423.376142] CPU: 0 PID: 16335 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 423.384226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.393780] Call Trace: [ 423.396494] dump_stack+0x142/0x197 [ 423.400167] should_fail.cold+0x10f/0x159 [ 423.404368] should_failslab+0xdb/0x130 [ 423.408379] kmem_cache_alloc_node_trace+0x280/0x770 [ 423.413739] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 423.419229] __kmalloc_node_track_caller+0x3d/0x80 [ 423.424280] __kmalloc_reserve.isra.0+0x40/0xe0 [ 423.428989] __alloc_skb+0xcf/0x500 [ 423.432643] ? skb_trim+0x180/0x180 [ 423.436303] ? debug_smp_processor_id+0x1c/0x20 [ 423.441008] ? perf_trace_lock+0x109/0x500 [ 423.445281] sock_wmalloc+0xae/0xf0 [ 423.448941] __ip6_append_data.isra.0+0x2102/0x2af0 [ 423.454014] ? ip6_setup_cork+0x12a0/0x12a0 [ 423.458371] ? ip6_mtu+0x141/0x410 [ 423.462008] ? ip6_setup_cork+0xcac/0x12a0 [ 423.466298] ip6_append_data+0x1c1/0x2f0 [ 423.470476] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.475544] ? rawv6_mh_filter_unregister+0x20/0x20 [ 423.480694] rawv6_sendmsg+0x107c/0x2d10 [ 423.484798] ? rawv6_bind+0x850/0x850 [ 423.488631] ? avc_has_perm_noaudit+0x420/0x420 [ 423.493334] ? process_measurement+0x58a/0xb80 [ 423.497955] ? __lock_acquire+0x5f7/0x4620 [ 423.502234] ? sock_has_perm+0x1ed/0x280 [ 423.506355] ? selinux_tun_dev_create+0xc0/0xc0 [ 423.511313] ? check_preemption_disabled+0x3c/0x250 [ 423.516511] ? __lock_is_held+0xb6/0x140 [ 423.520621] inet_sendmsg+0x122/0x500 [ 423.524449] ? inet_sendmsg+0x122/0x500 [ 423.528454] ? inet_recvmsg+0x500/0x500 [ 423.532456] sock_sendmsg+0xce/0x110 [ 423.536207] kernel_sendmsg+0x44/0x50 [ 423.540167] sock_no_sendpage+0x107/0x130 [ 423.544531] ? sock_kzfree_s+0x50/0x50 [ 423.548715] kernel_sendpage+0x92/0xf0 [ 423.552633] ? sock_kzfree_s+0x50/0x50 [ 423.556556] sock_sendpage+0x8b/0xc0 [ 423.560608] ? trace_hardirqs_on+0xd/0x10 [ 423.564882] ? kernel_sendpage+0xf0/0xf0 [ 423.569222] pipe_to_sendpage+0x242/0x340 [ 423.573505] ? direct_splice_actor+0x190/0x190 [ 423.578126] ? __put_page+0xad/0x2f0 [ 423.582140] ? anon_pipe_buf_release+0x22f/0x2f0 [ 423.587327] __splice_from_pipe+0x348/0x780 [ 423.591859] ? direct_splice_actor+0x190/0x190 [ 423.596481] ? direct_splice_actor+0x190/0x190 [ 423.601099] splice_from_pipe+0xf0/0x150 [ 423.605202] ? splice_shrink_spd+0xb0/0xb0 [ 423.609481] ? security_file_permission+0x89/0x1f0 [ 423.614933] generic_splice_sendpage+0x3c/0x50 [ 423.619643] ? splice_from_pipe+0x150/0x150 [ 423.623999] SyS_splice+0xd92/0x1430 [ 423.627834] ? __sb_end_write+0xc1/0x100 [ 423.631940] ? compat_SyS_vmsplice+0x250/0x250 [ 423.636555] ? do_syscall_64+0x53/0x640 [ 423.640662] ? compat_SyS_vmsplice+0x250/0x250 [ 423.645541] do_syscall_64+0x1e8/0x640 [ 423.649476] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.654439] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 423.659654] RIP: 0033:0x45a919 [ 423.662861] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 423.670595] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 423.677893] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 423.685361] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 423.692657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 423.701005] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:05 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:05 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r8}}, 0xfffffe65) fcntl$setpipe(r6, 0x407, 0xfffffffffffffffd) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) close(r6) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 21:31:06 executing program 1 (fault-call:7 fault-nth:14): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000b00)={0xf8, 0x4, 0x2, 0x0, 0x3, 0x40, 0xff, 0x17, 0x7, 0x1, 0x80, 0x3, 0x0, 0x4, 0x1, 0x7, 0x2, 0x7, 0x6, [], 0x7, 0xffffffffffffdd3d}) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$packet_int(r5, 0x107, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = epoll_create(0x1) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L-', 0x3}, 0x16, 0x1) r8 = accept$netrom(r6, &(0x7f00000001c0)={{}, [@netrom, @netrom, @null, @netrom, @rose, @default, @remote, @netrom]}, &(0x7f0000000100)=0x48) syz_mount_image$ceph(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000500)='./bus\x00', 0x5, 0x7, &(0x7f0000000a00)=[{&(0x7f0000000540)="d35cd4b8c012a0103dbfe852ea38f2e470b895e3861ac315c1625674bee0abba9111bd7c9fc93d38ab3410af362407126d9aa46fd5b5188100c2bcb974aaa61df1ed38a1417d26bb2c3d8af28498ec2c9a092b3e82dec12d23d9622fa7fa0032e994146b3ccf6d35ce5b54fa89768ad27deb8ad18a88", 0x76, 0xffffffff}, {&(0x7f00000005c0)="925e95e0c1347fbf324851daaf0f", 0xe, 0x3ff}, {&(0x7f0000000600)="593ff6e8bea118072e09c6b74c166eeb26a9779b393348da25ab7a572a77b13439ef534abfa59a9f61af601efd982062466fc951dc1f7833899f953837f14598c12a9302ffaddd16600de4a9fb0fb7b25b9832744a2bb74b5302a214425574ef87c38ca7d47dea41cbfc8e8eb10005f3a5cfddf912987585a8fcb28aa70d6e7b77b30e560e04aa8904788703492c0689960cfe2589ee3eb4f0226cfd5146e0", 0x9f, 0x43d03e8000000000}, {&(0x7f00000006c0)="5d888699e88c635601fbd7f257d45ab654b9660fa01426ac824467741c41815453cabcf43c8209c44b3f41b74a8b3ce6b2bb313220c8cf3191a44fc3deed86866982272af1b85e42cb6f4b8f88203a85763da9fd11612eeb53229efcd0d871657ad55220bc4f532babd66b75ddbca8f3fdcfbfd47f6716ce28fe9f69736c781d98ab9cd942d7efe120b3d449c9b80982b5b66625241e4e12f00bf0a84a9c0aa97de34fe6a5df1f71c74d3a17ad0c24a980d6cfc584ba4ec00037c9db4cb17840a26ff26e3ff870dcb0cfcada245cde6bd609dfebc1074363e7a8b8fcd8213f56cefcf596a28d4a1848641224a17517dd", 0xf0, 0xffffffffffffffcc}, {&(0x7f00000007c0)="cfe7772f55eb4378d567c956e05264e5a0787b97d931e8dc956d4ef0125c3ffeb0682a312e6e14cb071fddd30efe6d7c5a588cfa1737dae5", 0x38, 0x83}, {&(0x7f0000000800)="71db9cf96252846f6accfde0e0c7c956d54b872bf53e3840abf17b1bfc4019f2ac7a0d7226b8bad0b93d9fb9ddd8bb8a286be19da4fdb3134ee028b55b53d16ca8c651bd5e399e2d094ec36ac8b1742a3cf15803ee22331f92ac664bfb5292e2dc274eea43ea3626586d6f29c100f3d1bdeb3b4a4dd483a8259cc7dd13df55692174c370c0efc2f66ffc5587f44811ee86c609a2b754a32c5e924330824b6f2b8a847bdb03f76c255a8b5920835fdb429c6e5976471495b7c0368f4ac5267a7331861f12eceb69c68c282aced9b14a8cd18a8b72aa60330098f4702a5d3da5b19d070949d936db81654a4702aa", 0xed, 0x6}, {&(0x7f0000000900)="3cdc9043bb2d34e113a8f681d2df9044443e637b8b09226d4e78be100fded8ee40438f96e2a22180208bb0af45c63ce5b37cd720cd0f487c16d33270c70730612b8dc75ae4dfea22fd454cd8ccaac0346760f2f09558a474f59d0a1bf7e5ad0378906cbff6d97f540f17755217c277c186164d24d8f1ef31ba47e11a0316acc527ece848888658c34c5ffcc4a92f50b61fa0f53ff878c873b47e553226ca68c0407fc3425d85ca7d8593b2855bffe3a24e532ee6034d7463e3569538e4930631926a1d9043a89d4a2b730726dea617d75a97fa3a96dfa75697", 0xd9, 0x1}], 0x2000, &(0x7f0000000ac0)='\'\x00') fadvise64(r8, 0x2, 0x4, 0x4) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r10 = syz_open_procfs(r9, &(0x7f00000003c0)='net/ip_mr_cache\x00') ioctl$VHOST_GET_VRING_BASE(r10, 0xc008af12, &(0x7f0000000400)) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9516b7e8930def90, 0x11, r0, 0xf422d000) preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00JjA\x95\xc5\xd5.G!\xc9\x05\xff\xb4<\x18wV\xb5:\xc8\xaf{\t\\\xa8Nc\x1c\x9e\x86{\xee^') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 424.373808] FAULT_INJECTION: forcing a failure. [ 424.373808] name failslab, interval 1, probability 0, space 0, times 0 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffdf2, 0x0}, 0x22ad}], 0x1, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x40010, r0, 0x5000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1aa, 0xc6d6) [ 424.444917] CPU: 1 PID: 16376 Comm: syz-executor.1 Not tainted 4.14.160-syzkaller #0 [ 424.452947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.462334] Call Trace: [ 424.465050] dump_stack+0x142/0x197 [ 424.468721] should_fail.cold+0x10f/0x159 [ 424.472912] should_failslab+0xdb/0x130 [ 424.476938] kmem_cache_alloc_node+0x287/0x780 [ 424.481550] ? debug_smp_processor_id+0x1c/0x20 [ 424.486250] ? perf_trace_lock+0x109/0x500 [ 424.490520] __alloc_skb+0x9c/0x500 [ 424.494176] ? skb_trim+0x180/0x180 [ 424.497836] ? debug_smp_processor_id+0x1c/0x20 [ 424.502605] ? perf_trace_lock+0x109/0x500 [ 424.502621] sock_wmalloc+0xae/0xf0 [ 424.502635] __ip6_append_data.isra.0+0x2102/0x2af0 [ 424.502662] ? ip6_setup_cork+0x12a0/0x12a0 [ 424.510658] ? ip6_mtu+0x141/0x410 [ 424.510670] ? ip6_setup_cork+0xcac/0x12a0 [ 424.510682] ip6_append_data+0x1c1/0x2f0 [ 424.510692] ? rawv6_mh_filter_unregister+0x20/0x20 [ 424.510708] ? rawv6_mh_filter_unregister+0x20/0x20 [ 424.510725] rawv6_sendmsg+0x107c/0x2d10 [ 424.546413] ? rawv6_bind+0x850/0x850 [ 424.550259] ? avc_has_perm_noaudit+0x420/0x420 [ 424.555105] ? process_measurement+0x58a/0xb80 [ 424.559726] ? __lock_acquire+0x5f7/0x4620 [ 424.564255] ? sock_has_perm+0x1ed/0x280 [ 424.568439] ? selinux_tun_dev_create+0xc0/0xc0 [ 424.573382] ? check_preemption_disabled+0x3c/0x250 [ 424.578445] ? __lock_is_held+0xb6/0x140 [ 424.582785] inet_sendmsg+0x122/0x500 [ 424.586709] ? inet_sendmsg+0x122/0x500 [ 424.590725] ? inet_recvmsg+0x500/0x500 [ 424.594892] sock_sendmsg+0xce/0x110 [ 424.598645] kernel_sendmsg+0x44/0x50 [ 424.602479] sock_no_sendpage+0x107/0x130 [ 424.606660] ? sock_kzfree_s+0x50/0x50 [ 424.610599] kernel_sendpage+0x92/0xf0 [ 424.614511] ? sock_kzfree_s+0x50/0x50 [ 424.618431] sock_sendpage+0x8b/0xc0 [ 424.622173] ? trace_hardirqs_on+0xd/0x10 [ 424.626351] ? kernel_sendpage+0xf0/0xf0 [ 424.630444] pipe_to_sendpage+0x242/0x340 [ 424.634635] ? direct_splice_actor+0x190/0x190 [ 424.639252] ? __put_page+0xad/0x2f0 [ 424.642995] ? anon_pipe_buf_release+0x22f/0x2f0 [ 424.647784] __splice_from_pipe+0x348/0x780 [ 424.652139] ? direct_splice_actor+0x190/0x190 [ 424.656896] ? direct_splice_actor+0x190/0x190 [ 424.661510] splice_from_pipe+0xf0/0x150 [ 424.665627] ? splice_shrink_spd+0xb0/0xb0 [ 424.669984] ? security_file_permission+0x89/0x1f0 [ 424.674978] generic_splice_sendpage+0x3c/0x50 [ 424.679596] ? splice_from_pipe+0x150/0x150 [ 424.685029] SyS_splice+0xd92/0x1430 [ 424.688774] ? __sb_end_write+0xc1/0x100 [ 424.692882] ? compat_SyS_vmsplice+0x250/0x250 [ 424.697504] ? do_syscall_64+0x53/0x640 [ 424.701508] ? compat_SyS_vmsplice+0x250/0x250 [ 424.706135] do_syscall_64+0x1e8/0x640 [ 424.710183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.715049] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.720255] RIP: 0033:0x45a919 [ 424.723462] RSP: 002b:00007ff8a8770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 424.731198] RAX: ffffffffffffffda RBX: 00007ff8a8770c90 RCX: 000000000045a919 [ 424.738499] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 21:31:06 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x108000400000003a) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 424.745921] RBP: 000000000075bfc8 R08: 000000000004ffe0 R09: 0000000000000000 [ 424.753208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff8a87716d4 [ 424.760823] R13: 00000000004cb466 R14: 00000000004e3f28 R15: 0000000000000007 21:31:06 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x2d8, 0x0, 0x1c7}}], 0x1, 0x40000020, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{0x3, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "5ad015e0a119a6b0"}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x1}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r3, 0x181, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)='\f', 0x1}]) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x800, r1, &(0x7f0000000140)="27aab8f9e015e0b29ee2eb4c98abe87121af811968dc63fe8106dd45c91a07e9f48f3ee3c40a5c02149ecca24d187ba2c41f584d612c2433b9f61d206eb2e205fea1697bf662bdda93de78dbd9", 0x4d, 0x6}]) preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e20, @rand_addr=0x4ab1e45b}, {0x2, 0x4e24, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x57, &(0x7f0000000000)='netpci0\x00', 0xed, 0x80000001, 0xffff}) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x39d}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x2) 21:31:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff578, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r6}}, 0x120) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x5, r6, 0xb1895869b4a8cfba, 0x1, @in={0x2, 0x6e24, @local}}}, 0xa0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:06 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') 21:31:07 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_getattr(r5, &(0x7f0000000000)={0x38}, 0x38, 0x0) 21:31:07 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200000, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180), &(0x7f0000000340)=0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f00000003c0)=0x5) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r3, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$KVM_S390_UCAS_UNMAP(r7, 0x4018ae51, &(0x7f00000000c0)={0x8000, 0x7ff, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="88ec5997418016c7245791209143b9f3f27674706ad80570ebd60f7337b3ca8eceab3070db8bcfb8da357e231546e659c4303e5e45339321dbd3e0cf13732ecc40972a81b82d000000008406969c000000000000", @ANYRES16=r8, @ANYBLOB="050c606c5c52fc915393ee0f4e"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2204800a}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x6000080) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4014}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x4000) fsetxattr$smack_xattr_label(r5, &(0x7f0000000400)='security.SMACK64IPIN\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="6d643573756d0053419411945d3d2ccdfdacf476f705703d255cebd1b2d50f84a2089b2c46b002f1f45c6877b9caf363b172f8d064b8d0269cebb32b2350f0ad5263deb280a343b254d2d87faa834728f23bce3d6fe5a477cce39de60b0d84b82122403fd2fe74af49f9df896deba2cb0b4c57dfdf1373f64e9ae5c3b9457b82400a776c5f4718e89162bc"], 0x7, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r9, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 425.396447] audit: type=1400 audit(1577050267.193:67): avc: denied { map } for pid=16423 comm="syz-executor.3" path="socket:[57690]" dev="sockfs" ino=57690 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 [ 425.542766] selinux_nlmsg_perm: 69 callbacks suppressed [ 425.542778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16429 comm=syz-executor.3 21:31:07 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x108000400000003a) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:07 executing program 5 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 425.865101] FAULT_INJECTION: forcing a failure. [ 425.865101] name failslab, interval 1, probability 0, space 0, times 0 [ 425.897206] CPU: 1 PID: 16437 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 425.905153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.914533] Call Trace: [ 425.917301] dump_stack+0x142/0x197 [ 425.920979] should_fail.cold+0x10f/0x159 [ 425.925170] should_failslab+0xdb/0x130 [ 425.929183] kmem_cache_alloc_node+0x287/0x780 [ 425.933893] ? get_pid_task+0x98/0x140 [ 425.937822] copy_process.part.0+0x17d5/0x6a70 [ 425.942660] ? save_trace+0x290/0x290 [ 425.946495] ? proc_fail_nth_write+0x7d/0x180 [ 425.951018] ? proc_cwd_link+0x1b0/0x1b0 [ 425.955111] ? __f_unlock_pos+0x19/0x20 [ 425.959117] ? find_held_lock+0x35/0x130 [ 425.963217] ? __cleanup_sighand+0x50/0x50 [ 425.967489] ? lock_downgrade+0x740/0x740 [ 425.971680] _do_fork+0x19e/0xce0 [ 425.975168] ? fork_idle+0x280/0x280 [ 425.978913] ? fput+0xd4/0x150 [ 425.982270] ? SyS_write+0x15e/0x230 [ 425.986019] SyS_clone+0x37/0x50 [ 425.989499] ? sys_vfork+0x30/0x30 [ 425.993070] do_syscall_64+0x1e8/0x640 [ 425.996986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.002006] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.007230] RIP: 0033:0x45a919 [ 426.010441] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 426.018266] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 426.025559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 426.032853] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 426.040238] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 426.047676] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:07 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000001c0)) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:07 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x9d, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}, r3}}, 0x120) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x4000803, 0x4, 0x2}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100000, 0x0) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) 21:31:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r3 = semget(0x2, 0xed66b521f0a6ff02, 0x100) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x9, 0x5, 0x2]) statfs(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x1, '\x00\x00\x00\x00\x00\x00\\\'*\xda\xeb\xe7\x8c\xbe\xb5\x00', 0x3}, 0x18) [ 426.243291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=16429 comm=syz-executor.3 21:31:08 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000040)=@tipc=@id, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/43}, {&(0x7f0000000100)=""/130}, {&(0x7f00000001c0)=""/168}, {&(0x7f0000000280)=""/62}, {&(0x7f00000003c0)=""/219}], 0x0, &(0x7f00000004c0)=""/4096}, 0x9}, {{&(0x7f00000014c0)=@l2, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000340)=""/8}, {&(0x7f00000015c0)=""/177}, {&(0x7f0000001680)=""/31}, {&(0x7f00000016c0)=""/4096}, {&(0x7f00000026c0)=""/31}, {&(0x7f0000002700)=""/160}, {&(0x7f00000027c0)=""/187}, {&(0x7f0000002880)=""/251}, {&(0x7f0000002980)=""/143}], 0x0, &(0x7f0000002b00)=""/89}, 0x101}], 0x96, 0x20, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:08 executing program 5 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:08 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x108000400000003a) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 426.485734] FAULT_INJECTION: forcing a failure. [ 426.485734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.538215] CPU: 0 PID: 16465 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 426.546276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.555669] Call Trace: [ 426.558377] dump_stack+0x142/0x197 [ 426.562065] should_fail.cold+0x10f/0x159 [ 426.566317] ? __might_sleep+0x93/0xb0 [ 426.570295] __alloc_pages_nodemask+0x1d6/0x7a0 [ 426.575017] ? __alloc_pages_slowpath+0x2930/0x2930 [ 426.580175] ? rcu_read_lock_sched_held+0x110/0x130 [ 426.585339] copy_process.part.0+0x26a/0x6a70 [ 426.589886] ? save_trace+0x290/0x290 [ 426.593894] ? proc_fail_nth_write+0x7d/0x180 [ 426.598436] ? proc_cwd_link+0x1b0/0x1b0 [ 426.602552] ? __f_unlock_pos+0x19/0x20 [ 426.606573] ? find_held_lock+0x35/0x130 [ 426.610695] ? __cleanup_sighand+0x50/0x50 [ 426.615058] ? lock_downgrade+0x740/0x740 [ 426.619254] _do_fork+0x19e/0xce0 [ 426.622743] ? fork_idle+0x280/0x280 [ 426.626696] ? fput+0xd4/0x150 [ 426.629977] ? SyS_write+0x15e/0x230 [ 426.633838] SyS_clone+0x37/0x50 [ 426.637238] ? sys_vfork+0x30/0x30 [ 426.640824] do_syscall_64+0x1e8/0x640 [ 426.644745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.650771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.656007] RIP: 0033:0x45a919 [ 426.659223] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 426.667117] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 426.674514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 426.681817] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000100)) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x38b}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:08 executing program 5 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 426.689122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 426.696427] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 426.755547] FAULT_INJECTION: forcing a failure. [ 426.755547] name failslab, interval 1, probability 0, space 0, times 0 [ 426.767120] CPU: 0 PID: 16476 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 426.775380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.784858] Call Trace: [ 426.787498] dump_stack+0x142/0x197 [ 426.791274] should_fail.cold+0x10f/0x159 [ 426.795506] should_failslab+0xdb/0x130 [ 426.799539] kmem_cache_alloc+0x2d7/0x780 [ 426.803723] ? creds_are_invalid+0x48/0x110 [ 426.808161] ? __validate_process_creds+0x14c/0x200 [ 426.813223] prepare_creds+0x3c/0x390 [ 426.817207] copy_creds+0x7b/0x4f0 [ 426.820875] ? lockdep_init_map+0x9/0x10 [ 426.824986] copy_process.part.0+0x868/0x6a70 [ 426.829574] ? save_trace+0x290/0x290 [ 426.833587] ? proc_fail_nth_write+0x7d/0x180 [ 426.838124] ? proc_cwd_link+0x1b0/0x1b0 [ 426.842233] ? __f_unlock_pos+0x19/0x20 [ 426.846276] ? __cleanup_sighand+0x50/0x50 [ 426.850730] ? lock_downgrade+0x740/0x740 [ 426.854923] _do_fork+0x19e/0xce0 [ 426.858426] ? fork_idle+0x280/0x280 [ 426.862188] ? fput+0xd4/0x150 [ 426.865421] ? SyS_write+0x15e/0x230 [ 426.869182] SyS_clone+0x37/0x50 [ 426.872926] ? sys_vfork+0x30/0x30 [ 426.876568] do_syscall_64+0x1e8/0x640 [ 426.880639] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.885531] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.890751] RIP: 0033:0x45a919 [ 426.894053] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 426.901973] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 426.909276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 426.916758] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 426.924284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 426.931722] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:08 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x800, 0x1, 0x3, 0xc0}, {0xcafe, 0x1f, 0x4, 0x1}, {0xaef, 0x9, 0x7, 0x4}, {0x400, 0xdf, 0x8, 0x7}, {0x5, 0x33, 0x8, 0x5}, {0x8, 0x4, 0x9, 0xdfc}, {0x1000, 0x0, 0x8, 0xffffffc0}, {0x7fff, 0x8, 0xb3, 0x4}, {0xa9, 0x9, 0x3}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 21:31:08 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='K', 0x1, r4) r5 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000100)=[{&(0x7f00000001c0)="92982d18d62ef9a703ec130a15494d17cf4b05d713ac36dfcdece007afe29ecb2c0d940f9dfa57cf556dcbd1751114fef6c67d196d812ce3fcec4983a8d90cf8d9c84fe732eb6856cd709316b028b19cd702eb5121dba480e7cd18316c07818f", 0x60}], 0x1, r5) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:08 executing program 5 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 427.171508] FAULT_INJECTION: forcing a failure. [ 427.171508] name failslab, interval 1, probability 0, space 0, times 0 21:31:09 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="2100001c436569ba29ca1fe1cfc6e6fea9b3469ae01095a284b88a344d08ea9a7dc49c392801c6e6567a1f7be569374a3c23ac170c82f9ffd22e0bbf77e7b12bc6231f8a7097fbb3b4c6e768cd61680a251f911acb7505295a1d475be46f6998548fccc44950ef39f3dc1f5bd5ec6f29dba0b4b3c5120864c0fe5ad212146d6cec659f762bcc1aa550612fee43b152860268516bd3b5433670dc28eaf29ab589925784af7b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x2c, "9e85bcbe8e14ea195a7fb024fe6c16a1ba9bc0c2c353c8518056d145cd3c7bd62c0e2b71bb640fa6b02e420f"}, &(0x7f0000000180)=0x34) socket$inet(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x300, 0x0) syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') [ 427.226894] CPU: 1 PID: 16494 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 427.234844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.244398] Call Trace: [ 427.247081] dump_stack+0x142/0x197 [ 427.250853] should_fail.cold+0x10f/0x159 [ 427.255039] should_failslab+0xdb/0x130 [ 427.259133] __kmalloc_track_caller+0x2ec/0x790 [ 427.263833] ? check_preemption_disabled+0x3c/0x250 [ 427.268988] ? prepare_creds+0x3c/0x390 [ 427.272992] ? selinux_cred_prepare+0x49/0xb0 [ 427.277526] kmemdup+0x27/0x60 [ 427.280772] selinux_cred_prepare+0x49/0xb0 [ 427.286268] security_prepare_creds+0x7d/0xb0 [ 427.290798] prepare_creds+0x2d1/0x390 [ 427.294712] copy_creds+0x7b/0x4f0 [ 427.298290] ? lockdep_init_map+0x9/0x10 [ 427.302377] copy_process.part.0+0x868/0x6a70 [ 427.306908] ? save_trace+0x290/0x290 [ 427.310833] ? proc_fail_nth_write+0x7d/0x180 [ 427.315449] ? proc_cwd_link+0x1b0/0x1b0 [ 427.319539] ? __f_unlock_pos+0x19/0x20 [ 427.323553] ? __cleanup_sighand+0x50/0x50 [ 427.327830] ? lock_downgrade+0x740/0x740 [ 427.332013] _do_fork+0x19e/0xce0 [ 427.335542] ? fork_idle+0x280/0x280 [ 427.340329] ? fput+0xd4/0x150 [ 427.343577] ? SyS_write+0x15e/0x230 [ 427.347327] SyS_clone+0x37/0x50 [ 427.350867] ? sys_vfork+0x30/0x30 [ 427.354536] do_syscall_64+0x1e8/0x640 [ 427.358457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.363335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 427.368634] RIP: 0033:0x45a919 21:31:09 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) socket$inet6(0xa, 0x3, 0x108000400000003a) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 427.371862] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 427.379594] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 427.386892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 427.394189] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.401570] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 427.409043] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:09 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x440000, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xa40000, 0x81, 0x10000, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9f0902, 0x2, [], @ptr=0x7fff}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x20000, 0x0) fadvise64(r4, 0x2, 0xd015, 0x2f8782a03489418e) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:09 executing program 5 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 427.503657] IPVS: ftp: loaded support on port[0] = 21 [ 427.562293] FAULT_INJECTION: forcing a failure. [ 427.562293] name failslab, interval 1, probability 0, space 0, times 0 [ 427.602674] CPU: 1 PID: 16517 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 427.610704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.610710] Call Trace: [ 427.610732] dump_stack+0x142/0x197 [ 427.610754] should_fail.cold+0x10f/0x159 [ 427.610776] should_failslab+0xdb/0x130 [ 427.610789] kmem_cache_alloc+0x2d7/0x780 [ 427.631001] ? creds_are_invalid+0x48/0x110 [ 427.631015] ? selinux_is_enabled+0x9/0x50 [ 427.631025] ? creds_are_invalid+0x48/0x110 [ 427.631042] __delayacct_tsk_init+0x20/0x80 [ 427.631052] copy_process.part.0+0x1a6c/0x6a70 [ 427.631069] ? save_trace+0x290/0x290 [ 427.631079] ? proc_fail_nth_write+0x7d/0x180 [ 427.631087] ? proc_cwd_link+0x1b0/0x1b0 [ 427.631099] ? __f_unlock_pos+0x19/0x20 [ 427.631116] ? __cleanup_sighand+0x50/0x50 [ 427.682557] ? lock_downgrade+0x740/0x740 [ 427.686747] _do_fork+0x19e/0xce0 [ 427.690325] ? fork_idle+0x280/0x280 [ 427.694076] ? fput+0xd4/0x150 [ 427.697303] ? SyS_write+0x15e/0x230 [ 427.701055] SyS_clone+0x37/0x50 [ 427.704532] ? sys_vfork+0x30/0x30 [ 427.708104] do_syscall_64+0x1e8/0x640 [ 427.712020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.716907] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 427.722140] RIP: 0033:0x45a919 [ 427.725347] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 427.733270] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 427.740565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 427.747857] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.755527] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 427.763051] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:09 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f0000000080)="5c487a425bca0a767545635a03f2853ab9b3ed0f70cc82f9d55223e82b8a8250cc4a5b5a788c18d8e7f4d4298eec700ff8cadf79b039ae275a2af72fcef4251bf56a5cd54a44cbd486b8262f425d5e9b9912f231365e8f3b5d030587e96e8285be854a30d275683844f8c4f893c855dfbb7e295dd72323fbdff59b5eba02daf99f745a1448a0995a833bc788ca410c621c65ed0f0e1b6704ac19be58cb4cba1211e37aec4581f545c835d7b565cc5ff54c615abaa2c6e984277d09618175c9acbc0d57f1bfc78d2bcba070", 0xcb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:09 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0x188, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x6}, {0x9, 0xc}, {0xffe0, 0x1b}}, [@qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x401, 0x2, 0x0, 0x8, 0x101, 0x800, 0xbc10, 0x1ff, 0x7, 0x8000, 0xa, 0x6, 0xc, 0x3, 0xf8, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x150b}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x104, 0x8, [{{0x1c, 0x1, {0x3, 0x1, 0x6cea, 0x3, 0x0, 0x8001, 0x8c2, 0x1}}, {0x8, 0x2, [0xfffa]}}, {{0x1c, 0x1, {0x7b, 0x4, 0xc4, 0x9, 0x3, 0xfffffff9, 0x7, 0x3}}, {0xc, 0x2, [0x1, 0x9fc6, 0x4]}}, {{0x1c, 0x1, {0xf0, 0x1, 0x9, 0x101, 0x3, 0x83d, 0x21, 0xa}}, {0x18, 0x2, [0x4, 0x44, 0x401, 0x81, 0x8, 0x0, 0x81, 0x1, 0xc9a3, 0x5b52]}}, {{0x1c, 0x1, {0x4, 0x4, 0x7fff, 0x1, 0x0, 0x75, 0x8, 0x2}}, {0x8, 0x2, [0x200, 0x3]}}, {{0x1c, 0x1, {0x2, 0xea, 0x5e67, 0xc5, 0x6, 0xfffff3a5, 0x0, 0x6}}, {0x10, 0x2, [0x2, 0x3, 0x0, 0x800, 0xfffb, 0x44a]}}, {{0x1c, 0x1, {0xfd, 0x20, 0xffc0, 0x3, 0x1, 0x2, 0x6, 0x7}}, {0x14, 0x2, [0x8, 0x8001, 0x4, 0x4, 0x5, 0xa9f, 0x8]}}]}]}, 0x188}}, 0x4000000) r7 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_PCM_IOCTL_INFO(r8, 0x81204101, &(0x7f0000000300)) r9 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x541c, &(0x7f0000000640)) fchdir(r9) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000200)='./file0\x00', 0x0) [ 428.055419] bond0: Enslaving bridge2 as an active interface with an up link 21:31:09 executing program 5 (fault-call:8 fault-nth:5): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 428.129617] IPVS: ftp: loaded support on port[0] = 21 [ 428.178268] FAULT_INJECTION: forcing a failure. [ 428.178268] name failslab, interval 1, probability 0, space 0, times 0 [ 428.212408] CPU: 0 PID: 16546 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 428.220460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.230426] Call Trace: [ 428.233034] dump_stack+0x142/0x197 [ 428.236678] should_fail.cold+0x10f/0x159 [ 428.240840] should_failslab+0xdb/0x130 [ 428.244950] kmem_cache_alloc+0x2d7/0x780 [ 428.249121] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.254153] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 428.259262] dup_fd+0x85/0xa40 [ 428.262654] copy_process.part.0+0x1b5a/0x6a70 [ 428.267297] ? save_trace+0x290/0x290 [ 428.271107] ? proc_fail_nth_write+0x7d/0x180 [ 428.275609] ? proc_cwd_link+0x1b0/0x1b0 [ 428.279809] ? __cleanup_sighand+0x50/0x50 [ 428.284050] ? lock_downgrade+0x740/0x740 [ 428.288216] _do_fork+0x19e/0xce0 [ 428.291916] ? fork_idle+0x280/0x280 [ 428.295803] ? fput+0xd4/0x150 [ 428.299009] ? SyS_write+0x15e/0x230 [ 428.302912] SyS_clone+0x37/0x50 [ 428.306281] ? sys_vfork+0x30/0x30 [ 428.309919] do_syscall_64+0x1e8/0x640 [ 428.314003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.319099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.324394] RIP: 0033:0x45a919 [ 428.327635] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 428.335533] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 428.342813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 428.350090] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.357423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 428.364881] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:10 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:10 executing program 5 (fault-call:8 fault-nth:6): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 428.505467] FAULT_INJECTION: forcing a failure. [ 428.505467] name failslab, interval 1, probability 0, space 0, times 0 [ 428.518222] CPU: 0 PID: 16553 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 428.526281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.535861] Call Trace: [ 428.538505] dump_stack+0x142/0x197 [ 428.542337] should_fail.cold+0x10f/0x159 [ 428.546636] should_failslab+0xdb/0x130 [ 428.551122] kmem_cache_alloc_trace+0x2e9/0x790 [ 428.555837] ? lock_downgrade+0x740/0x740 [ 428.560118] alloc_fdtable+0x7f/0x280 [ 428.564061] dup_fd+0x693/0xa40 [ 428.567360] copy_process.part.0+0x1b5a/0x6a70 [ 428.571959] ? save_trace+0x290/0x290 [ 428.575782] ? proc_fail_nth_write+0x7d/0x180 [ 428.580283] ? proc_cwd_link+0x1b0/0x1b0 [ 428.584364] ? __cleanup_sighand+0x50/0x50 [ 428.588606] ? lock_downgrade+0x740/0x740 [ 428.592768] _do_fork+0x19e/0xce0 [ 428.596269] ? fork_idle+0x280/0x280 [ 428.600075] ? fput+0xd4/0x150 [ 428.603309] ? SyS_write+0x15e/0x230 [ 428.607113] SyS_clone+0x37/0x50 [ 428.610826] ? sys_vfork+0x30/0x30 [ 428.614470] do_syscall_64+0x1e8/0x640 [ 428.618793] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.623756] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.628957] RIP: 0033:0x45a919 [ 428.632297] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 428.640277] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 428.647556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 428.655761] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.663195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 428.670476] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:10 executing program 5 (fault-call:8 fault-nth:7): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 428.754192] FAULT_INJECTION: forcing a failure. [ 428.754192] name failslab, interval 1, probability 0, space 0, times 0 [ 428.785147] CPU: 1 PID: 16560 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 428.793105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.802568] Call Trace: [ 428.805177] dump_stack+0x142/0x197 [ 428.808819] should_fail.cold+0x10f/0x159 [ 428.813087] should_failslab+0xdb/0x130 [ 428.817115] kmem_cache_alloc_node_trace+0x280/0x770 [ 428.822264] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 428.827815] __kmalloc_node+0x3d/0x80 [ 428.831686] kvmalloc_node+0x4e/0xe0 [ 428.835457] alloc_fdtable+0xcf/0x280 [ 428.839258] dup_fd+0x693/0xa40 [ 428.842543] copy_process.part.0+0x1b5a/0x6a70 [ 428.847142] ? save_trace+0x290/0x290 [ 428.851083] ? proc_fail_nth_write+0x7d/0x180 [ 428.855642] ? proc_cwd_link+0x1b0/0x1b0 [ 428.859712] ? __cleanup_sighand+0x50/0x50 [ 428.863947] ? lock_downgrade+0x740/0x740 [ 428.868135] _do_fork+0x19e/0xce0 [ 428.871640] ? fork_idle+0x280/0x280 [ 428.875458] ? fput+0xd4/0x150 [ 428.878648] ? SyS_write+0x15e/0x230 [ 428.882366] SyS_clone+0x37/0x50 [ 428.885780] ? sys_vfork+0x30/0x30 [ 428.889323] do_syscall_64+0x1e8/0x640 [ 428.893267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.898479] entry_SYSCALL_64_after_hwframe+0x42/0xb7 21:31:10 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000100)={0x62, @empty, 0x4e23, 0x0, 'fo\x00', 0x20, 0x5, 0x60}, 0x2c) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:10 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 428.904003] RIP: 0033:0x45a919 [ 428.907290] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 428.915197] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 428.922673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 428.929951] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.937279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 428.944593] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:11 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x4c, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "8b174889d2d05aa64399945c433fd3fd"}, 0x11, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:11 executing program 5 (fault-call:8 fault-nth:8): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:11 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) close(r5) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 429.441641] FAULT_INJECTION: forcing a failure. [ 429.441641] name failslab, interval 1, probability 0, space 0, times 0 [ 429.468483] CPU: 0 PID: 16580 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 429.476625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.486019] Call Trace: [ 429.488696] dump_stack+0x142/0x197 [ 429.492372] should_fail.cold+0x10f/0x159 [ 429.496542] should_failslab+0xdb/0x130 [ 429.500572] kmem_cache_alloc_node_trace+0x280/0x770 [ 429.505773] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 429.511260] __kmalloc_node+0x3d/0x80 [ 429.515156] kvmalloc_node+0x4e/0xe0 [ 429.518876] alloc_fdtable+0xcf/0x280 [ 429.522853] dup_fd+0x693/0xa40 [ 429.526324] copy_process.part.0+0x1b5a/0x6a70 [ 429.531023] ? save_trace+0x290/0x290 [ 429.534971] ? proc_fail_nth_write+0x7d/0x180 [ 429.539472] ? proc_cwd_link+0x1b0/0x1b0 [ 429.543600] ? __cleanup_sighand+0x50/0x50 [ 429.548017] ? lock_downgrade+0x740/0x740 [ 429.552240] _do_fork+0x19e/0xce0 [ 429.555713] ? fork_idle+0x280/0x280 [ 429.559438] ? fput+0xd4/0x150 [ 429.562635] ? SyS_write+0x15e/0x230 [ 429.566431] SyS_clone+0x37/0x50 [ 429.569804] ? sys_vfork+0x30/0x30 [ 429.573458] do_syscall_64+0x1e8/0x640 [ 429.577435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.582677] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.587932] RIP: 0033:0x45a919 21:31:11 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88c1511f6d5e4972}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00 ', @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf250200000008000600ed00000014000100000000000000000000000000000114000100d2ffc555b6aecc512ca8101d612621cc14000100ff02000000000000000000000000000000010000140000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0xa00000, 0x3, 0x1, r3, 0x0, &(0x7f00000001c0)={0x9b0909, 0x200000, [], @p_u16=&(0x7f0000000180)=0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @loopback, 0x0}, &(0x7f0000000400)=0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1214201}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="240427bd7000fcdbdf65010000000800040005000000080002000004000008000300c40a0000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@getchain={0x5c, 0x66, 0x4f536c8c2bafaf58, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {0x10, 0xffff}, {0x6}}, [{0x8, 0xb, 0x55d}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x7fff}, {0x8}, {0x8, 0xb, 0x727}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4080) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r7, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 429.591146] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 429.599088] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 429.606370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 429.614031] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.621393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 429.628931] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:11 executing program 5 (fault-call:8 fault-nth:9): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 429.759444] FAULT_INJECTION: forcing a failure. [ 429.759444] name failslab, interval 1, probability 0, space 0, times 0 [ 429.776210] CPU: 1 PID: 16592 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 429.784343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.793721] Call Trace: [ 429.796492] dump_stack+0x142/0x197 [ 429.800136] should_fail.cold+0x10f/0x159 [ 429.804293] should_failslab+0xdb/0x130 [ 429.808324] kmem_cache_alloc+0x2d7/0x780 [ 429.812486] ? dup_fd+0x533/0xa40 [ 429.815940] copy_fs_struct+0x43/0x2d0 [ 429.819853] copy_process.part.0+0x3974/0x6a70 [ 429.824491] ? save_trace+0x290/0x290 [ 429.828288] ? proc_fail_nth_write+0x7d/0x180 [ 429.832822] ? proc_cwd_link+0x1b0/0x1b0 [ 429.836887] ? __cleanup_sighand+0x50/0x50 [ 429.841137] ? lock_downgrade+0x740/0x740 [ 429.845332] _do_fork+0x19e/0xce0 [ 429.848789] ? fork_idle+0x280/0x280 [ 429.852504] ? fput+0xd4/0x150 [ 429.855693] ? SyS_write+0x15e/0x230 [ 429.859406] SyS_clone+0x37/0x50 [ 429.862769] ? sys_vfork+0x30/0x30 [ 429.866310] do_syscall_64+0x1e8/0x640 [ 429.870200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.875044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 429.880274] RIP: 0033:0x45a919 [ 429.883497] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 429.891271] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 429.898541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:11 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 429.905827] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.913091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 429.920410] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:11 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'bcsh0\x00', 0x2}, 0x18) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r5 = eventfd(0x7fffffff) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f00000000c0)={r6, 0x3}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0xd8, 0x0, 0xd8, 0xd8, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00\x00\x00\x00\x00 \x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) 21:31:11 executing program 5 (fault-call:8 fault-nth:10): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 430.067902] FAULT_INJECTION: forcing a failure. [ 430.067902] name failslab, interval 1, probability 0, space 0, times 0 [ 430.080736] CPU: 0 PID: 16607 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 430.088685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.098152] Call Trace: [ 430.098187] dump_stack+0x142/0x197 [ 430.098221] should_fail.cold+0x10f/0x159 [ 430.098247] should_failslab+0xdb/0x130 [ 430.098263] kmem_cache_alloc+0x2d7/0x780 [ 430.108694] ? do_raw_spin_unlock+0x16b/0x260 [ 430.108720] ? _raw_spin_unlock+0x2d/0x50 [ 430.108745] copy_process.part.0+0x39d7/0x6a70 [ 430.108765] ? debug_smp_processor_id+0x1c/0x20 [ 430.108778] ? perf_trace_lock+0x109/0x500 [ 430.138999] ? check_preemption_disabled+0x3c/0x250 [ 430.144014] ? save_trace+0x290/0x290 [ 430.147810] ? SOFTIRQ_verbose+0x10/0x10 [ 430.151863] ? debug_smp_processor_id+0x1c/0x20 [ 430.156540] ? __cleanup_sighand+0x50/0x50 [ 430.160777] ? lock_downgrade+0x740/0x740 [ 430.164926] _do_fork+0x19e/0xce0 [ 430.168380] ? fork_idle+0x280/0x280 [ 430.172106] ? fput+0xd4/0x150 [ 430.175293] ? SyS_write+0x15e/0x230 [ 430.179004] SyS_clone+0x37/0x50 [ 430.182375] ? sys_vfork+0x30/0x30 [ 430.185911] do_syscall_64+0x1e8/0x640 [ 430.189790] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.194736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.199926] RIP: 0033:0x45a919 [ 430.203105] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 430.210898] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 430.218170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 430.225447] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 430.232709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 430.240056] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:12 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:12 executing program 5 (fault-call:8 fault-nth:11): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000200)=0x10) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfa) lseek(r3, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) dup2(r4, r5) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) statfs(&(0x7f0000000000)='./bus\x00', 0x0) [ 430.401121] FAULT_INJECTION: forcing a failure. [ 430.401121] name failslab, interval 1, probability 0, space 0, times 0 [ 430.413135] CPU: 1 PID: 16623 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 430.421158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.430527] Call Trace: [ 430.433116] dump_stack+0x142/0x197 [ 430.436746] should_fail.cold+0x10f/0x159 [ 430.440890] should_failslab+0xdb/0x130 [ 430.444870] kmem_cache_alloc+0x2d7/0x780 [ 430.449004] ? _raw_spin_unlock_irq+0x28/0x90 [ 430.453500] ? trace_hardirqs_on_caller+0x400/0x590 [ 430.458508] copy_process.part.0+0x1cd5/0x6a70 [ 430.463081] ? save_trace+0x290/0x290 [ 430.466884] ? proc_fail_nth_write+0x7d/0x180 [ 430.471378] ? proc_cwd_link+0x1b0/0x1b0 [ 430.476516] ? __cleanup_sighand+0x50/0x50 [ 430.480770] ? lock_downgrade+0x740/0x740 [ 430.484948] _do_fork+0x19e/0xce0 [ 430.488413] ? fork_idle+0x280/0x280 [ 430.492123] ? fput+0xd4/0x150 [ 430.495301] ? SyS_write+0x15e/0x230 [ 430.499017] SyS_clone+0x37/0x50 [ 430.502367] ? sys_vfork+0x30/0x30 [ 430.505921] do_syscall_64+0x1e8/0x640 [ 430.512488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.517335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.522530] RIP: 0033:0x45a919 [ 430.525717] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 430.533484] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 430.540831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:12 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x102, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x1, "800499d3340f580ac068e9da96259133c78405c3a1e83698b544b99eac6458c2", 0x2, 0x2a4, 0x0, 0x100, 0x4000400, 0x2}) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 430.548117] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 430.555389] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 430.562748] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:12 executing program 5 (fault-call:8 fault-nth:12): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 430.683972] FAULT_INJECTION: forcing a failure. [ 430.683972] name failslab, interval 1, probability 0, space 0, times 0 [ 430.702095] CPU: 1 PID: 16640 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 430.710035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.719445] Call Trace: [ 430.722061] dump_stack+0x142/0x197 [ 430.725717] should_fail.cold+0x10f/0x159 [ 430.729869] should_failslab+0xdb/0x130 [ 430.733905] kmem_cache_alloc+0x2d7/0x780 [ 430.738066] ? _raw_spin_unlock_irq+0x28/0x90 [ 430.742562] ? trace_hardirqs_on_caller+0x400/0x590 [ 430.747580] copy_process.part.0+0x1cd5/0x6a70 [ 430.752166] ? debug_smp_processor_id+0x1c/0x20 [ 430.756849] ? perf_trace_lock+0x109/0x500 [ 430.761072] ? check_preemption_disabled+0x3c/0x250 [ 430.766081] ? save_trace+0x290/0x290 [ 430.769891] ? SOFTIRQ_verbose+0x10/0x10 [ 430.773957] ? debug_smp_processor_id+0x1c/0x20 [ 430.778628] ? __cleanup_sighand+0x50/0x50 [ 430.782857] ? lock_downgrade+0x740/0x740 [ 430.787009] _do_fork+0x19e/0xce0 [ 430.790453] ? fork_idle+0x280/0x280 [ 430.794360] ? fput+0xd4/0x150 [ 430.797588] ? SyS_write+0x15e/0x230 [ 430.801296] SyS_clone+0x37/0x50 [ 430.804661] ? sys_vfork+0x30/0x30 [ 430.808294] do_syscall_64+0x1e8/0x640 [ 430.812221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.817087] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 430.822334] RIP: 0033:0x45a919 [ 430.825559] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 21:31:12 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:12 executing program 5 (fault-call:8 fault-nth:13): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 430.833315] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 430.840596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 430.847856] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 430.855227] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 430.862513] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 430.913694] FAULT_INJECTION: forcing a failure. [ 430.913694] name failslab, interval 1, probability 0, space 0, times 0 [ 430.929688] CPU: 1 PID: 16647 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 430.937619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.946987] Call Trace: [ 430.949606] dump_stack+0x142/0x197 [ 430.953274] should_fail.cold+0x10f/0x159 [ 430.957462] should_failslab+0xdb/0x130 [ 430.961477] kmem_cache_alloc_trace+0x2e9/0x790 [ 430.966195] ? retire_userns_sysctls+0x90/0x90 [ 430.970800] alloc_mnt_ns+0xde/0x450 [ 430.970814] copy_mnt_ns+0x95/0x8c0 [ 430.970823] ? kmem_cache_alloc+0x611/0x780 [ 430.970838] ? selinux_capable+0x36/0x40 [ 430.970855] create_new_namespaces+0xc9/0x720 [ 430.970866] ? ns_capable_common+0x12c/0x160 [ 430.970879] copy_namespaces+0x284/0x310 [ 430.970893] copy_process.part.0+0x2603/0x6a70 [ 430.978226] ? debug_smp_processor_id+0x1c/0x20 [ 430.978239] ? perf_trace_lock+0x109/0x500 [ 430.978249] ? check_preemption_disabled+0x3c/0x250 [ 430.978264] ? debug_smp_processor_id+0x1c/0x20 [ 430.978289] ? __cleanup_sighand+0x50/0x50 [ 430.978301] ? lock_downgrade+0x740/0x740 [ 430.978318] _do_fork+0x19e/0xce0 [ 431.034753] ? fork_idle+0x280/0x280 [ 431.038480] ? fput+0xd4/0x150 [ 431.041702] ? SyS_write+0x15e/0x230 [ 431.045427] SyS_clone+0x37/0x50 [ 431.048796] ? sys_vfork+0x30/0x30 [ 431.052349] do_syscall_64+0x1e8/0x640 [ 431.056243] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:31:12 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setlease(r4, 0x400, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x182}, 0x2, {0x2, 0x4e24, @broadcast}, 'gre0\x00'}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'rose0\x00'}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x413958d5) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000140)={0x3, 'syz0\x00'}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 431.061238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 431.066474] RIP: 0033:0x45a919 [ 431.069669] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 431.077414] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 431.084713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 431.092018] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.099305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 431.106580] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:12 executing program 5 (fault-call:8 fault-nth:14): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:13 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 431.207596] FAULT_INJECTION: forcing a failure. [ 431.207596] name failslab, interval 1, probability 0, space 0, times 0 [ 431.252040] CPU: 1 PID: 16660 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 431.259989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.269359] Call Trace: [ 431.271966] dump_stack+0x142/0x197 [ 431.275611] should_fail.cold+0x10f/0x159 [ 431.279776] should_failslab+0xdb/0x130 [ 431.283755] kmem_cache_alloc+0x2d7/0x780 [ 431.287911] ? debug_smp_processor_id+0x1c/0x20 [ 431.292585] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 431.297522] alloc_vfsmnt+0x28/0x7d0 [ 431.301241] clone_mnt+0x70/0xee0 [ 431.304703] copy_tree+0xd0/0x8a0 [ 431.308168] copy_mnt_ns+0x11c/0x8c0 [ 431.311880] ? kmem_cache_alloc+0x611/0x780 [ 431.316206] ? selinux_capable+0x36/0x40 [ 431.320272] create_new_namespaces+0xc9/0x720 [ 431.324768] ? ns_capable_common+0x12c/0x160 [ 431.329200] copy_namespaces+0x284/0x310 [ 431.333289] copy_process.part.0+0x2603/0x6a70 [ 431.337900] ? proc_fail_nth_write+0x7d/0x180 [ 431.342409] ? proc_cwd_link+0x1b0/0x1b0 [ 431.346518] ? __cleanup_sighand+0x50/0x50 [ 431.350797] ? lock_downgrade+0x740/0x740 [ 431.355023] _do_fork+0x19e/0xce0 [ 431.358509] ? fork_idle+0x280/0x280 [ 431.362286] ? fput+0xd4/0x150 [ 431.365493] ? SyS_write+0x15e/0x230 [ 431.369241] SyS_clone+0x37/0x50 [ 431.372801] ? sys_vfork+0x30/0x30 [ 431.376361] do_syscall_64+0x1e8/0x640 [ 431.380255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.385125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 431.390331] RIP: 0033:0x45a919 [ 431.393524] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 21:31:13 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x20004063, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x8) [ 431.401421] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 431.408710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 431.416006] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.423286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 431.430581] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:13 executing program 5 (fault-call:8 fault-nth:15): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:13 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0xaaaaaaaaaaaa950, &(0x7f0000000340)=[{&(0x7f00000001c0)="4fa1747440a678c4f1458797a5d8fd61be32b69d337b481da9cd67623c638fc49d815abc2ba6874942a4720db776e164a97453a3e69c7010044b3d", 0x0, 0xf106}, {&(0x7f0000000200)="d6ce98b2dad14ed9451c9016e6fa8d265180a3d0916ce95c257155e234908bd5b3a09410caae51d1ec07dc6e50776788c3d6bb77324e1be37340ee45535c60a4a3dce1068667ae8b545d29bce1e4f0e5fc804736260eadc42205b6aeb7ec4a5318268d19c269f44c1e7119e92df270d16f0473d3862a2738056436171bdf", 0xffffffffffffff9f, 0x32ab}, {&(0x7f0000000300)="1e6e719bfb02b736a3f12593e92dd1f8a25e2deaf7742da23863feab73d1ab2f836bb5bb9a9ab33cdf0dddf75d0d5d61c175fea960f41e04", 0x0, 0x2}], 0x18, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) [ 431.584125] FAULT_INJECTION: forcing a failure. [ 431.584125] name failslab, interval 1, probability 0, space 0, times 0 [ 431.597445] CPU: 1 PID: 16674 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 431.605373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.614916] Call Trace: [ 431.617521] dump_stack+0x142/0x197 [ 431.621166] should_fail.cold+0x10f/0x159 [ 431.625409] should_failslab+0xdb/0x130 [ 431.629558] kmem_cache_alloc+0x2d7/0x780 [ 431.633731] ? lock_downgrade+0x740/0x740 [ 431.638229] alloc_vfsmnt+0x28/0x7d0 [ 431.641944] clone_mnt+0x70/0xee0 [ 431.645393] ? is_subdir+0x222/0x389 [ 431.649112] copy_tree+0x33b/0x8a0 [ 431.652669] copy_mnt_ns+0x11c/0x8c0 [ 431.656405] ? kmem_cache_alloc+0x611/0x780 [ 431.660751] ? selinux_capable+0x36/0x40 [ 431.664852] create_new_namespaces+0xc9/0x720 [ 431.669375] ? ns_capable_common+0x12c/0x160 [ 431.673805] copy_namespaces+0x284/0x310 [ 431.677876] copy_process.part.0+0x2603/0x6a70 [ 431.682473] ? proc_fail_nth_write+0x7d/0x180 [ 431.687054] ? proc_cwd_link+0x1b0/0x1b0 [ 431.691157] ? __cleanup_sighand+0x50/0x50 [ 431.695401] ? lock_downgrade+0x740/0x740 [ 431.699575] _do_fork+0x19e/0xce0 [ 431.703047] ? fork_idle+0x280/0x280 [ 431.706782] ? fput+0xd4/0x150 [ 431.710008] ? SyS_write+0x15e/0x230 [ 431.713731] SyS_clone+0x37/0x50 [ 431.717113] ? sys_vfork+0x30/0x30 [ 431.720662] do_syscall_64+0x1e8/0x640 [ 431.724545] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.729393] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 431.734606] RIP: 0033:0x45a919 [ 431.737808] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 431.745547] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 431.752913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 431.760186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 431.767490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 431.774895] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:13 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x6, 0xb) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:14 executing program 5 (fault-call:8 fault-nth:16): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:14 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x9c0000, 0x7, 0x1, r0, 0x0, &(0x7f0000000040)={0x9d0901, 0x6, [], @string}}) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:14 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20800, 0x0, 0x5a64, 0x0, 0xffeffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:14 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 432.586477] FAULT_INJECTION: forcing a failure. [ 432.586477] name failslab, interval 1, probability 0, space 0, times 0 [ 432.617459] CPU: 0 PID: 16701 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 432.625410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.634789] Call Trace: [ 432.637408] dump_stack+0x142/0x197 [ 432.641038] should_fail.cold+0x10f/0x159 [ 432.645185] should_failslab+0xdb/0x130 [ 432.649152] __kmalloc_track_caller+0x2ec/0x790 [ 432.653821] ? kstrdup_const+0x48/0x60 [ 432.657756] kstrdup+0x3a/0x70 [ 432.660945] kstrdup_const+0x48/0x60 [ 432.664652] alloc_vfsmnt+0xe5/0x7d0 [ 432.668359] clone_mnt+0x70/0xee0 [ 432.671816] ? is_subdir+0x222/0x389 [ 432.675537] copy_tree+0x33b/0x8a0 [ 432.679089] copy_mnt_ns+0x11c/0x8c0 [ 432.682794] ? kmem_cache_alloc+0x611/0x780 [ 432.687117] ? selinux_capable+0x36/0x40 [ 432.691203] create_new_namespaces+0xc9/0x720 [ 432.695691] ? ns_capable_common+0x12c/0x160 [ 432.700093] copy_namespaces+0x284/0x310 [ 432.704166] copy_process.part.0+0x2603/0x6a70 [ 432.708752] ? proc_fail_nth_write+0x7d/0x180 [ 432.713236] ? proc_cwd_link+0x1b0/0x1b0 [ 432.717302] ? __cleanup_sighand+0x50/0x50 [ 432.721666] ? lock_downgrade+0x740/0x740 [ 432.725840] _do_fork+0x19e/0xce0 [ 432.729305] ? fork_idle+0x280/0x280 [ 432.733023] ? fput+0xd4/0x150 [ 432.736217] ? SyS_write+0x15e/0x230 [ 432.739936] SyS_clone+0x37/0x50 [ 432.743294] ? sys_vfork+0x30/0x30 [ 432.746828] do_syscall_64+0x1e8/0x640 [ 432.750725] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.755568] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 432.760751] RIP: 0033:0x45a919 [ 432.763935] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 432.771652] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 432.778917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 432.786177] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 432.793454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 432.800729] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/26) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:14 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x13480000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:14 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffec9}, 0x3b) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000200)={0xaa, 0x2}) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="ceb7177abe8de7", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000003c0)={r8}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x4, 0x1, 0x5, r8}, 0x10) fchdir(r5) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:14 executing program 5 (fault-call:8 fault-nth:17): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 433.222287] FAULT_INJECTION: forcing a failure. [ 433.222287] name failslab, interval 1, probability 0, space 0, times 0 [ 433.257715] CPU: 0 PID: 16733 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 433.265665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.275069] Call Trace: [ 433.277673] dump_stack+0x142/0x197 [ 433.281330] should_fail.cold+0x10f/0x159 [ 433.285482] should_failslab+0xdb/0x130 [ 433.289450] kmem_cache_alloc+0x2d7/0x780 [ 433.293614] ? perf_trace_lock_acquire+0x34a/0x4f0 [ 433.298542] alloc_vfsmnt+0x28/0x7d0 [ 433.302266] clone_mnt+0x70/0xee0 [ 433.305734] copy_tree+0xd0/0x8a0 [ 433.309192] copy_mnt_ns+0x11c/0x8c0 [ 433.312897] ? kmem_cache_alloc+0x611/0x780 [ 433.317211] ? selinux_capable+0x36/0x40 [ 433.321270] create_new_namespaces+0xc9/0x720 [ 433.325755] ? ns_capable_common+0x12c/0x160 [ 433.330159] copy_namespaces+0x284/0x310 [ 433.334226] copy_process.part.0+0x2603/0x6a70 [ 433.338815] ? debug_smp_processor_id+0x1c/0x20 [ 433.343476] ? perf_trace_lock+0x109/0x500 [ 433.347699] ? check_preemption_disabled+0x3c/0x250 [ 433.352709] ? debug_smp_processor_id+0x1c/0x20 [ 433.357387] ? __cleanup_sighand+0x50/0x50 [ 433.361612] ? lock_downgrade+0x740/0x740 [ 433.365761] _do_fork+0x19e/0xce0 [ 433.369227] ? fork_idle+0x280/0x280 [ 433.373029] ? fput+0xd4/0x150 [ 433.376235] ? SyS_write+0x15e/0x230 [ 433.379960] SyS_clone+0x37/0x50 [ 433.383324] ? sys_vfork+0x30/0x30 [ 433.386861] do_syscall_64+0x1e8/0x640 [ 433.390740] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.395588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 433.400768] RIP: 0033:0x45a919 [ 433.403962] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 433.411664] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 433.418942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 433.426203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.433466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 433.440729] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:15 executing program 5 (fault-call:8 fault-nth:18): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 433.607823] FAULT_INJECTION: forcing a failure. [ 433.607823] name failslab, interval 1, probability 0, space 0, times 0 [ 433.627756] CPU: 0 PID: 16743 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 433.635696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.645080] Call Trace: [ 433.647704] dump_stack+0x142/0x197 [ 433.651379] should_fail.cold+0x10f/0x159 21:31:15 executing program 1: pipe(&(0x7f0000003500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sendmsg$kcm(r4, &(0x7f0000006b00)={&(0x7f0000003480)=@ipx={0x4, 0x100, 0x8, "98eff826f10b", 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000003540)="3b2794e908eee6668b68436bd33e8dd9097fde2a6a47fb7bb26dc6d2ca17c4d3478142ac9a81f416d14bfa2ccf545e7763d3d0c79f30135a178f2be1f41425f847c4826a331e26e855b166d6178d78e620d4f88902c9b471312a3b009be7b07f3d3db11c12342a69d9ee69131f6185fd14a8db80a424e9f352e6f9b7cf88bcc575ea327d8204df3ec37543a03e45e1bac4da68fcecfcb10da73f383b31a5eb147dad56d3d2d439f4004045c4", 0xac}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="984bed3e2bd0db5240f21f7c9bc1589b85523b8cdd59f8f80fdb40b96d231195a578d41cb1e9d3242586f2016ac4bff81c5e3607e9573fdd87b4d683cb483ff7029f5a2ae7e8c2738cc3fb2fc7bf35323962e81118bcc451d521375c12ce68ae3728ecd7be9467cc28f213c732bd25075286df647abcc20dcd8d8029d883", 0x7e}, {&(0x7f0000004680)="f7dd9bdf8f88bf7877a7ad23bc09024400ff8d530c934f00a52a1d929a01b0adb6aeaa9decb4bee886ff6110946eee75c40bb6ab59bf24ab981263699ba3bf6266589d5ecae8986c2be6f3efcc825fd1845c538c2fc9e89cebf83c7b39fa74cc763a0bbdfe53d61f67a3d4bc1f05d0a1ebd5d2ead552ea46fbd15c2b46271fadf79cef110721a95fbf5ddd314c284f405a5e0fc5726a38d3e5e5de58d9401da5ccaeee269fea5ca0d556304246ccc9d531ea35c8599dd9ec30359e933bccb66658208be6b70ce4b6cf673e0345ad1c58b7235d0fe665785aad5f6e8ca2269a7527012b2a9ec403e27394d4b29fe0", 0xee}], 0x4, &(0x7f0000004780)=[{0x1010, 0x111, 0x100, "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"}, {0xa0, 0x1b, 0x81, "277e2c2b7189678847d61a775be8dc7f27f201bc0fcc7392080a2b63ac52aaf47b44a3aceb6096c1bc4dba925ed7b5495fc0817bab89b273617244f0f7163033ab2b1f74f5487d376bdbac4c9c0f6f320b151109f0d71ee05d1898d93181d0b49a6ea57f5a6be965e370338a3014cde6113a33af3c6646d3e41846f0d468b5365af53f3d99a7e780c0424d3d"}, {0xe8, 0x84, 0x4, "638defed1fe6a76260345e4c6f10902e4467ee36661a2ec5adb06ed36d7e83341de1c2cdbe9b515a7076f232835492ebb65e3588b5a4f53b8b2cdb53be19468f6a7359223e4e9a0899a4725db350d680575a4dc972bca01a172ce8c98f453d13772154527aa0a734ae63a012fd2349817cbaa28527087e562aed8a73c4109ae88dd67be931737e9d623f288532cd82da939e20d58557f980a2a6dce8aa3f8c73e40b9d90c38626671a7ab1fb2e4bfb673373349dc39f8ce3e31cd6bff537855101b60d8e5afb69b916076613f88e970ddb"}, {0x48, 0xf9, 0x101, "631b4b5b0f17cfe302644623ca78e5181097252d17c49735837cf44d560b4e78437e425db12c05fee75180391a19b9605759cac9a0"}, {0x1010, 0x117, 0xffffff80, "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"}, {0x100, 0x13, 0x2, "a706915a93379859634a345bcea88f45386cc6a87b847d860ab0d01a1c40370259602554282934e464a81510714b386a512fa9a7d24301be8566917870947cab98fa619b145b85853bf16f301d4b4cf0be5b3c2f99746e4fe43b582d1a217cf3d739df0ce3bb7aa59b17c8e3e89d792e19478720ce9068b282ebaf370ebfb12036bd14530df36f39b3dcd8e0b4b578803881e375c9d260743728d5ff4ecd0eeeb3a343eefa091de5f7bb10483a8bb6f4075aa17a9e15303ef8d9f20e40186bd8c33682fc7f9b71d5f196f4487d56ab253301212058e9d706a3b8282d0a2cbecec07f809ee78d550626d4"}, {0x80, 0x109, 0x9, "d92d44b20b49ce7d99ffedc481898d78bf87f858e15d913751ee25adca2d74a539b28903bf0a80eb312bc6c97df28d8878855536ef0fb25fce024873eb68dcc472f10fc64a02728f0246542b82dae7a550588356a1d89f0fb576ab3381e1de87fb84dc19fcdbeda08f4b78"}], 0x2370}, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x40ca00, 0x0) sendmmsg(r2, &(0x7f0000001080)=[{{0x0, 0xffffffffffffffc1, &(0x7f0000000200)=[{&(0x7f0000000540)="35d5642e1517a901d0075203026bf7348cd6594059458f7a1948f2adb911a97df6e7ac5dd4874e1d4a91234e04ec8f5c5d6ae099839d4cb7741cc4551637ce72781d7f20b22444878522294adadccb72ebbf59a4b5a2f5d2417235f642e153595ba89e60f9534d6fa1b1b16be6f635797cfb13a9a488abfee80ab52e09e94a435a44451bf264dc55b4d5c5ef07efe24ef19bd4", 0x93}], 0x1, &(0x7f0000000600)=[{0x50, 0x116, 0x5, "7c3c75435267e4478c08d59283169c685853992adceffb632eec224a035d96146308c6574b6182ef56b1d3d8cb461f7b221054af640046e0e8d6be7978062d9c"}, {0x18, 0x109, 0x10001, "1e0a"}, {0xe8, 0x11, 0x97, "9bbfb31db60da9e328240a5ba0274923330914bb28e087d4431bebfc13c280f1e66d63ff60e20f81c3738ca6ef4965a32873688836d8f03aade6a2a34a31dc0df4cd8f599fb232b5f40c512654212d9d54ed91ffb7140a8ca46722c94d962940e20115981496404b8586ed083897829e81fa9aafdae948fd3e65c64c693164960a3b3d256c48c95c7be00c0404d11310c705767450700b96548c3dbca50fbd7144ad6c857d9fc79e9ca4649bfcb94eec6ffa5808ea86b56fbc1b936dbdd3621467bf40c5a26dc0a5c5a5f2eda07b1516cbb2bd"}, {0x78, 0x112, 0x80200000, "16dd2812d4d22827d9beb9db23e2f4007f0dd9dc585512a6cdcf651349b9a648bd56ecb495e45d2349d7d37a1b8286ee596f4fca1bd566569222ddd792178c694714fc5370e0a4f58062ef9ead9efb2fdd815ec11e13c39c81ad36a26dd0c92b0669b466"}, {0x10, 0x115, 0x9}, {0xb0, 0x109, 0x1, "e275f74b2f5822687546de92ede96fbaba7ecccb1e9d7b43e46c0ccda16c9a8bdecc7c8352df744c3b0c442cd1d1f55b12ec1469b4c388e50f28cc82cab2a9f6fe7e59bc79edd766dd3c45e7c98d8bb607b082442a32e7bb1e8a37f8695f21425147596e3e2b84e3b1dbac61452f53d0b66ee0dd5f8413804db6763f1f68d34e6a2e9deb8885cb44d59c08503c17b3e3c27b46580c177a406c06"}], 0x288}}, {{&(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @empty}, 0x0, 0x1, 0x2, 0x2}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000940)="cc2d43eb64348d3478768135535980a9d087835c75a8e3aefbe67bb6db5a198319507839cc49118010a253360563f013a67f3a79b1816afe12f260e104a43d161e95538b2c7d306fbf19c12d8aa6b6928e4b0f84e8a7e4ccefdc22300d1885bbc6e8f508e8b5c3421d1d0b7fdbfdb5374645c2b8557568c77fb57fa7b64724d27ae91741c5f8dcf359f25532f2d9d0fd196d6a14e8d0b79ece39b4e4a72f5a80f0f1ddad", 0xa4}, {&(0x7f0000000a00)="b695aa426db99602d81241f68f4fbd7322be087be3b45a6e326fff994dd0ba4aed785cd26c3f217f2155157e5b28acf1845f3ea10b4bc00a7c8e0077158f27e6873dcfc850e6e866f3880fb4b94e7991776014b1ae237aedd94d4cbfd3578d0099", 0x61}, {&(0x7f0000000a80)="f3b328a44be6827ea801415da0084b9ea90e12135ccdb27b83db8281bf0751f82283abc02cccd2f6c0f72236c515f400767fdc376b2f290528d221d1351ae858b773268215a83621bdd3407a84dfa0bdb7aeed95553f2c473e626a05a6eb03a0beb2ba4f272896b2200f51692a5ac7203fc22bda7b9d233790059d7ab044389419892c3f7002d30c7fb60cd66fe0436110ed71a59b1cb7e9aef955dd84403bd340c373abddd2d0652ae88bc28d87679f9e80a5ab6c8cd6c9db9e788af5ec71b271e132b42bab5cd7002a0cff32b606e78973f0a4c34c87fd397ab2e3eaedbf5fe45d931979baba845ac76bd347cc6d22990655c943", 0xf5}, {&(0x7f0000000240)="340704efd196c8e800185118d862d31704a9f49551d5f085d9b62f6efc58fefdbe1408", 0x23}, {&(0x7f0000000b80)="78f1f9178ee7c5e673484a6178399b189b1c4d1bb95f6dcd1e612f8ccb158ad2fe728876b9af6e1537ced51b892635633d85175967ca4e42eb2186f16175f2fa61d511112e9665ddc289bce64518008c67b97b19cb3d6977a1d07e6a20d27accaefd25a3b33f81fbd89ce9126f9c8ca3a51a99bdc7425d06565e38fce77b9688a270ecb6a30334e72b3bd255dd22cc61636be159482e72c6c8d84edfaccddfab92e67b9b", 0xa4}, {&(0x7f0000000c40)="b14f8e1f51073f09ab6b1869b906052f15c29d9cf8070059240c38da6243eebd31b69ce50a3151b223a2a30613b7130a6a976703d8282169f20fdadc30092ddb85499c73f27a26aed911ab9d5a878387d7fc20e8bff3e10dada85cc4fa3551c412d65a256b068c611246843dba210a75c55e89d77147ff776ae0ec023681ace77d81d7b0a91e42759f83ac95026393fcbbd50b26631b23ff065831393ffeb3b1d1c19423c74f017e3d980ae323248b63185946653f6805205185893c26d9f80a3c6e62c7a1a0e5e86fcd247d02da1f6eab00006f0ae4a4b674fb5c8ebf3fdceb9327133279766b5b3646591ed94cf94361", 0xf1}, {&(0x7f0000000d40)="3c5b840dcf01221e9ba96f570878e8e89f49d628a7cbd2a8a776b17a15e9e093bdcbb884423f85a295f8770702214254a8cf77e09c851c254c08df0a741b65953be8b691edf6e3667abf94e5dbd0c1508e9ab6a9d092ad5a81db75bab24f253beb7c70131f8c838dcf0fb22fe3aefc4bf4bf2598139531d0b59ef99d4b0f10d4d84ef07920712ae1d0d39ac53049b85042458fcce48d7af358ffc4fff4", 0x9d}, {&(0x7f0000000e00)="b499efd93e8784c5e61a3cf6d0d3d9b41af96cf9ef8b31e768aefa0bb0ce7fa82bc923a5f62f9222720ae971d761a3a7de79031dbb6ed2a4f68647c5289e9eef93b72ab7e6e2559b37b14834a67ad61bf9301907f4f913b6f58a8e1fd7b5ae0593ee6865bc0b576a4d70b2d605ebeb51e3555c1074897c3bead912e7f8d8f7530872c3a3d6a5f0755ce6f8ac52b1d2f20359575b295cd94369d8567d5d61593e3c2365ff830c72d3c94f3dc736afedbb725db518f459d73cafa8315badb41ea1fc5b79613cb60d49905dcc2609416e76422b851b7f38f53c94d43ec7f281", 0xde}], 0x8, &(0x7f0000000f80)=[{0xd8, 0x2, 0x2, "783d98e4de055d984d907964ae81dcbf69aafc85db4a499114a859db47c9eae924df4c6aa113f2f0bb99a8fb0619a14c502c1dba720de20af4eaaeb72b35ec7a6d4c447d80aed0603815eeddf06dfea7700925a26ec446004e470dd52dca3b937757ffcbad0309b2a03a361c302060263252b4a83c5fe06bd87654956ca6fec7ef7b8ed8d4cb304b502ab9e875ae95fec5a315e2e44e565aa098f3ee5a3270fb23f2507b55a3ad5320dcd6a710cc5786ea988346c3eaa57093d2b4a77e9b46dc2b4c1fc3"}], 0xd8}}], 0x2, 0x4000000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8001, 0x0) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) preadv(r8, &(0x7f0000003400)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/24, 0x18}, {&(0x7f0000002140)=""/5, 0x5}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/225, 0xe1}, {&(0x7f0000003280)=""/116, 0x74}, {&(0x7f0000003300)=""/194, 0xc2}], 0x7, 0xfff) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipmr_delroute={0x44, 0x19, 0x20, 0x70bd2a, 0x25dfdbfe, {0x80, 0x20, 0x10, 0x0, 0x0, 0x0, 0xbb226f2085ca0ca7, 0x4}, [@RTA_FLOW={0x8, 0xb, 0xb2}, @RTA_SRC={0x8, 0x2, @local}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_OIF={0x8, 0x4, r9}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000080)=""/245) 21:31:15 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x4, 0x20}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r1, 0x1}, &(0x7f0000000380)=0x8) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/routF\x00#q\x01DO\xb6\xa6*6:\x12Q\"\x13\x91') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x5ff4a0cd76f1c114, 0x919d09116db76a4}}, 0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) getsockopt$inet_buf(r9, 0x0, 0x2a, &(0x7f00000003c0)=""/211, &(0x7f00000004c0)=0xd3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r7}}, 0x18) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x501000, 0x0) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000000180)) r11 = syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0xe648196b6c86f5fe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0x67, "d77dfb392e43edbaed1fe7a3f5682008832fec9b233c9611a8bbb2d6775da14f701b3b258b40713a2efc4c9a1248a4e5ae92beb71e9a835799e61a12ad966246564037be361147ca150620950fa1ed6659bc50ae1ccb24b0b0e5c03e48d929594bc757d2f17d1d"}, &(0x7f00000005c0)=0x6f) preadv(r4, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 433.655572] should_failslab+0xdb/0x130 [ 433.659579] __kmalloc_track_caller+0x2ec/0x790 [ 433.664295] ? kstrdup_const+0x48/0x60 [ 433.668217] kstrdup+0x3a/0x70 [ 433.671442] kstrdup_const+0x48/0x60 [ 433.675186] alloc_vfsmnt+0xe5/0x7d0 [ 433.678934] clone_mnt+0x70/0xee0 [ 433.682404] ? lock_downgrade+0x740/0x740 [ 433.686569] ? do_raw_spin_unlock+0x16b/0x260 [ 433.691103] copy_tree+0x33b/0x8a0 [ 433.694684] copy_mnt_ns+0x11c/0x8c0 [ 433.698411] ? kmem_cache_alloc+0x611/0x780 [ 433.702765] ? selinux_capable+0x36/0x40 [ 433.706864] create_new_namespaces+0xc9/0x720 [ 433.711391] ? ns_capable_common+0x12c/0x160 [ 433.715834] copy_namespaces+0x284/0x310 [ 433.719931] copy_process.part.0+0x2603/0x6a70 [ 433.724546] ? debug_smp_processor_id+0x1c/0x20 [ 433.729264] ? perf_trace_lock+0x109/0x500 [ 433.733520] ? check_preemption_disabled+0x3c/0x250 [ 433.738564] ? debug_smp_processor_id+0x1c/0x20 [ 433.743284] ? __cleanup_sighand+0x50/0x50 [ 433.747548] ? lock_downgrade+0x740/0x740 [ 433.751736] _do_fork+0x19e/0xce0 21:31:15 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmsg$can_raw(r3, &(0x7f0000002400)={&(0x7f0000000080)=@pppoe, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f00000012c0)=""/215, 0xd7}], 0x4, &(0x7f0000001400)=""/4096, 0x1000}, 0x100) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) signalfd4(r5, &(0x7f0000000000)={0x3}, 0x8, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 433.755219] ? fork_idle+0x280/0x280 [ 433.758964] ? fput+0xd4/0x150 [ 433.762175] ? SyS_write+0x15e/0x230 [ 433.765945] SyS_clone+0x37/0x50 [ 433.769326] ? sys_vfork+0x30/0x30 [ 433.772886] do_syscall_64+0x1e8/0x640 [ 433.776795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.781673] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 433.786864] RIP: 0033:0x45a919 [ 433.786874] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 433.797787] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 433.805069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 433.805078] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 433.805087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 433.805096] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:15 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:15 executing program 5 (fault-call:8 fault-nth:19): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 433.986155] FAULT_INJECTION: forcing a failure. [ 433.986155] name failslab, interval 1, probability 0, space 0, times 0 21:31:15 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x203, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) statfs(&(0x7f0000000000)='./bus\x00', 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, [@null, @default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) [ 434.036093] CPU: 0 PID: 16762 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 434.044053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.053433] Call Trace: [ 434.056059] dump_stack+0x142/0x197 [ 434.059732] should_fail.cold+0x10f/0x159 [ 434.063921] should_failslab+0xdb/0x130 [ 434.067925] kmem_cache_alloc+0x2d7/0x780 [ 434.072098] ? find_held_lock+0x35/0x130 [ 434.076186] ? copy_tree+0x4a2/0x8a0 [ 434.079930] alloc_vfsmnt+0x28/0x7d0 [ 434.083667] clone_mnt+0x70/0xee0 [ 434.087137] ? lock_downgrade+0x740/0x740 [ 434.091312] ? do_raw_spin_unlock+0x16b/0x260 [ 434.095873] copy_tree+0x33b/0x8a0 [ 434.099447] copy_mnt_ns+0x11c/0x8c0 [ 434.103183] ? kmem_cache_alloc+0x611/0x780 [ 434.107528] ? selinux_capable+0x36/0x40 [ 434.111626] create_new_namespaces+0xc9/0x720 [ 434.116153] ? ns_capable_common+0x12c/0x160 [ 434.120599] copy_namespaces+0x284/0x310 [ 434.124832] copy_process.part.0+0x2603/0x6a70 [ 434.129459] ? proc_fail_nth_write+0x7d/0x180 [ 434.133982] ? proc_cwd_link+0x1b0/0x1b0 [ 434.138090] ? __cleanup_sighand+0x50/0x50 [ 434.142352] ? lock_downgrade+0x740/0x740 [ 434.146534] _do_fork+0x19e/0xce0 [ 434.150029] ? fork_idle+0x280/0x280 [ 434.153771] ? fput+0xd4/0x150 [ 434.156985] ? SyS_write+0x15e/0x230 [ 434.160728] SyS_clone+0x37/0x50 [ 434.164111] ? sys_vfork+0x30/0x30 [ 434.167672] do_syscall_64+0x1e8/0x640 [ 434.171572] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.176449] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 434.181660] RIP: 0033:0x45a919 [ 434.184875] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 434.192602] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 434.199888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 434.207178] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 434.214472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 434.221760] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:16 executing program 5 (fault-call:8 fault-nth:20): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:16 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163}]}, 0x419}, {{&(0x7f00000001c0)=@l2, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/79}, {&(0x7f00000002c0)=""/2}, {&(0x7f00000003c0)=""/157}], 0x0, &(0x7f0000000480)=""/180}, 0x80}, {{&(0x7f0000000540)=@nfc, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/207}], 0x0, &(0x7f00000006c0)=""/50}, 0x6}, {{&(0x7f0000000700)=@isdn, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000800)=""/72}, {&(0x7f0000000880)=""/44}, {&(0x7f00000015c0)=""/4096}, {&(0x7f00000008c0)=""/217, 0x338}, {&(0x7f00000009c0)=""/206}, {&(0x7f0000003180)=""/4096}, {&(0x7f0000000ac0)=""/149}, {&(0x7f0000000b80)=""/231}], 0x0, &(0x7f0000000d40)}}, {{&(0x7f0000000d80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/184}, {&(0x7f0000000ec0)=""/100}], 0x0, &(0x7f0000000f80)=""/160}, 0x1}, {{&(0x7f0000001040)=@pppoe, 0x0, &(0x7f00000014c0)=[{&(0x7f00000010c0)=""/63}, {&(0x7f0000001100)=""/69}, {&(0x7f0000001180)=""/73, 0x60}, {&(0x7f0000001200)=""/139}, {&(0x7f00000012c0)=""/62}, {&(0x7f0000001300)=""/138}, {&(0x7f0000004180)=""/4096}, {&(0x7f00000013c0)=""/205}]}, 0x6}], 0x400003e, 0x2022, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) r1 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/163) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000002740)=""/175) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000d40)={'ah\x00'}, &(0x7f0000002800)=0x1e) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000001540)={0x81, 0x0, [0xe000000, 0x7, 0x0, 0x8]}) 21:31:16 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={r2, r3, 0x2, 0xf3, &(0x7f0000000080)="a0ea93d1fb9222739f6ecffb754d75fe22789390d7db8238b05100efa4f3716dfb499a6b151a7b7a58d12928991a18e754cb773cf339e0926714a1591d524e20111c1efd88ccd2c0bc44fa072f7c51b180a3bab17b4896b7e80a6d951fcc627604ac770f77d21b3fe8646983cf2941c281aa5b6bcf525bf5040b6a9d126f9bb6764a6159f38f96649d47a61ef4fee6fa5718a8dd2263e98c702127c12b3a242522f5727ae2a1d87969267511a1c166bd2e0cf544196acd0e59c2290c8182079ba720b612e9018777b59b55ae73ad3c0ea749da6a9c23545b3e841fa4eda28494258c638fbbc82005f5cebbd3b8288317598f59", 0x1f, 0x6, 0x400, 0x4, 0x4, 0x0, 0x6, 'syz1\x00'}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x4, [], "cc948940a333e19672d5dfaec6e970b8"}) close(r2) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 434.713097] FAULT_INJECTION: forcing a failure. [ 434.713097] name failslab, interval 1, probability 0, space 0, times 0 [ 434.755708] CPU: 0 PID: 16780 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 434.763658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.773042] Call Trace: [ 434.775667] dump_stack+0x142/0x197 [ 434.779341] should_fail.cold+0x10f/0x159 [ 434.783539] should_failslab+0xdb/0x130 [ 434.787547] __kmalloc_track_caller+0x2ec/0x790 [ 434.792251] ? kstrdup_const+0x48/0x60 [ 434.796179] kstrdup+0x3a/0x70 [ 434.799403] kstrdup_const+0x48/0x60 [ 434.803140] alloc_vfsmnt+0xe5/0x7d0 [ 434.806877] clone_mnt+0x70/0xee0 [ 434.810387] ? lock_downgrade+0x740/0x740 [ 434.814555] ? do_raw_spin_unlock+0x16b/0x260 [ 434.819070] copy_tree+0x33b/0x8a0 [ 434.822647] copy_mnt_ns+0x11c/0x8c0 [ 434.826376] ? kmem_cache_alloc+0x611/0x780 [ 434.830737] create_new_namespaces+0xc9/0x720 [ 434.835251] ? ns_capable_common+0x12c/0x160 [ 434.839712] copy_namespaces+0x284/0x310 [ 434.843800] copy_process.part.0+0x2603/0x6a70 [ 434.848413] ? debug_smp_processor_id+0x1c/0x20 [ 434.853101] ? perf_trace_lock+0x109/0x500 [ 434.857355] ? check_preemption_disabled+0x3c/0x250 [ 434.862401] ? debug_smp_processor_id+0x1c/0x20 [ 434.867140] ? __cleanup_sighand+0x50/0x50 [ 434.871396] ? lock_downgrade+0x740/0x740 [ 434.875587] _do_fork+0x19e/0xce0 [ 434.879088] ? fork_idle+0x280/0x280 [ 434.882833] ? fput+0xd4/0x150 [ 434.886047] ? SyS_write+0x15e/0x230 [ 434.889792] SyS_clone+0x37/0x50 [ 434.893170] ? sys_vfork+0x30/0x30 [ 434.896759] do_syscall_64+0x1e8/0x640 [ 434.900663] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.905536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 434.910746] RIP: 0033:0x45a919 [ 434.913952] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 434.921778] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 434.929091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 434.936384] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 434.943671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 434.950961] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:16 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:16 executing program 5 (fault-call:8 fault-nth:21): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 435.109210] FAULT_INJECTION: forcing a failure. [ 435.109210] name failslab, interval 1, probability 0, space 0, times 0 [ 435.122111] CPU: 0 PID: 16803 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 435.130033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.130042] Call Trace: [ 435.130066] dump_stack+0x142/0x197 [ 435.130096] should_fail.cold+0x10f/0x159 [ 435.130125] should_failslab+0xdb/0x130 [ 435.130140] kmem_cache_alloc+0x2d7/0x780 [ 435.130155] ? find_held_lock+0x35/0x130 [ 435.130170] ? copy_tree+0x4a2/0x8a0 [ 435.130189] alloc_vfsmnt+0x28/0x7d0 [ 435.130206] clone_mnt+0x70/0xee0 [ 435.130217] ? lock_downgrade+0x740/0x740 [ 435.130231] ? do_raw_spin_unlock+0x16b/0x260 [ 435.130250] copy_tree+0x33b/0x8a0 [ 435.130290] copy_mnt_ns+0x11c/0x8c0 [ 435.130303] ? kmem_cache_alloc+0x611/0x780 [ 435.130326] ? selinux_capable+0x36/0x40 [ 435.130351] create_new_namespaces+0xc9/0x720 [ 435.130365] ? ns_capable_common+0x12c/0x160 [ 435.130383] copy_namespaces+0x284/0x310 [ 435.130401] copy_process.part.0+0x2603/0x6a70 [ 435.142590] ? proc_fail_nth_write+0x7d/0x180 [ 435.142600] ? proc_cwd_link+0x1b0/0x1b0 [ 435.142632] ? __cleanup_sighand+0x50/0x50 [ 435.142646] ? lock_downgrade+0x740/0x740 [ 435.142670] _do_fork+0x19e/0xce0 [ 435.142689] ? fork_idle+0x280/0x280 [ 435.142710] ? fput+0xd4/0x150 [ 435.142723] ? SyS_write+0x15e/0x230 [ 435.142744] SyS_clone+0x37/0x50 [ 435.142751] ? sys_vfork+0x30/0x30 [ 435.142769] do_syscall_64+0x1e8/0x640 [ 435.142779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.142803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.267141] RIP: 0033:0x45a919 [ 435.270330] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 435.278061] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 435.285329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 435.292593] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 435.299852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 435.307115] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:17 executing program 5 (fault-call:8 fault-nth:22): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 435.411160] FAULT_INJECTION: forcing a failure. [ 435.411160] name failslab, interval 1, probability 0, space 0, times 0 [ 435.422946] CPU: 1 PID: 16814 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 435.430861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.440217] Call Trace: [ 435.442799] dump_stack+0x142/0x197 [ 435.446426] should_fail.cold+0x10f/0x159 [ 435.450576] should_failslab+0xdb/0x130 [ 435.454549] __kmalloc_track_caller+0x2ec/0x790 [ 435.459207] ? kstrdup_const+0x48/0x60 [ 435.463080] kstrdup+0x3a/0x70 [ 435.466257] kstrdup_const+0x48/0x60 [ 435.469956] alloc_vfsmnt+0xe5/0x7d0 [ 435.473706] clone_mnt+0x70/0xee0 [ 435.477167] ? lock_downgrade+0x740/0x740 [ 435.481336] ? do_raw_spin_unlock+0x16b/0x260 [ 435.485842] copy_tree+0x33b/0x8a0 [ 435.489391] copy_mnt_ns+0x11c/0x8c0 [ 435.493089] ? kmem_cache_alloc+0x611/0x780 [ 435.497396] ? selinux_capable+0x36/0x40 [ 435.501444] create_new_namespaces+0xc9/0x720 [ 435.505925] ? ns_capable_common+0x12c/0x160 [ 435.510387] copy_namespaces+0x284/0x310 [ 435.514449] copy_process.part.0+0x2603/0x6a70 [ 435.519032] ? proc_fail_nth_write+0x7d/0x180 [ 435.523521] ? proc_cwd_link+0x1b0/0x1b0 [ 435.527643] ? __cleanup_sighand+0x50/0x50 [ 435.531897] ? lock_downgrade+0x740/0x740 [ 435.536035] _do_fork+0x19e/0xce0 [ 435.539477] ? fork_idle+0x280/0x280 [ 435.543177] ? fput+0xd4/0x150 [ 435.546355] ? SyS_write+0x15e/0x230 [ 435.550070] SyS_clone+0x37/0x50 [ 435.553435] ? sys_vfork+0x30/0x30 [ 435.556983] do_syscall_64+0x1e8/0x640 [ 435.560867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.566726] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.572863] RIP: 0033:0x45a919 [ 435.576042] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 435.583789] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 435.591098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 435.598371] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/26) statfs(&(0x7f0000000000)='./bus\x00', 0x0) 21:31:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r4, r5/1000+10000}, 0x13, 0x7fff, 0x800}, 0x18) [ 435.605637] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 435.612898] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:17 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r4 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) dup2(r4, r5) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000080)={0xcd, 0x80000000, 0x0, {0x7fff, 0xc26}, 0x4, 0xb0aa}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x1, '\n'}, &(0x7f0000000140)=0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x13}, 0x401}}, 0xfffffffd, 0xfffd, 0x1f, 0x2, 0x20, 0x4, 0x6}, &(0x7f0000000240)=0x9c) r8 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x9) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x100, 0x0) write$UHID_INPUT(r2, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000100)={0x3, 0xd180}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) getuid() 21:31:17 executing program 5 (fault-call:8 fault-nth:23): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 435.817759] FAULT_INJECTION: forcing a failure. [ 435.817759] name failslab, interval 1, probability 0, space 0, times 0 [ 435.842325] CPU: 1 PID: 16833 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 435.850258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.859634] Call Trace: [ 435.862253] dump_stack+0x142/0x197 [ 435.865914] should_fail.cold+0x10f/0x159 [ 435.870098] should_failslab+0xdb/0x130 [ 435.874201] kmem_cache_alloc+0x2d7/0x780 [ 435.878372] ? find_held_lock+0x35/0x130 [ 435.882443] ? copy_tree+0x4a2/0x8a0 [ 435.886180] alloc_vfsmnt+0x28/0x7d0 [ 435.889896] clone_mnt+0x70/0xee0 [ 435.893346] ? lock_downgrade+0x740/0x740 [ 435.897497] ? do_raw_spin_unlock+0x16b/0x260 [ 435.901986] copy_tree+0x33b/0x8a0 [ 435.905527] copy_mnt_ns+0x11c/0x8c0 [ 435.909229] ? kmem_cache_alloc+0x611/0x780 [ 435.913541] ? selinux_capable+0x36/0x40 [ 435.917596] create_new_namespaces+0xc9/0x720 [ 435.922079] ? ns_capable_common+0x12c/0x160 [ 435.926498] copy_namespaces+0x284/0x310 [ 435.930549] copy_process.part.0+0x2603/0x6a70 [ 435.935121] ? debug_smp_processor_id+0x1c/0x20 [ 435.939791] ? perf_trace_lock+0x109/0x500 [ 435.944014] ? check_preemption_disabled+0x3c/0x250 [ 435.949020] ? debug_smp_processor_id+0x1c/0x20 [ 435.953699] ? __cleanup_sighand+0x50/0x50 [ 435.957922] ? lock_downgrade+0x740/0x740 [ 435.962076] _do_fork+0x19e/0xce0 [ 435.965534] ? fork_idle+0x280/0x280 [ 435.969252] ? fput+0xd4/0x150 [ 435.972432] ? SyS_write+0x15e/0x230 [ 435.976145] SyS_clone+0x37/0x50 [ 435.979507] ? sys_vfork+0x30/0x30 [ 435.983041] do_syscall_64+0x1e8/0x640 [ 435.986917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.991757] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.996934] RIP: 0033:0x45a919 [ 436.000112] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 436.007821] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 21:31:17 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 436.015078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 436.022350] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.029636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 436.036908] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:17 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:17 executing program 5 (fault-call:8 fault-nth:24): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 436.176739] FAULT_INJECTION: forcing a failure. [ 436.176739] name failslab, interval 1, probability 0, space 0, times 0 [ 436.204793] CPU: 0 PID: 16849 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 436.212739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.222121] Call Trace: [ 436.224736] dump_stack+0x142/0x197 [ 436.228401] should_fail.cold+0x10f/0x159 [ 436.232597] should_failslab+0xdb/0x130 [ 436.236596] __kmalloc_track_caller+0x2ec/0x790 [ 436.241291] ? kstrdup_const+0x48/0x60 [ 436.245197] kstrdup+0x3a/0x70 [ 436.248403] kstrdup_const+0x48/0x60 [ 436.252134] alloc_vfsmnt+0xe5/0x7d0 [ 436.255861] clone_mnt+0x70/0xee0 [ 436.259325] ? lock_downgrade+0x740/0x740 [ 436.263579] ? do_raw_spin_unlock+0x16b/0x260 [ 436.268093] copy_tree+0x33b/0x8a0 [ 436.271666] copy_mnt_ns+0x11c/0x8c0 [ 436.275396] ? kmem_cache_alloc+0x611/0x780 [ 436.279739] ? selinux_capable+0x36/0x40 [ 436.283857] create_new_namespaces+0xc9/0x720 [ 436.288380] ? ns_capable_common+0x12c/0x160 [ 436.292827] copy_namespaces+0x284/0x310 [ 436.296912] copy_process.part.0+0x2603/0x6a70 [ 436.301549] ? proc_fail_nth_write+0x7d/0x180 [ 436.306053] ? proc_cwd_link+0x1b0/0x1b0 [ 436.310156] ? __cleanup_sighand+0x50/0x50 [ 436.314420] ? lock_downgrade+0x740/0x740 [ 436.318593] _do_fork+0x19e/0xce0 [ 436.322068] ? fork_idle+0x280/0x280 [ 436.325810] ? fput+0xd4/0x150 [ 436.329015] ? SyS_write+0x15e/0x230 [ 436.332761] SyS_clone+0x37/0x50 [ 436.336143] ? sys_vfork+0x30/0x30 [ 436.339715] do_syscall_64+0x1e8/0x640 [ 436.343614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.348482] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 436.353691] RIP: 0033:0x45a919 [ 436.356889] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 436.364620] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 436.371911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 436.379208] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.386610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 436.393889] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:18 executing program 5 (fault-call:8 fault-nth:25): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 436.481841] FAULT_INJECTION: forcing a failure. [ 436.481841] name failslab, interval 1, probability 0, space 0, times 0 [ 436.506613] CPU: 1 PID: 16862 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 436.514546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.523926] Call Trace: [ 436.526540] dump_stack+0x142/0x197 21:31:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000200), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x28}, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xf, 0x1}}}, {{@arp={@broadcast, @local, 0x80fffe01, 0xffffffff, 0x7, 0xd, {@empty, {[0x0, 0xff, 0xff, 0x7f, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x17e]}}, 0x9, 0xfb8, 0x4, 0x8, 0x1f, 0xffff, 'caif0\x00', 'gre0\x00', {0xff}, {0x99fe53e03c21d4b9}, 0x0, 0x18f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast1, @empty, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r4, r6, r7}, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000180)={0x0, 0x14, 0x4, @thr={&(0x7f00000000c0)="e9087684a6f790f8fd67bbc7f50cf6112025648f9c547ac7971f510459d3cdfe0cc0", &(0x7f0000000100)="289e81d27fb597e53f9b5269815a4a29d5c188248dd436182365420036b27e62fdf5388c0db58c34953accb575e9b4d9113d87cfc2b676f299a58e5cf0a6cdf03958ec527c9afc698b136cbfdf782b99453e05efabef54f3b50cff55d80dd140b582b7bbd16cd3fce315473c2267edf6d86644993119f9bd436d98f5d3d9d2"}}, &(0x7f00000001c0)=0x0) timer_delete(r9) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r8, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x400, 0x0) ioctl$PPPIOCSFLAGS(r10, 0x40047459, &(0x7f00000007c0)=0x2000000) [ 436.530210] should_fail.cold+0x10f/0x159 [ 436.534389] should_failslab+0xdb/0x130 [ 436.538393] kmem_cache_alloc+0x2d7/0x780 [ 436.542577] ? find_held_lock+0x35/0x130 [ 436.546661] ? copy_tree+0x4a2/0x8a0 [ 436.550383] alloc_vfsmnt+0x28/0x7d0 [ 436.554089] clone_mnt+0x70/0xee0 [ 436.557602] ? lock_downgrade+0x740/0x740 [ 436.561772] ? do_raw_spin_unlock+0x16b/0x260 [ 436.566287] copy_tree+0x33b/0x8a0 [ 436.569851] copy_mnt_ns+0x11c/0x8c0 [ 436.573577] ? kmem_cache_alloc+0x611/0x780 [ 436.577919] create_new_namespaces+0xc9/0x720 21:31:18 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) dup3(0xffffffffffffffff, r0, 0x1c0000) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="8907f096c8d19a9bfc6c9561cd16b3a8", 0x10) write(r0, &(0x7f0000000340), 0x41395527) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000000)={0x1ed, 0xc, &(0x7f00000002c0)="7d3141dcb4ce3a3a4dcf61cab6ce793c1a9530f14b807cde8621ba4d8a2e5cef20142003ebfcac673dff188a2bd451a83950e301537a4b2990eb254b3e408e162145893fbede9128d78564f8b2ba04990a7178184e90c04e394223c01af3bf009bbe693476aa4b715526f4282d408ea1f729bb8942392bce9442d891b5d60950d9ee9542b78ae6d415a90ba7b802080db2fa76e8172b1d9a14be903b6314d215ee8499eeb9d004aa970c72a68dac93b70fdd0c6ecaa92a4ded30500bf96b5d90720fc006b62681be5c8f6f4ad2043338251f39a3f0a3f5ab996743b643a24c8f16822e9f8a82f972aabaca04c71fa40a3e00f32948564f10e3f8bb0070d4bc694591cabe1d52922501780aa75aa79d547dbfee5ca5f5d282512f31c395b757adbea78488ab6ed104eda7968cac80d0ebc44ff28e426e01724d299c6dc58ef16bd76ef6e4ef912edb1ba95d72215e9b88aff613afc6725ffe8d96f0c7be651af99ab90fd2abd04a7b59570fe1ff003a4067652a17c7a2f6b12e805860ae15db0bee0ef1f169090e4ffca554ae9b2c7891efb2691a87c16787f25379fb6147cb14c1cf2c39676c565521f2eca458e77a4bb8dec520c962ddce7567371e1ce970653afd565596a506de85b03328dede7dc5cce97f9304b469ade970a24e50c85d72128e77a6ca852af5293786f4e4b1b8ef33af8c7065a50415d17323cb2df295156476d638b265d919504d834b101c966829ccb226ddfc83609ce3fbad68eb2bd2ae72e006d17f428729da74303ec04d66d917e35d2780321e65716ca10c273421e147fd8806f6e71eaa06b05b2f0da484f9ece4333e4f0604621143a3bb1def18b9f1d3c77e00adaccdef60a79637a2358ecaab5b5228aed09d13a5990f5cf05b5488691614730934b1470b8434ffbe155cd110446bb4339f3b22f092ee29439ad778f128f919ea3f0d574b2cb565e1d5853ae87bc927ba909844b2069818e7160922123bcb15d333f56a90645eab8a688ef587998ec1739b215e42e9ffe82f57b4612b361eea887f57f4175b5058d5106c88778ed1e8203eb3ba72e909b7c7a773cc9d4540694f9c214319b077c1a9a4f371e4a1e2ddb3c74aa0597db66dad0877ead3694d5ebbe0ef0b2eceb29c2351f1e716d0aac62bdbef6d91b8d28b4f63e807b76de021f2dcd9307633c0b0317221d47145df5607cb176506202fec77ea15c3ab0286d075087d6db89e4a59716cd7a74d79bd5082ffdcfeb2f65feee460dc135356c9242d9c7834a05219e047b5aa4717ab8415e5575d4db4d012256a958352b6ffd59a904e48989412f189b1f391ea28b79a581777d6fd1e0a91d05e7c8e950c944c13a214e8a725b207d3584f7c333adaddc1c602b34dca3f793ab6797680e6f0a39d117041750cdd16777a1e091e7cb3f886727ad2d0f079a21b6c97"}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 436.582438] ? ns_capable_common+0x12c/0x160 [ 436.586879] copy_namespaces+0x284/0x310 [ 436.590974] copy_process.part.0+0x2603/0x6a70 [ 436.590991] ? debug_smp_processor_id+0x1c/0x20 [ 436.591002] ? perf_trace_lock+0x109/0x500 [ 436.591010] ? check_preemption_disabled+0x3c/0x250 [ 436.591022] ? debug_smp_processor_id+0x1c/0x20 [ 436.604543] ? __cleanup_sighand+0x50/0x50 [ 436.604558] ? lock_downgrade+0x740/0x740 [ 436.604578] _do_fork+0x19e/0xce0 [ 436.604592] ? fork_idle+0x280/0x280 [ 436.629823] ? fput+0xd4/0x150 [ 436.633031] ? SyS_write+0x15e/0x230 [ 436.636767] SyS_clone+0x37/0x50 [ 436.640171] ? sys_vfork+0x30/0x30 [ 436.643733] do_syscall_64+0x1e8/0x640 [ 436.647646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.652515] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 436.657723] RIP: 0033:0x45a919 [ 436.660926] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 436.668740] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 436.676133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 436.683439] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.690721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 436.698005] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xb0a27) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:18 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x40000042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r2 = accept4$llc(r0, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000480)=0x10, 0x80000) pwritev(r2, &(0x7f0000000680)=[{&(0x7f00000004c0)="15aef98a5536dec9dec43331226ffc5f642dbf4102f012c1eda20b4f1d754119ae7d9f600b56ecd96d64f70477354ab1c57995d73030954edfdab34da84c68e2b603c1059bcaedbca682edd5fb388010b18bb54c70c3a7cc4453654d9930b183eb817c5d77cc7213a233c7931d45e02040a37b8c6ae7d5645e5879e0271debad63e8f86c38f138e058ee1476437c1843d9f45c1a0a9685745737a17fbc0c22b843180ad49a0eba9f47d0f53ace", 0xad}, {&(0x7f0000000580)="b0e5690e72b3dc5b0a44895e55941b0f2a7bc19b3564db6a1a0a190f147e4c5976e01d1f7cbd41fc4a6fa8987522d876a5d90dc9a5714aa8c65be284674cf034d60fc94bdcfafce82d77e8e77ff75fef59f736a0dc5d8a8378d91e1242e54a794945d8e40e69cf5def0b6dc70aa25631d695acb1d71ec168c8711468bbcaf7d056203f8e6090749bece6eb8614a1cf30211a62a1777a496771f5cac566d12f12dc9632a82f230ce8a78ef8f9802ea6a3a5896999cc865369057587ce44881ba11a4af1ab651ec01171fc132ee83e4ee090716eff5bc15c5036f310680600af2523d9cbc23677737b112054", 0xeb}], 0x2, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xf2f4, 0x2000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000003c0)={0x93fee76db18f944b, 0x0, [0x2, 0x1, 0x10000, 0x5, 0xff, 0x1, 0x1, 0x7fff]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000140)={r4, &(0x7f0000000080)=""/151}) preadv(r1, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x2, 0xffff, 0x1, {0x6, @sdr={0x47314356, 0xb89b}}, 0x3fff8}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 21:31:18 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:18 executing program 5 (fault-call:8 fault-nth:26): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 437.147589] FAULT_INJECTION: forcing a failure. [ 437.147589] name failslab, interval 1, probability 0, space 0, times 0 [ 437.174930] CPU: 1 PID: 16893 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 437.182868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.192245] Call Trace: [ 437.192267] dump_stack+0x142/0x197 [ 437.192288] should_fail.cold+0x10f/0x159 [ 437.192306] should_failslab+0xdb/0x130 [ 437.206623] kmem_cache_alloc+0x2d7/0x780 [ 437.210787] ? find_held_lock+0x35/0x130 [ 437.214860] ? copy_tree+0x4a2/0x8a0 [ 437.218581] alloc_vfsmnt+0x28/0x7d0 [ 437.222304] clone_mnt+0x70/0xee0 [ 437.225995] ? lock_downgrade+0x740/0x740 [ 437.230157] ? do_raw_spin_unlock+0x16b/0x260 [ 437.234675] copy_tree+0x33b/0x8a0 [ 437.238259] copy_mnt_ns+0x11c/0x8c0 [ 437.242006] ? kmem_cache_alloc+0x611/0x780 [ 437.246346] ? selinux_capable+0x36/0x40 [ 437.250432] create_new_namespaces+0xc9/0x720 [ 437.254931] ? ns_capable_common+0x12c/0x160 [ 437.259346] copy_namespaces+0x284/0x310 [ 437.263413] copy_process.part.0+0x2603/0x6a70 [ 437.268007] ? proc_fail_nth_write+0x7d/0x180 [ 437.272499] ? proc_cwd_link+0x1b0/0x1b0 [ 437.276576] ? __cleanup_sighand+0x50/0x50 [ 437.280810] ? lock_downgrade+0x740/0x740 [ 437.284962] _do_fork+0x19e/0xce0 [ 437.288425] ? fork_idle+0x280/0x280 [ 437.292148] ? fput+0xd4/0x150 [ 437.295342] ? SyS_write+0x15e/0x230 [ 437.299326] SyS_clone+0x37/0x50 [ 437.302685] ? sys_vfork+0x30/0x30 [ 437.306229] do_syscall_64+0x1e8/0x640 [ 437.310144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.314998] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 437.320286] RIP: 0033:0x45a919 [ 437.323471] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 437.331187] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 437.338459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:19 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) close(r2) r3 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x12000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 437.345728] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 437.352999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 437.360268] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:19 executing program 5 (fault-call:8 fault-nth:27): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:19 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0x15}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) fcntl$setpipe(r6, 0x407, 0x9) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0xfffffe42) connect$packet(r4, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/47) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpriority(0x1, r9) r10 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x7ff}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r11, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x4e, "9bd69d1e143e5eb36aa3dc4ce56e8c7e9106973a67b6351b83569c8ae5aff2e2788ea8c3b522686aed433c2c8dc6546734064e0bc914824b9eff8cac73ed817285c9f620f701002b1f1d4718f58a"}, &(0x7f0000000200)=0x56) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000240)={r13, 0xfffe, 0xd8, 0x7fffffff, 0xb5, 0x1f}, &(0x7f00000002c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r8, 0x0, 0x4ffe0, 0x0) [ 437.505891] FAULT_INJECTION: forcing a failure. [ 437.505891] name failslab, interval 1, probability 0, space 0, times 0 [ 437.548046] CPU: 1 PID: 16908 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 437.556038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.565397] Call Trace: [ 437.568017] dump_stack+0x142/0x197 [ 437.571676] should_fail.cold+0x10f/0x159 [ 437.575851] should_failslab+0xdb/0x130 [ 437.579850] kmem_cache_alloc+0x2d7/0x780 [ 437.584015] ? find_held_lock+0x35/0x130 [ 437.588098] ? copy_tree+0x4a2/0x8a0 [ 437.591838] alloc_vfsmnt+0x28/0x7d0 [ 437.595564] clone_mnt+0x70/0xee0 [ 437.599028] ? lock_downgrade+0x740/0x740 [ 437.603191] ? do_raw_spin_unlock+0x16b/0x260 [ 437.607703] copy_tree+0x33b/0x8a0 [ 437.611264] copy_mnt_ns+0x11c/0x8c0 [ 437.614984] ? kmem_cache_alloc+0x611/0x780 [ 437.619315] ? selinux_capable+0x36/0x40 [ 437.623400] create_new_namespaces+0xc9/0x720 [ 437.627907] ? ns_capable_common+0x12c/0x160 [ 437.632336] copy_namespaces+0x284/0x310 [ 437.636411] copy_process.part.0+0x2603/0x6a70 [ 437.641008] ? debug_smp_processor_id+0x1c/0x20 [ 437.645686] ? perf_trace_lock+0x109/0x500 [ 437.649935] ? check_preemption_disabled+0x3c/0x250 [ 437.654968] ? debug_smp_processor_id+0x1c/0x20 [ 437.659684] ? __cleanup_sighand+0x50/0x50 [ 437.663931] ? lock_downgrade+0x740/0x740 [ 437.668101] _do_fork+0x19e/0xce0 [ 437.671574] ? fork_idle+0x280/0x280 [ 437.675301] ? fput+0xd4/0x150 [ 437.678506] ? SyS_write+0x15e/0x230 [ 437.682247] SyS_clone+0x37/0x50 [ 437.685631] ? sys_vfork+0x30/0x30 [ 437.689188] do_syscall_64+0x1e8/0x640 [ 437.693082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.697946] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 437.703152] RIP: 0033:0x45a919 [ 437.706373] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 437.714094] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 437.721375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 437.728653] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 437.735947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 437.743213] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:19 executing program 5 (fault-call:8 fault-nth:28): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:19 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:19 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x1, 0x13141, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000000)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VT_DISALLOCATE(r4, 0x5608) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000005c0)={0x6, 0x2, "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"}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="00000000e6ff00007410000000000000c2cf9fbe8616d7840dec3ddea46b710205d9c18e0b94aea736feaff877cce9cff88738d087afbecef132d596637c4e82f7f2ac03799dfbe30556043fa51e51780ff790c633d5664052410200945234ad3df297b3816d9fdb0776bb78ecaf2f062e7cc0893b5d951cda8ab4cde17b79bd0c66bbd5ed2d6853aa08fcb0b5717317800a3082f211cae883289c3af81abc80b774f7582fedea910f1ea3429ace638cb8062c5aac430a952fa156b4618befe34ad508dec070ba68c6672d8ea4b820fedcb2d98b098f23deab283a3ced995fa221043e80d0cfd2f987ad08"], 0x28}}, 0x0) socket$alg(0x26, 0x5, 0x0) recvfrom$packet(r1, &(0x7f00000000c0)=""/234, 0xea, 0x7b224dd78e3de987, &(0x7f00000001c0)={0x11, 0x3, r6, 0x1, 0x40, 0x6, @dev={[], 0x17}}, 0x14) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) write$rfkill(r2, &(0x7f0000000280)={0x92ba, 0x5, 0x2, 0x0, 0x1}, 0x8) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000240)=0xff) [ 437.935723] FAULT_INJECTION: forcing a failure. [ 437.935723] name failslab, interval 1, probability 0, space 0, times 0 [ 437.973082] CPU: 0 PID: 16924 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 437.981113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.990490] Call Trace: [ 437.993102] dump_stack+0x142/0x197 [ 437.996751] should_fail.cold+0x10f/0x159 [ 438.000904] should_failslab+0xdb/0x130 [ 438.004872] __kmalloc_track_caller+0x2ec/0x790 [ 438.009536] ? kstrdup_const+0x48/0x60 [ 438.013439] kstrdup+0x3a/0x70 [ 438.016638] kstrdup_const+0x48/0x60 [ 438.020342] alloc_vfsmnt+0xe5/0x7d0 [ 438.024093] clone_mnt+0x70/0xee0 [ 438.027576] ? lock_downgrade+0x740/0x740 [ 438.031728] ? do_raw_spin_unlock+0x16b/0x260 [ 438.036228] copy_tree+0x33b/0x8a0 [ 438.039767] copy_mnt_ns+0x11c/0x8c0 [ 438.043469] ? kmem_cache_alloc+0x611/0x780 [ 438.047839] ? selinux_capable+0x36/0x40 [ 438.051997] create_new_namespaces+0xc9/0x720 [ 438.056568] ? ns_capable_common+0x12c/0x160 [ 438.060973] copy_namespaces+0x284/0x310 [ 438.065026] copy_process.part.0+0x2603/0x6a70 [ 438.069602] ? debug_smp_processor_id+0x1c/0x20 [ 438.074279] ? perf_trace_lock+0x109/0x500 [ 438.078520] ? check_preemption_disabled+0x3c/0x250 [ 438.083528] ? debug_smp_processor_id+0x1c/0x20 [ 438.088203] ? __cleanup_sighand+0x50/0x50 [ 438.092440] ? lock_downgrade+0x740/0x740 [ 438.096686] _do_fork+0x19e/0xce0 [ 438.100153] ? fork_idle+0x280/0x280 [ 438.103903] ? fput+0xd4/0x150 [ 438.107083] ? SyS_write+0x15e/0x230 [ 438.110809] SyS_clone+0x37/0x50 [ 438.114184] ? sys_vfork+0x30/0x30 [ 438.117730] do_syscall_64+0x1e8/0x640 [ 438.121607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.126445] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.131645] RIP: 0033:0x45a919 [ 438.134851] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 438.142573] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 438.149844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 438.157115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 438.164442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 438.171738] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:20 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r9, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:20 executing program 5 (fault-call:8 fault-nth:29): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 438.249028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 21:31:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x0, 0x4, 0x3}}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x70, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 438.332441] FAULT_INJECTION: forcing a failure. [ 438.332441] name failslab, interval 1, probability 0, space 0, times 0 [ 438.345376] CPU: 1 PID: 16942 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 438.353288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.362650] Call Trace: [ 438.365251] dump_stack+0x142/0x197 [ 438.368917] should_fail.cold+0x10f/0x159 [ 438.373098] should_failslab+0xdb/0x130 [ 438.377123] kmem_cache_alloc+0x2d7/0x780 [ 438.381281] ? find_held_lock+0x35/0x130 [ 438.385344] ? copy_tree+0x4a2/0x8a0 [ 438.389059] alloc_vfsmnt+0x28/0x7d0 [ 438.392769] clone_mnt+0x70/0xee0 [ 438.396212] ? lock_downgrade+0x740/0x740 [ 438.400348] ? do_raw_spin_unlock+0x16b/0x260 [ 438.404833] copy_tree+0x33b/0x8a0 [ 438.408369] copy_mnt_ns+0x11c/0x8c0 [ 438.412090] ? kmem_cache_alloc+0x611/0x780 [ 438.416405] ? selinux_capable+0x36/0x40 [ 438.420462] create_new_namespaces+0xc9/0x720 [ 438.424960] ? ns_capable_common+0x12c/0x160 [ 438.429360] copy_namespaces+0x284/0x310 [ 438.433411] copy_process.part.0+0x2603/0x6a70 [ 438.438091] ? proc_fail_nth_write+0x7d/0x180 [ 438.442580] ? proc_cwd_link+0x1b0/0x1b0 [ 438.446642] ? __cleanup_sighand+0x50/0x50 [ 438.450886] ? lock_downgrade+0x740/0x740 [ 438.455036] _do_fork+0x19e/0xce0 [ 438.458483] ? fork_idle+0x280/0x280 [ 438.462198] ? fput+0xd4/0x150 [ 438.465381] ? SyS_write+0x15e/0x230 [ 438.469087] SyS_clone+0x37/0x50 [ 438.472440] ? sys_vfork+0x30/0x30 [ 438.475972] do_syscall_64+0x1e8/0x640 [ 438.479857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.484698] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.489874] RIP: 0033:0x45a919 [ 438.493049] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 438.500762] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 438.508043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 438.515310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 438.522572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 21:31:20 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r9, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000240)=""/64, &(0x7f00000002c0)=0x40) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@local, @in=@remote, 0x4e23, 0x3, 0x4e24, 0xdcc0, 0xa, 0x80, 0x80, 0x89, r8, 0xee01}, {0x1, 0x1, 0x8001, 0x9, 0x9, 0x80, 0xfffffffffffffff2}, {0xaa9, 0x80, 0x10001, 0x5}, 0x8, 0x6e6bb1, 0x1, 0x2, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xd4}, 0xa, @in=@broadcast, 0x3501, 0x2, 0x3, 0x81, 0x6, 0x5, 0x6}}, 0xe8) [ 438.529833] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:20 executing program 5 (fault-call:8 fault-nth:30): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 438.706306] FAULT_INJECTION: forcing a failure. [ 438.706306] name failslab, interval 1, probability 0, space 0, times 0 [ 438.752110] IPVS: length: 64 != 24 [ 438.756472] CPU: 1 PID: 16964 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 438.764380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.773748] Call Trace: [ 438.776362] dump_stack+0x142/0x197 [ 438.780039] should_fail.cold+0x10f/0x159 [ 438.784215] should_failslab+0xdb/0x130 [ 438.788210] __kmalloc_track_caller+0x2ec/0x790 [ 438.792898] ? kstrdup_const+0x48/0x60 [ 438.796809] kstrdup+0x3a/0x70 [ 438.800011] kstrdup_const+0x48/0x60 [ 438.803731] alloc_vfsmnt+0xe5/0x7d0 [ 438.807468] clone_mnt+0x70/0xee0 [ 438.810930] ? lock_downgrade+0x740/0x740 [ 438.815093] ? do_raw_spin_unlock+0x16b/0x260 [ 438.819613] copy_tree+0x33b/0x8a0 [ 438.823176] copy_mnt_ns+0x11c/0x8c0 [ 438.826909] ? kmem_cache_alloc+0x611/0x780 [ 438.831248] ? selinux_capable+0x36/0x40 [ 438.835326] create_new_namespaces+0xc9/0x720 [ 438.839841] ? ns_capable_common+0x12c/0x160 [ 438.844270] copy_namespaces+0x284/0x310 [ 438.848355] copy_process.part.0+0x2603/0x6a70 [ 438.852955] ? debug_smp_processor_id+0x1c/0x20 [ 438.857643] ? perf_trace_lock+0x109/0x500 [ 438.861893] ? check_preemption_disabled+0x3c/0x250 [ 438.866933] ? debug_smp_processor_id+0x1c/0x20 [ 438.871632] ? __cleanup_sighand+0x50/0x50 [ 438.875887] ? lock_downgrade+0x740/0x740 [ 438.880063] _do_fork+0x19e/0xce0 [ 438.883549] ? fork_idle+0x280/0x280 [ 438.887291] ? fput+0xd4/0x150 [ 438.890503] ? SyS_write+0x15e/0x230 [ 438.894239] SyS_clone+0x37/0x50 [ 438.897740] ? sys_vfork+0x30/0x30 [ 438.901406] do_syscall_64+0x1e8/0x640 [ 438.905331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.905354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 438.915489] RIP: 0033:0x45a919 [ 438.918684] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 438.926596] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 438.933904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 438.941194] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:20 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:20 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fsetxattr$security_selinux(r0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0xa, &(0x7f00000000c0)='net/route\x00', 0xffffffffffffffff}, 0x30) ptrace$setregs(0xffffffffffffffff, r2, 0xffffffffffffff81, &(0x7f0000000140)="4b465c3abf89a4c43041b557eb6a7db40852db6b8ded63bffa77e2b9d9b92a30368a454ca2a8c003c9d3ad0ed821f48db7998ee85089ec5e4afac41b8660b1533b86d08efb36a080dddae651fe735d05b9f5d36d4a7bc87be1346786099dea3d7979bbee1f2368e566cdfa0e5980a53d3fba86c3fb0b19de25d42f93304e402aecee418cf4d64d7dfc") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0xa200, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r3}) preadv(r3, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 438.941201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 438.941207] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="2100001c436569ba29ca1fe1cfc6e6fea9b3469ae01095a284b88a344d08ea9a7dc49c392801c6e6567a1f7be569374a3c23ac170c82f9ffd22e0bbf77e7b12bc6231f8a7097fbb3b4c6e768cd61680a251f911acb7505295a1d475be46f6998548fccc44950ef39f3dc1f5bd5ec6f29dba0b4b3c5120864c0fe5ad212146d6cec659f762bcc1aa550612fee43b152860268516bd3b5433670dc28eaf29ab589925784af7b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x2c, "9e85bcbe8e14ea195a7fb024fe6c16a1ba9bc0c2c353c8518056d145cd3c7bd62c0e2b71bb640fa6b02e420f"}, &(0x7f0000000180)=0x34) socket$inet(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x300, 0x0) syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') [ 439.109218] audit: type=1400 audit(1577050280.903:68): avc: denied { relabelfrom } for pid=16973 comm="syz-executor.3" name="" dev="pipefs" ino=59613 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 21:31:21 executing program 5 (fault-call:8 fault-nth:31): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:21 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20801, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000080), 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 439.159770] bond0: Enslaving bridge3 as an active interface with an up link [ 439.266861] FAULT_INJECTION: forcing a failure. [ 439.266861] name failslab, interval 1, probability 0, space 0, times 0 [ 439.279420] CPU: 0 PID: 16989 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 439.287344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.296720] Call Trace: [ 439.299338] dump_stack+0x142/0x197 [ 439.303013] should_fail.cold+0x10f/0x159 [ 439.307200] should_failslab+0xdb/0x130 [ 439.311198] kmem_cache_alloc+0x2d7/0x780 [ 439.315363] ? find_held_lock+0x35/0x130 [ 439.319439] ? copy_tree+0x4a2/0x8a0 [ 439.323175] alloc_vfsmnt+0x28/0x7d0 [ 439.326906] clone_mnt+0x70/0xee0 [ 439.330377] ? lock_downgrade+0x740/0x740 [ 439.334546] ? do_raw_spin_unlock+0x16b/0x260 [ 439.339062] copy_tree+0x33b/0x8a0 [ 439.342638] copy_mnt_ns+0x11c/0x8c0 [ 439.346364] ? kmem_cache_alloc+0x611/0x780 [ 439.350704] ? selinux_capable+0x36/0x40 [ 439.354880] create_new_namespaces+0xc9/0x720 [ 439.359395] ? ns_capable_common+0x12c/0x160 [ 439.363830] copy_namespaces+0x284/0x310 [ 439.367897] copy_process.part.0+0x2603/0x6a70 [ 439.372478] ? debug_smp_processor_id+0x1c/0x20 [ 439.377294] ? perf_trace_lock+0x109/0x500 [ 439.381547] ? check_preemption_disabled+0x3c/0x250 [ 439.386571] ? debug_smp_processor_id+0x1c/0x20 [ 439.391273] ? __cleanup_sighand+0x50/0x50 [ 439.395506] ? lock_downgrade+0x740/0x740 [ 439.399657] _do_fork+0x19e/0xce0 [ 439.403144] ? fork_idle+0x280/0x280 [ 439.406876] ? fput+0xd4/0x150 [ 439.410066] ? SyS_write+0x15e/0x230 [ 439.413787] SyS_clone+0x37/0x50 [ 439.417157] ? sys_vfork+0x30/0x30 [ 439.420703] do_syscall_64+0x1e8/0x640 [ 439.424589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.429436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 439.434627] RIP: 0033:0x45a919 [ 439.437811] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 439.445519] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 439.452780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 439.460044] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.467333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 439.474609] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x22a120c79612313) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r5], 0x2}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x40}}, 0x8004) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:21 executing program 5 (fault-call:8 fault-nth:32): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 439.583186] IPVS: ftp: loaded support on port[0] = 21 [ 439.728781] FAULT_INJECTION: forcing a failure. [ 439.728781] name failslab, interval 1, probability 0, space 0, times 0 [ 439.758829] CPU: 1 PID: 17004 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 439.766766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.776145] Call Trace: [ 439.778752] dump_stack+0x142/0x197 [ 439.782409] should_fail.cold+0x10f/0x159 [ 439.786586] should_failslab+0xdb/0x130 [ 439.790582] __kmalloc_track_caller+0x2ec/0x790 [ 439.795280] ? kstrdup_const+0x48/0x60 [ 439.799159] kstrdup+0x3a/0x70 [ 439.802347] kstrdup_const+0x48/0x60 [ 439.806052] alloc_vfsmnt+0xe5/0x7d0 [ 439.809762] clone_mnt+0x70/0xee0 [ 439.813202] ? lock_downgrade+0x740/0x740 [ 439.817346] ? do_raw_spin_unlock+0x16b/0x260 [ 439.821829] copy_tree+0x33b/0x8a0 [ 439.825372] copy_mnt_ns+0x11c/0x8c0 [ 439.829074] ? kmem_cache_alloc+0x611/0x780 [ 439.833385] ? selinux_capable+0x36/0x40 [ 439.837437] create_new_namespaces+0xc9/0x720 [ 439.841918] ? ns_capable_common+0x12c/0x160 [ 439.846313] copy_namespaces+0x284/0x310 [ 439.850360] copy_process.part.0+0x2603/0x6a70 [ 439.854928] ? debug_smp_processor_id+0x1c/0x20 [ 439.859582] ? perf_trace_lock+0x109/0x500 [ 439.863801] ? check_preemption_disabled+0x3c/0x250 [ 439.868806] ? debug_smp_processor_id+0x1c/0x20 [ 439.873468] ? __cleanup_sighand+0x50/0x50 [ 439.877698] ? lock_downgrade+0x740/0x740 [ 439.881838] _do_fork+0x19e/0xce0 [ 439.885279] ? fork_idle+0x280/0x280 [ 439.888992] ? fput+0xd4/0x150 [ 439.892170] ? SyS_write+0x15e/0x230 [ 439.895871] SyS_clone+0x37/0x50 [ 439.899220] ? sys_vfork+0x30/0x30 [ 439.902748] do_syscall_64+0x1e8/0x640 [ 439.906622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.911456] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 439.916628] RIP: 0033:0x45a919 [ 439.919804] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 439.927503] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 439.934758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 439.942015] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 439.949284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 439.956559] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:21 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'netpci0\x00', {0x6}, 0x400}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000180)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x7f8ec005eba15cba, r2) accept$ax25(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@netrom, @bcast, @rose, @default, @netrom, @bcast, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x20, 0x1, 0x81, 0x0, 0x3f, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0xec4ce9dc55d593e2, @perf_config_ext={0x9, 0x1}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8000}, r6, 0xd, r1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3cd, 0x0, 0x0, 0x0, 0xfffffffffffffcdd}}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') splice(0xffffffffffffffff, &(0x7f0000000240)=0x40, r0, &(0x7f0000000280)=0x1, 0x400, 0x4) preadv(r7, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="2100001c436569ba29ca1fe1cfc6e6fea9b3469ae01095a284b88a344d08ea9a7dc49c392801c6e6567a1f7be569374a3c23ac170c82f9ffd22e0bbf77e7b12bc6231f8a7097fbb3b4c6e768cd61680a251f911acb7505295a1d475be46f6998548fccc44950ef39f3dc1f5bd5ec6f29dba0b4b3c5120864c0fe5ad212146d6cec659f762bcc1aa550612fee43b152860268516bd3b5433670dc28eaf29ab589925784af7b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x2c, "9e85bcbe8e14ea195a7fb024fe6c16a1ba9bc0c2c353c8518056d145cd3c7bd62c0e2b71bb640fa6b02e420f"}, &(0x7f0000000180)=0x34) socket$inet(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x300, 0x0) syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') 21:31:21 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) bind$rds(r3, &(0x7f00000003c0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:21 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:22 executing program 5 (fault-call:8 fault-nth:33): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 440.240542] FAULT_INJECTION: forcing a failure. [ 440.240542] name failslab, interval 1, probability 0, space 0, times 0 [ 440.252965] CPU: 0 PID: 17026 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 440.260884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.270263] Call Trace: [ 440.272860] dump_stack+0x142/0x197 [ 440.276495] should_fail.cold+0x10f/0x159 [ 440.280647] should_failslab+0xdb/0x130 [ 440.284724] kmem_cache_alloc+0x2d7/0x780 [ 440.288886] ? find_held_lock+0x35/0x130 [ 440.292953] ? copy_tree+0x4a2/0x8a0 [ 440.296697] alloc_vfsmnt+0x28/0x7d0 [ 440.300424] clone_mnt+0x70/0xee0 [ 440.303878] ? lock_downgrade+0x740/0x740 [ 440.308034] ? do_raw_spin_unlock+0x16b/0x260 [ 440.312535] copy_tree+0x33b/0x8a0 [ 440.316083] copy_mnt_ns+0x11c/0x8c0 [ 440.319789] ? kmem_cache_alloc+0x611/0x780 [ 440.324107] ? selinux_capable+0x36/0x40 [ 440.328165] create_new_namespaces+0xc9/0x720 [ 440.332665] ? ns_capable_common+0x12c/0x160 [ 440.337076] copy_namespaces+0x284/0x310 [ 440.341132] copy_process.part.0+0x2603/0x6a70 [ 440.345714] ? proc_fail_nth_write+0x7d/0x180 [ 440.350203] ? proc_cwd_link+0x1b0/0x1b0 [ 440.354268] ? __cleanup_sighand+0x50/0x50 [ 440.358495] ? lock_downgrade+0x740/0x740 [ 440.362656] _do_fork+0x19e/0xce0 [ 440.366149] ? fork_idle+0x280/0x280 [ 440.370007] ? fput+0xd4/0x150 [ 440.373225] ? SyS_write+0x15e/0x230 [ 440.376950] SyS_clone+0x37/0x50 [ 440.380325] ? sys_vfork+0x30/0x30 [ 440.383861] do_syscall_64+0x1e8/0x640 [ 440.387751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.392594] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 440.397792] RIP: 0033:0x45a919 [ 440.400976] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 440.408686] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 440.415945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 440.423293] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 440.430555] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 21:31:22 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)={0x10}) r5 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000080)=0x7) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 440.437813] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:22 executing program 5 (fault-call:8 fault-nth:34): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 440.547019] FAULT_INJECTION: forcing a failure. [ 440.547019] name failslab, interval 1, probability 0, space 0, times 0 [ 440.559386] CPU: 1 PID: 17040 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 440.567397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.576759] Call Trace: [ 440.579375] dump_stack+0x142/0x197 [ 440.583020] should_fail.cold+0x10f/0x159 [ 440.587173] should_failslab+0xdb/0x130 [ 440.591201] __kmalloc_track_caller+0x2ec/0x790 [ 440.595882] ? kstrdup_const+0x48/0x60 [ 440.599788] kstrdup+0x3a/0x70 [ 440.602970] kstrdup_const+0x48/0x60 [ 440.606672] alloc_vfsmnt+0xe5/0x7d0 [ 440.610372] clone_mnt+0x70/0xee0 [ 440.613829] ? lock_downgrade+0x740/0x740 [ 440.617972] ? do_raw_spin_unlock+0x16b/0x260 [ 440.622471] copy_tree+0x33b/0x8a0 [ 440.626005] copy_mnt_ns+0x11c/0x8c0 [ 440.629713] ? kmem_cache_alloc+0x611/0x780 [ 440.634026] ? selinux_capable+0x36/0x40 [ 440.638107] create_new_namespaces+0xc9/0x720 [ 440.642615] ? ns_capable_common+0x12c/0x160 [ 440.647710] copy_namespaces+0x284/0x310 [ 440.651901] copy_process.part.0+0x2603/0x6a70 [ 440.656485] ? debug_smp_processor_id+0x1c/0x20 [ 440.661231] ? perf_trace_lock+0x109/0x500 [ 440.665454] ? check_preemption_disabled+0x3c/0x250 [ 440.670491] ? debug_smp_processor_id+0x1c/0x20 [ 440.675179] ? __cleanup_sighand+0x50/0x50 [ 440.679407] ? lock_downgrade+0x740/0x740 [ 440.683569] _do_fork+0x19e/0xce0 [ 440.687022] ? fork_idle+0x280/0x280 [ 440.690740] ? fput+0xd4/0x150 [ 440.693945] ? SyS_write+0x15e/0x230 [ 440.697660] SyS_clone+0x37/0x50 [ 440.701018] ? sys_vfork+0x30/0x30 [ 440.704550] do_syscall_64+0x1e8/0x640 [ 440.708873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.713708] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 440.718881] RIP: 0033:0x45a919 [ 440.722056] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 440.729754] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 440.737033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:22 executing program 5 (fault-call:8 fault-nth:35): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 440.744310] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 440.751578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 440.758851] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 440.814292] FAULT_INJECTION: forcing a failure. [ 440.814292] name failslab, interval 1, probability 0, space 0, times 0 [ 440.825799] CPU: 1 PID: 17046 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 440.833694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.843055] Call Trace: [ 440.845660] dump_stack+0x142/0x197 [ 440.849318] should_fail.cold+0x10f/0x159 [ 440.853497] should_failslab+0xdb/0x130 [ 440.857477] __kmalloc_track_caller+0x2ec/0x790 [ 440.862142] ? kstrdup_const+0x48/0x60 [ 440.866053] kstrdup+0x3a/0x70 [ 440.869269] kstrdup_const+0x48/0x60 [ 440.872996] alloc_vfsmnt+0xe5/0x7d0 [ 440.877330] clone_mnt+0x70/0xee0 [ 440.880800] ? lock_downgrade+0x740/0x740 [ 440.885075] ? do_raw_spin_unlock+0x16b/0x260 [ 440.889599] copy_tree+0x33b/0x8a0 [ 440.893167] copy_mnt_ns+0x11c/0x8c0 [ 440.893178] ? kmem_cache_alloc+0x611/0x780 [ 440.893191] ? selinux_capable+0x36/0x40 [ 440.893207] create_new_namespaces+0xc9/0x720 [ 440.893218] ? ns_capable_common+0x12c/0x160 [ 440.893232] copy_namespaces+0x284/0x310 [ 440.918301] copy_process.part.0+0x2603/0x6a70 [ 440.922924] ? debug_smp_processor_id+0x1c/0x20 [ 440.927615] ? perf_trace_lock+0x109/0x500 [ 440.931872] ? check_preemption_disabled+0x3c/0x250 [ 440.936927] ? debug_smp_processor_id+0x1c/0x20 [ 440.941621] ? __cleanup_sighand+0x50/0x50 [ 440.945873] ? lock_downgrade+0x740/0x740 [ 440.950027] _do_fork+0x19e/0xce0 [ 440.953480] ? fork_idle+0x280/0x280 [ 440.957205] ? fput+0xd4/0x150 [ 440.960387] ? SyS_write+0x15e/0x230 [ 440.964094] SyS_clone+0x37/0x50 [ 440.967457] ? sys_vfork+0x30/0x30 [ 440.970985] do_syscall_64+0x1e8/0x640 [ 440.974854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.979689] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 440.984864] RIP: 0033:0x45a919 [ 440.988048] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 440.995752] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 441.003008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:22 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:22 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000440)="1c48b9e7b75092b2b28b258a011cfa5f3c565443b495c3921ca6272b421e7e50c87fe541c1e1758fdd5aaeaa8c250b9c016742011b5cb89362e6dfefee37d35b027a8a8323f7ae8f94c350dbe6e72c9a2d1612e2752602d0d86f972e1cdfdb3a8546d135be1fc45aa702ffe900ebcc9cf7fb40d2913c14353f9d3b7c6bedecc1b3c485f2d35e4b7be0d907c102a5168a31c722ef732f4c7d09433838bca6d569df9a82d90d298226bc8403e9f3a169acc7483b8b25f2c31e15a5c644ee42e9b6ed3bd883251e9cbffc0c034720869f3359edee357fb4af799eadcc07397146d23e9a0608caa7bcc5f4ed9c7b32ed119e1eba2ca5", 0xf4}], 0x1, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2, &(0x7f0000000280)=""/165, 0xa5}, 0x20010141) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000003c0)) [ 441.010263] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.017515] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 441.024769] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:22 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) close(r3) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="2100001c436569ba29ca1fe1cfc6e6fea9b3469ae01095a284b88a344d08ea9a7dc49c392801c6e6567a1f7be569374a3c23ac170c82f9ffd22e0bbf77e7b12bc6231f8a7097fbb3b4c6e768cd61680a251f911acb7505295a1d475be46f6998548fccc44950ef39f3dc1f5bd5ec6f29dba0b4b3c5120864c0fe5ad212146d6cec659f762bcc1aa550612fee43b152860268516bd3b5433670dc28eaf29ab589925784af7b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r4, 0x2c, "9e85bcbe8e14ea195a7fb024fe6c16a1ba9bc0c2c353c8518056d145cd3c7bd62c0e2b71bb640fa6b02e420f"}, &(0x7f0000000180)=0x34) socket$inet(0x10, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0xf17) unshare(0x40040400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x300, 0x0) syz_open_pts(r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x0, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') 21:31:22 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x3) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:22 executing program 5 (fault-call:8 fault-nth:36): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 441.179839] FAULT_INJECTION: forcing a failure. [ 441.179839] name failslab, interval 1, probability 0, space 0, times 0 [ 441.196475] CPU: 0 PID: 17064 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 441.204403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.213772] Call Trace: [ 441.216383] dump_stack+0x142/0x197 [ 441.220173] should_fail.cold+0x10f/0x159 [ 441.224381] should_failslab+0xdb/0x130 [ 441.228391] kmem_cache_alloc+0x2d7/0x780 [ 441.232572] ? find_held_lock+0x35/0x130 [ 441.236758] ? copy_tree+0x4a2/0x8a0 [ 441.240497] alloc_vfsmnt+0x28/0x7d0 [ 441.244212] clone_mnt+0x70/0xee0 [ 441.247712] ? lock_downgrade+0x740/0x740 [ 441.251982] ? do_raw_spin_unlock+0x16b/0x260 [ 441.256724] copy_tree+0x33b/0x8a0 [ 441.260281] copy_mnt_ns+0x11c/0x8c0 [ 441.263987] ? kmem_cache_alloc+0x611/0x780 [ 441.268393] ? selinux_capable+0x36/0x40 [ 441.272610] create_new_namespaces+0xc9/0x720 [ 441.277101] ? ns_capable_common+0x12c/0x160 [ 441.281514] copy_namespaces+0x284/0x310 [ 441.285627] copy_process.part.0+0x2603/0x6a70 [ 441.290206] ? __schedule+0x7c0/0x1cd0 [ 441.294095] ? trace_hardirqs_on_caller+0x400/0x590 [ 441.299117] ? __cleanup_sighand+0x50/0x50 [ 441.303896] _do_fork+0x19e/0xce0 [ 441.307418] ? fork_idle+0x280/0x280 [ 441.311172] ? fput+0xd4/0x150 [ 441.314379] ? SyS_write+0x15e/0x230 [ 441.318110] SyS_clone+0x37/0x50 [ 441.321486] ? sys_vfork+0x30/0x30 [ 441.325061] do_syscall_64+0x1e8/0x640 [ 441.328977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.333854] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.339052] RIP: 0033:0x45a919 [ 441.342249] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 441.349953] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 441.357229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 441.364509] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.371787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 21:31:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x4, 0x6, 0x81, 0x8, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="408355eda04bc44f976d63c681fc8aaed56634e92b3fe3f00afb72d5bc86eac6671bce8457ae63c9038181c9bfee3809fb3da2db9aa64c868be69a79134a74445dfaabfbd81429c86b7e3ac570fa06a4c3d976f92fe19c3fc61aeb82ef712d1be691472ecf01828a13425fbb0f5576c3cc705dc212c562b7f432d17c", 0x7c}, {&(0x7f00000001c0)="6deff4acab2b049d126d0c9bd49f83", 0xf}, {&(0x7f0000000200)="e7e679f66df5c7f97775c28c31418561f80a239df7a55a0dfa3609397e10a51010c28f097074b5a2b40c47bf9767fe8ceba8c5cc", 0x34}, {&(0x7f00000002c0)="c888108da9ca3ae6df5512112353416e97a88da555c12117e0e58976d2488af78a4bacf137a2e8edbcd8f7c16e10487017c87026be8c212486a2e66cd6138219032f705bb7129e505701f803c221d1", 0x4f}], 0x4, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0xb14}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x95a5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xd8}, 0x2880) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:23 executing program 5 (fault-call:8 fault-nth:37): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 441.379055] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 441.463335] FAULT_INJECTION: forcing a failure. [ 441.463335] name failslab, interval 1, probability 0, space 0, times 0 [ 441.475216] CPU: 1 PID: 17079 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 441.483111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.492480] Call Trace: [ 441.492503] dump_stack+0x142/0x197 [ 441.492524] should_fail.cold+0x10f/0x159 [ 441.498714] should_failslab+0xdb/0x130 [ 441.506830] kmem_cache_alloc+0x2d7/0x780 [ 441.510973] ? find_held_lock+0x35/0x130 [ 441.515132] ? copy_tree+0x4a2/0x8a0 [ 441.518859] alloc_vfsmnt+0x28/0x7d0 [ 441.522592] clone_mnt+0x70/0xee0 [ 441.526039] ? lock_downgrade+0x740/0x740 [ 441.530183] ? do_raw_spin_unlock+0x16b/0x260 [ 441.534673] copy_tree+0x33b/0x8a0 [ 441.538234] copy_mnt_ns+0x11c/0x8c0 [ 441.541943] ? kmem_cache_alloc+0x611/0x780 [ 441.546274] ? selinux_capable+0x36/0x40 [ 441.550337] create_new_namespaces+0xc9/0x720 [ 441.554908] ? ns_capable_common+0x12c/0x160 [ 441.559392] copy_namespaces+0x284/0x310 [ 441.563459] copy_process.part.0+0x2603/0x6a70 [ 441.568032] ? debug_smp_processor_id+0x1c/0x20 [ 441.572697] ? perf_trace_lock+0x109/0x500 [ 441.576926] ? check_preemption_disabled+0x3c/0x250 [ 441.581932] ? debug_smp_processor_id+0x1c/0x20 [ 441.586605] ? __cleanup_sighand+0x50/0x50 [ 441.590836] ? lock_downgrade+0x740/0x740 [ 441.594978] _do_fork+0x19e/0xce0 [ 441.598421] ? fork_idle+0x280/0x280 [ 441.602138] ? fput+0xd4/0x150 [ 441.605316] ? SyS_write+0x15e/0x230 [ 441.609022] SyS_clone+0x37/0x50 [ 441.612385] ? sys_vfork+0x30/0x30 [ 441.615913] do_syscall_64+0x1e8/0x640 [ 441.619796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.624641] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.629814] RIP: 0033:0x45a919 [ 441.632997] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 441.640714] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 441.648059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 441.655316] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.662583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 441.669840] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:23 executing program 5 (fault-call:8 fault-nth:38): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 441.785860] FAULT_INJECTION: forcing a failure. [ 441.785860] name failslab, interval 1, probability 0, space 0, times 0 [ 441.826365] CPU: 1 PID: 17084 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 441.834299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.843667] Call Trace: [ 441.846279] dump_stack+0x142/0x197 [ 441.849932] should_fail.cold+0x10f/0x159 [ 441.854104] should_failslab+0xdb/0x130 [ 441.858265] __kmalloc_track_caller+0x2ec/0x790 [ 441.862952] ? kstrdup_const+0x48/0x60 [ 441.866862] kstrdup+0x3a/0x70 [ 441.870063] kstrdup_const+0x48/0x60 [ 441.873883] alloc_vfsmnt+0xe5/0x7d0 [ 441.878124] clone_mnt+0x70/0xee0 [ 441.881583] ? lock_downgrade+0x740/0x740 [ 441.885739] ? do_raw_spin_unlock+0x16b/0x260 [ 441.890248] copy_tree+0x33b/0x8a0 [ 441.893805] copy_mnt_ns+0x11c/0x8c0 [ 441.897528] ? kmem_cache_alloc+0x611/0x780 [ 441.901869] ? selinux_capable+0x36/0x40 [ 441.905947] create_new_namespaces+0xc9/0x720 [ 441.910452] ? ns_capable_common+0x12c/0x160 [ 441.914880] copy_namespaces+0x284/0x310 [ 441.918953] copy_process.part.0+0x2603/0x6a70 [ 441.923544] ? debug_smp_processor_id+0x1c/0x20 [ 441.928230] ? perf_trace_lock+0x109/0x500 [ 441.932468] ? check_preemption_disabled+0x3c/0x250 [ 441.937501] ? debug_smp_processor_id+0x1c/0x20 [ 441.942191] ? __cleanup_sighand+0x50/0x50 [ 441.946428] ? lock_downgrade+0x740/0x740 [ 441.950593] _do_fork+0x19e/0xce0 [ 441.954050] ? fork_idle+0x280/0x280 [ 441.957769] ? fput+0xd4/0x150 [ 441.960961] ? SyS_write+0x15e/0x230 [ 441.964680] SyS_clone+0x37/0x50 [ 441.968043] ? sys_vfork+0x30/0x30 [ 441.971601] do_syscall_64+0x1e8/0x640 [ 441.975485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.980336] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 441.985523] RIP: 0033:0x45a919 [ 441.988707] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 441.996418] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 442.003687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 442.010952] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.018220] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 442.025486] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000080)=""/228, 0xe4}, {&(0x7f0000000180)=""/176, 0xb0}], 0x2, 0x6e9) close(r2) r4 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000000)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x0, 0x4, 0x0, 0x41c8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10081}, 0x0, 0x0, r6, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x4) 21:31:23 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:23 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'netpci0\x00', {0x6}, 0x400}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000180)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x7f8ec005eba15cba, r2) accept$ax25(r5, &(0x7f00000003c0)={{0x3, @netrom}, [@netrom, @bcast, @rose, @default, @netrom, @bcast, @null, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x20, 0x1, 0x81, 0x0, 0x3f, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0xec4ce9dc55d593e2, @perf_config_ext={0x9, 0x1}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8000}, r6, 0xd, r1, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3cd, 0x0, 0x0, 0x0, 0xfffffffffffffcdd}}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') splice(0xffffffffffffffff, &(0x7f0000000240)=0x40, r0, &(0x7f0000000280)=0x1, 0x400, 0x4) preadv(r7, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:23 executing program 5 (fault-call:8 fault-nth:39): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:23 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 442.223568] FAULT_INJECTION: forcing a failure. [ 442.223568] name failslab, interval 1, probability 0, space 0, times 0 [ 442.247039] CPU: 0 PID: 17099 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 442.254987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.264381] Call Trace: [ 442.267002] dump_stack+0x142/0x197 [ 442.270658] should_fail.cold+0x10f/0x159 [ 442.274821] should_failslab+0xdb/0x130 [ 442.278789] __kmalloc_track_caller+0x2ec/0x790 [ 442.283459] ? kstrdup_const+0x48/0x60 [ 442.287341] kstrdup+0x3a/0x70 [ 442.290527] kstrdup_const+0x48/0x60 [ 442.294233] alloc_vfsmnt+0xe5/0x7d0 [ 442.297939] clone_mnt+0x70/0xee0 [ 442.301385] ? lock_downgrade+0x740/0x740 [ 442.305522] ? do_raw_spin_unlock+0x16b/0x260 [ 442.310020] copy_tree+0x33b/0x8a0 [ 442.313572] copy_mnt_ns+0x11c/0x8c0 [ 442.317274] ? kmem_cache_alloc+0x611/0x780 [ 442.321596] ? selinux_capable+0x36/0x40 [ 442.325655] create_new_namespaces+0xc9/0x720 [ 442.330143] ? ns_capable_common+0x12c/0x160 [ 442.334559] copy_namespaces+0x284/0x310 [ 442.338635] copy_process.part.0+0x2603/0x6a70 [ 442.343220] ? proc_fail_nth_write+0x7d/0x180 [ 442.347791] ? proc_cwd_link+0x1b0/0x1b0 [ 442.351859] ? __cleanup_sighand+0x50/0x50 [ 442.356086] ? lock_downgrade+0x740/0x740 [ 442.360238] _do_fork+0x19e/0xce0 [ 442.363688] ? fork_idle+0x280/0x280 [ 442.367401] ? fput+0xd4/0x150 [ 442.370587] ? SyS_write+0x15e/0x230 [ 442.374302] SyS_clone+0x37/0x50 [ 442.377658] ? sys_vfork+0x30/0x30 [ 442.381320] do_syscall_64+0x1e8/0x640 [ 442.385209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.390063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 442.395248] RIP: 0033:0x45a919 [ 442.398428] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 442.406138] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 442.413425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:24 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x10000) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 442.420793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.428062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 442.435326] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:24 executing program 5 (fault-call:8 fault-nth:40): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 442.568593] FAULT_INJECTION: forcing a failure. [ 442.568593] name failslab, interval 1, probability 0, space 0, times 0 [ 442.588126] CPU: 0 PID: 17117 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 442.596073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.605463] Call Trace: [ 442.608085] dump_stack+0x142/0x197 [ 442.611767] should_fail.cold+0x10f/0x159 [ 442.615953] should_failslab+0xdb/0x130 [ 442.619956] __kmalloc_track_caller+0x2ec/0x790 [ 442.624995] ? kstrdup_const+0x48/0x60 [ 442.628903] kstrdup+0x3a/0x70 [ 442.632110] kstrdup_const+0x48/0x60 [ 442.635835] alloc_vfsmnt+0xe5/0x7d0 [ 442.639564] clone_mnt+0x70/0xee0 [ 442.643028] ? lock_downgrade+0x740/0x740 [ 442.647192] ? do_raw_spin_unlock+0x16b/0x260 [ 442.651711] copy_tree+0x33b/0x8a0 [ 442.655284] copy_mnt_ns+0x11c/0x8c0 [ 442.659099] ? kmem_cache_alloc+0x611/0x780 [ 442.663441] ? selinux_capable+0x36/0x40 [ 442.667526] create_new_namespaces+0xc9/0x720 [ 442.672037] ? ns_capable_common+0x12c/0x160 [ 442.676473] copy_namespaces+0x284/0x310 [ 442.680553] copy_process.part.0+0x2603/0x6a70 [ 442.685152] ? debug_smp_processor_id+0x1c/0x20 [ 442.689829] ? perf_trace_lock+0x109/0x500 [ 442.694074] ? check_preemption_disabled+0x3c/0x250 [ 442.699106] ? debug_smp_processor_id+0x1c/0x20 [ 442.703838] ? __cleanup_sighand+0x50/0x50 [ 442.708088] ? lock_downgrade+0x740/0x740 [ 442.712262] _do_fork+0x19e/0xce0 [ 442.715734] ? fork_idle+0x280/0x280 [ 442.719473] ? fput+0xd4/0x150 [ 442.722676] ? SyS_write+0x15e/0x230 [ 442.726412] SyS_clone+0x37/0x50 [ 442.729789] ? sys_vfork+0x30/0x30 [ 442.733346] do_syscall_64+0x1e8/0x640 [ 442.737237] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.742111] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 442.747410] RIP: 0033:0x45a919 [ 442.750605] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 442.758327] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 442.765605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 442.772886] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.780163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 442.787444] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:24 executing program 5 (fault-call:8 fault-nth:41): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:24 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4, 0x0, @empty}, 0x1c) write$P9_RSTAT(r0, &(0x7f0000000080)={0x4d, 0x7d, 0x1, {0x0, 0x46, 0x3, 0x9, {0x80, 0x2, 0x5}, 0x80000, 0x2, 0x7fffffff, 0x3ff, 0x0, '', 0x0, '', 0x0, '', 0x13, '{\x81vboxnet0)vboxnet1'}}, 0x4d) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x4, 0x2, 0x4, 0x2000, 0x4, {r4, r5/1000+30000}, {0x1, 0x1, 0xff, 0x8, 0xe, 0xb3, "7c901a2b"}, 0x9, 0x2, @offset=0x2, 0x1000, 0x0, r6}) getsockopt$inet_dccp_buf(r7, 0x21, 0x183, &(0x7f0000000180)=""/198, &(0x7f00000002c0)=0xc6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 442.932975] FAULT_INJECTION: forcing a failure. [ 442.932975] name failslab, interval 1, probability 0, space 0, times 0 [ 442.955154] CPU: 1 PID: 17121 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 442.963088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.972446] Call Trace: [ 442.972470] dump_stack+0x142/0x197 [ 442.972494] should_fail.cold+0x10f/0x159 [ 442.972515] should_failslab+0xdb/0x130 [ 442.972529] kmem_cache_alloc+0x2d7/0x780 [ 442.972541] ? find_held_lock+0x35/0x130 [ 442.972553] ? copy_tree+0x4a2/0x8a0 [ 442.972565] alloc_vfsmnt+0x28/0x7d0 [ 442.972577] clone_mnt+0x70/0xee0 [ 443.005889] ? lock_downgrade+0x740/0x740 [ 443.010037] ? do_raw_spin_unlock+0x16b/0x260 [ 443.014523] copy_tree+0x33b/0x8a0 [ 443.018069] copy_mnt_ns+0x11c/0x8c0 [ 443.021768] ? kmem_cache_alloc+0x611/0x780 [ 443.026436] ? selinux_capable+0x36/0x40 [ 443.030488] create_new_namespaces+0xc9/0x720 [ 443.034980] ? ns_capable_common+0x12c/0x160 [ 443.039377] copy_namespaces+0x284/0x310 [ 443.043424] copy_process.part.0+0x2603/0x6a70 [ 443.048003] ? debug_smp_processor_id+0x1c/0x20 [ 443.052655] ? perf_trace_lock+0x109/0x500 [ 443.056882] ? check_preemption_disabled+0x3c/0x250 [ 443.061982] ? debug_smp_processor_id+0x1c/0x20 [ 443.066731] ? __cleanup_sighand+0x50/0x50 [ 443.070950] ? lock_downgrade+0x740/0x740 [ 443.075087] _do_fork+0x19e/0xce0 [ 443.078530] ? fork_idle+0x280/0x280 [ 443.082243] ? fput+0xd4/0x150 [ 443.085422] ? SyS_write+0x15e/0x230 [ 443.089143] SyS_clone+0x37/0x50 [ 443.092495] ? sys_vfork+0x30/0x30 [ 443.096024] do_syscall_64+0x1e8/0x640 [ 443.099902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.104743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 443.109918] RIP: 0033:0x45a919 [ 443.113094] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 443.120801] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 21:31:24 executing program 4 (fault-call:7 fault-nth:0): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:24 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0xfffffffffffffda7, 0x0, 0x127}}], 0x400000000000221, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 443.128073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 443.135326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.142590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 443.149843] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 443.208098] FAULT_INJECTION: forcing a failure. [ 443.208098] name failslab, interval 1, probability 0, space 0, times 0 [ 443.253947] CPU: 1 PID: 17125 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 443.262143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.271512] Call Trace: [ 443.274114] dump_stack+0x142/0x197 [ 443.277752] should_fail.cold+0x10f/0x159 [ 443.281914] should_failslab+0xdb/0x130 [ 443.285920] kmem_cache_alloc_node+0x287/0x780 [ 443.290516] ? get_pid_task+0x98/0x140 [ 443.294424] copy_process.part.0+0x17d5/0x6a70 [ 443.299011] ? debug_smp_processor_id+0x1c/0x20 [ 443.303682] ? perf_trace_lock+0x109/0x500 [ 443.307917] ? check_preemption_disabled+0x3c/0x250 [ 443.312935] ? save_trace+0x290/0x290 [ 443.316736] ? SOFTIRQ_verbose+0x10/0x10 [ 443.320796] ? debug_smp_processor_id+0x1c/0x20 [ 443.325466] ? __f_unlock_pos+0x19/0x20 [ 443.329438] ? find_held_lock+0x35/0x130 [ 443.333507] ? __cleanup_sighand+0x50/0x50 [ 443.337749] ? lock_downgrade+0x740/0x740 [ 443.341900] _do_fork+0x19e/0xce0 [ 443.345365] ? fork_idle+0x280/0x280 [ 443.349090] ? fput+0xd4/0x150 [ 443.352319] ? SyS_write+0x15e/0x230 [ 443.356046] SyS_clone+0x37/0x50 [ 443.359415] ? sys_vfork+0x30/0x30 [ 443.363069] do_syscall_64+0x1e8/0x640 [ 443.366974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.371849] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 443.377041] RIP: 0033:0x45a919 [ 443.380234] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 443.387955] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 443.395235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:25 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 443.402516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.409796] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 443.417081] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:25 executing program 5 (fault-call:8 fault-nth:42): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:25 executing program 4 (fault-call:7 fault-nth:1): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:25 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:25 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x383, 0xf0ffff) [ 443.636947] FAULT_INJECTION: forcing a failure. [ 443.636947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.638388] FAULT_INJECTION: forcing a failure. [ 443.638388] name failslab, interval 1, probability 0, space 0, times 0 [ 443.656316] CPU: 1 PID: 17148 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 443.668143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.677508] Call Trace: [ 443.680107] dump_stack+0x142/0x197 [ 443.683750] should_fail.cold+0x10f/0x159 [ 443.687896] ? __might_sleep+0x93/0xb0 [ 443.691781] __alloc_pages_nodemask+0x1d6/0x7a0 [ 443.696452] ? __alloc_pages_slowpath+0x2930/0x2930 [ 443.701460] ? rcu_read_lock_sched_held+0x110/0x130 [ 443.706510] copy_process.part.0+0x26a/0x6a70 [ 443.711021] ? save_trace+0x290/0x290 [ 443.714818] ? proc_fail_nth_write+0x7d/0x180 [ 443.719313] ? proc_cwd_link+0x1b0/0x1b0 [ 443.723380] ? __f_unlock_pos+0x19/0x20 [ 443.727353] ? find_held_lock+0x35/0x130 [ 443.731425] ? __cleanup_sighand+0x50/0x50 [ 443.735661] ? lock_downgrade+0x740/0x740 [ 443.739827] _do_fork+0x19e/0xce0 [ 443.743283] ? fork_idle+0x280/0x280 [ 443.747015] ? fput+0xd4/0x150 [ 443.750201] ? SyS_write+0x15e/0x230 [ 443.753902] SyS_clone+0x37/0x50 [ 443.757256] ? sys_vfork+0x30/0x30 [ 443.760793] do_syscall_64+0x1e8/0x640 [ 443.764676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.769517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 443.774692] RIP: 0033:0x45a919 [ 443.777873] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 443.785578] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 443.792838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 443.800108] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.807371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 443.814629] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 443.854083] CPU: 0 PID: 17150 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 443.862022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.871406] Call Trace: [ 443.874019] dump_stack+0x142/0x197 [ 443.877684] should_fail.cold+0x10f/0x159 [ 443.881872] should_failslab+0xdb/0x130 [ 443.885973] kmem_cache_alloc+0x2d7/0x780 [ 443.890151] ? find_held_lock+0x35/0x130 [ 443.894409] ? copy_tree+0x4a2/0x8a0 [ 443.898158] alloc_vfsmnt+0x28/0x7d0 21:31:25 executing program 4 (fault-call:7 fault-nth:2): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 443.901904] clone_mnt+0x70/0xee0 [ 443.905399] ? lock_downgrade+0x740/0x740 [ 443.909572] ? do_raw_spin_unlock+0x16b/0x260 [ 443.914108] copy_tree+0x33b/0x8a0 [ 443.917046] FAULT_INJECTION: forcing a failure. [ 443.917046] name failslab, interval 1, probability 0, space 0, times 0 [ 443.917694] copy_mnt_ns+0x11c/0x8c0 [ 443.917719] ? kmem_cache_alloc+0x611/0x780 [ 443.917738] ? selinux_capable+0x36/0x40 [ 443.941032] create_new_namespaces+0xc9/0x720 [ 443.945549] ? ns_capable_common+0x12c/0x160 [ 443.949981] copy_namespaces+0x284/0x310 [ 443.954060] copy_process.part.0+0x2603/0x6a70 [ 443.958680] ? proc_fail_nth_write+0x7d/0x180 [ 443.963197] ? proc_cwd_link+0x1b0/0x1b0 [ 443.967311] ? __cleanup_sighand+0x50/0x50 [ 443.971559] ? lock_downgrade+0x740/0x740 [ 443.975739] _do_fork+0x19e/0xce0 [ 443.979225] ? fork_idle+0x280/0x280 [ 443.982984] ? fput+0xd4/0x150 [ 443.986194] ? SyS_write+0x15e/0x230 [ 443.989932] SyS_clone+0x37/0x50 [ 443.993316] ? sys_vfork+0x30/0x30 [ 443.996871] do_syscall_64+0x1e8/0x640 [ 444.000757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.005616] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 444.010818] RIP: 0033:0x45a919 [ 444.014004] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.021885] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 444.029146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 444.036408] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 444.043673] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 444.050949] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 444.060296] CPU: 1 PID: 17160 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 444.068211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.077576] Call Trace: [ 444.080190] dump_stack+0x142/0x197 [ 444.083839] should_fail.cold+0x10f/0x159 [ 444.088013] should_failslab+0xdb/0x130 [ 444.092006] kmem_cache_alloc+0x2d7/0x780 [ 444.096162] ? creds_are_invalid+0x48/0x110 [ 444.096177] ? __validate_process_creds+0x14c/0x200 [ 444.096194] prepare_creds+0x3c/0x390 [ 444.109766] copy_creds+0x7b/0x4f0 [ 444.109779] ? lockdep_init_map+0x9/0x10 [ 444.109797] copy_process.part.0+0x868/0x6a70 [ 444.109821] ? save_trace+0x290/0x290 [ 444.109832] ? proc_fail_nth_write+0x7d/0x180 [ 444.109842] ? proc_cwd_link+0x1b0/0x1b0 [ 444.134376] ? __f_unlock_pos+0x19/0x20 [ 444.138625] ? __cleanup_sighand+0x50/0x50 [ 444.142883] ? lock_downgrade+0x740/0x740 [ 444.147061] _do_fork+0x19e/0xce0 [ 444.150539] ? fork_idle+0x280/0x280 [ 444.154309] ? fput+0xd4/0x150 [ 444.157518] ? SyS_write+0x15e/0x230 [ 444.161259] SyS_clone+0x37/0x50 [ 444.164742] ? sys_vfork+0x30/0x30 [ 444.168314] do_syscall_64+0x1e8/0x640 [ 444.172215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.177088] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 444.182289] RIP: 0033:0x45a919 [ 444.185487] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.193214] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 21:31:26 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @local}, 0x0, 0x3, 0x0, 0x2}}, {&(0x7f0000000080)=""/126, 0x7e}, &(0x7f0000000000), 0x40}, 0xa0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:26 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000003c0)={r4}, &(0x7f0000000400)=0x14) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xfffc, 0x2, 0x8004, 0x7fff, 0x9, 0x3, 0x1, 0x2, r4}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000002cc672cd406242fd4e6aee7dec579949de3717acc0230f9e271e34114b49325577d117d414c37fd88ce33e49ba70b466282b0602506921f8a025ccd7473359e786205c7b8d95a9b6d96c93dd7f6d3376d76f38fb33d2afcf8bd2067654c1c8b7c0919b9a112b81d3", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r6}, &(0x7f0000000400)=0x14) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r7 = getpid() tkill(r7, 0x9) ustat(0x5, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB="650b3f004da895eb7f69aa6fccbc3a020000007e17e826fa5b2bacedea7aa09094a1a3ac4087696048d77a116fe2b959d72d1c3a18e245ad9d84bfda4a03b0b971fc6a"], 0x47) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r8, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 444.200516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 444.207804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 444.215094] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 444.222409] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:26 executing program 4 (fault-call:7 fault-nth:3): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:26 executing program 5 (fault-call:8 fault-nth:43): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 444.294133] FAULT_INJECTION: forcing a failure. [ 444.294133] name failslab, interval 1, probability 0, space 0, times 0 [ 444.305653] CPU: 0 PID: 17175 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 444.313567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.322951] Call Trace: [ 444.325577] dump_stack+0x142/0x197 [ 444.329266] should_fail.cold+0x10f/0x159 [ 444.333474] should_failslab+0xdb/0x130 [ 444.337482] __kmalloc_track_caller+0x2ec/0x790 [ 444.342201] ? check_preemption_disabled+0x3c/0x250 [ 444.347249] ? prepare_creds+0x3c/0x390 [ 444.351237] ? selinux_cred_prepare+0x49/0xb0 [ 444.355761] kmemdup+0x27/0x60 [ 444.358977] selinux_cred_prepare+0x49/0xb0 [ 444.363316] security_prepare_creds+0x7d/0xb0 [ 444.367928] prepare_creds+0x2d1/0x390 [ 444.371836] copy_creds+0x7b/0x4f0 [ 444.375406] ? lockdep_init_map+0x9/0x10 [ 444.379490] copy_process.part.0+0x868/0x6a70 [ 444.384006] ? debug_smp_processor_id+0x1c/0x20 [ 444.388696] ? perf_trace_lock+0x109/0x500 [ 444.392949] ? check_preemption_disabled+0x3c/0x250 [ 444.397989] ? save_trace+0x290/0x290 [ 444.401805] ? SOFTIRQ_verbose+0x10/0x10 [ 444.405880] ? debug_smp_processor_id+0x1c/0x20 [ 444.410584] ? __f_unlock_pos+0x19/0x20 [ 444.414600] ? __cleanup_sighand+0x50/0x50 [ 444.418859] ? lock_downgrade+0x740/0x740 [ 444.423048] _do_fork+0x19e/0xce0 [ 444.426520] ? fork_idle+0x280/0x280 [ 444.430260] ? fput+0xd4/0x150 [ 444.433448] ? SyS_write+0x15e/0x230 [ 444.437165] SyS_clone+0x37/0x50 [ 444.440527] ? sys_vfork+0x30/0x30 [ 444.444068] do_syscall_64+0x1e8/0x640 [ 444.447945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.452800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 444.457982] RIP: 0033:0x45a919 [ 444.461165] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.468871] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 444.476142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 444.483409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:26 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 444.490675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 444.497947] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:26 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 444.615926] FAULT_INJECTION: forcing a failure. [ 444.615926] name failslab, interval 1, probability 0, space 0, times 0 21:31:26 executing program 4 (fault-call:7 fault-nth:4): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 444.728904] CPU: 0 PID: 17188 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 444.736999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.746378] Call Trace: [ 444.748987] dump_stack+0x142/0x197 [ 444.752647] should_fail.cold+0x10f/0x159 [ 444.756818] should_failslab+0xdb/0x130 [ 444.760821] kmem_cache_alloc+0x2d7/0x780 [ 444.765048] ? find_held_lock+0x35/0x130 [ 444.769131] ? copy_tree+0x4a2/0x8a0 [ 444.772867] alloc_vfsmnt+0x28/0x7d0 [ 444.776598] clone_mnt+0x70/0xee0 [ 444.780063] ? lock_downgrade+0x740/0x740 [ 444.784220] ? do_raw_spin_unlock+0x16b/0x260 [ 444.788731] copy_tree+0x33b/0x8a0 [ 444.792301] copy_mnt_ns+0x11c/0x8c0 [ 444.796037] ? kmem_cache_alloc+0x611/0x780 [ 444.799267] FAULT_INJECTION: forcing a failure. [ 444.799267] name failslab, interval 1, probability 0, space 0, times 0 [ 444.800379] ? selinux_capable+0x36/0x40 [ 444.800399] create_new_namespaces+0xc9/0x720 [ 444.800410] ? ns_capable_common+0x12c/0x160 [ 444.800422] copy_namespaces+0x284/0x310 [ 444.800434] copy_process.part.0+0x2603/0x6a70 [ 444.800452] ? proc_fail_nth_write+0x7d/0x180 [ 444.800460] ? proc_cwd_link+0x1b0/0x1b0 [ 444.800481] ? __cleanup_sighand+0x50/0x50 [ 444.800492] ? lock_downgrade+0x740/0x740 [ 444.800506] _do_fork+0x19e/0xce0 [ 444.800520] ? fork_idle+0x280/0x280 [ 444.859196] ? fput+0xd4/0x150 [ 444.862379] ? SyS_write+0x15e/0x230 [ 444.866087] SyS_clone+0x37/0x50 [ 444.869436] ? sys_vfork+0x30/0x30 [ 444.872973] do_syscall_64+0x1e8/0x640 [ 444.876854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.881691] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 444.886902] RIP: 0033:0x45a919 [ 444.890085] RSP: 002b:00007f4b18fa5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.897790] RAX: ffffffffffffffda RBX: 00007f4b18fa5c90 RCX: 000000000045a919 [ 444.905052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 444.912326] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 444.919594] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fa66d4 [ 444.926851] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 444.934128] CPU: 1 PID: 17193 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 444.942116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.951478] Call Trace: [ 444.954077] dump_stack+0x142/0x197 [ 444.957747] should_fail.cold+0x10f/0x159 [ 444.961918] should_failslab+0xdb/0x130 [ 444.965927] kmem_cache_alloc+0x2d7/0x780 [ 444.970093] ? creds_are_invalid+0x48/0x110 [ 444.974422] ? selinux_is_enabled+0x9/0x50 [ 444.978694] ? creds_are_invalid+0x48/0x110 [ 444.983029] __delayacct_tsk_init+0x20/0x80 [ 444.987360] copy_process.part.0+0x1a6c/0x6a70 [ 444.991955] ? save_trace+0x290/0x290 [ 444.995770] ? proc_fail_nth_write+0x7d/0x180 [ 445.000287] ? proc_cwd_link+0x1b0/0x1b0 [ 445.004351] ? __f_unlock_pos+0x19/0x20 [ 445.008338] ? __cleanup_sighand+0x50/0x50 [ 445.012578] ? lock_downgrade+0x740/0x740 [ 445.016742] _do_fork+0x19e/0xce0 [ 445.020229] ? fork_idle+0x280/0x280 [ 445.023961] ? fput+0xd4/0x150 [ 445.027157] ? SyS_write+0x15e/0x230 [ 445.030877] SyS_clone+0x37/0x50 [ 445.034247] ? sys_vfork+0x30/0x30 [ 445.037791] do_syscall_64+0x1e8/0x640 [ 445.041707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.046561] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.051753] RIP: 0033:0x45a919 [ 445.055035] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.062747] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 445.070012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 445.077275] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.084548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 445.091813] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:26 executing program 4 (fault-call:7 fault-nth:5): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:27 executing program 5 (fault-call:8 fault-nth:44): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 445.238553] FAULT_INJECTION: forcing a failure. [ 445.238553] name failslab, interval 1, probability 0, space 0, times 0 [ 445.297613] CPU: 1 PID: 17201 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 445.305553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.314922] Call Trace: [ 445.317530] dump_stack+0x142/0x197 [ 445.321181] should_fail.cold+0x10f/0x159 [ 445.325352] should_failslab+0xdb/0x130 [ 445.329339] kmem_cache_alloc+0x2d7/0x780 [ 445.333503] ? trace_hardirqs_on_caller+0x400/0x590 [ 445.338539] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.343658] dup_fd+0x85/0xa40 [ 445.347015] copy_process.part.0+0x1b5a/0x6a70 [ 445.351631] ? save_trace+0x290/0x290 [ 445.355467] ? proc_fail_nth_write+0x7d/0x180 [ 445.359972] ? proc_cwd_link+0x1b0/0x1b0 [ 445.364058] ? __cleanup_sighand+0x50/0x50 [ 445.368303] ? lock_downgrade+0x740/0x740 [ 445.372465] _do_fork+0x19e/0xce0 [ 445.375932] ? fork_idle+0x280/0x280 [ 445.379656] ? fput+0xd4/0x150 [ 445.382853] ? SyS_write+0x15e/0x230 [ 445.386579] SyS_clone+0x37/0x50 [ 445.389952] ? sys_vfork+0x30/0x30 [ 445.393497] do_syscall_64+0x1e8/0x640 [ 445.397387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.402243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.407434] RIP: 0033:0x45a919 [ 445.410633] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.418366] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 445.425643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 445.432919] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.440195] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 21:31:27 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sendto$rose(r5, &(0x7f0000000000), 0x0, 0x40040, 0x0, 0x0) close(r1) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 445.447472] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:27 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) splice(r4, 0x0, r1, 0x0, 0x4ecff8bc, 0x0) 21:31:27 executing program 3: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xf8, 0x75, 0x2, {0xed, "38b9a93517733f77f8b2c0f890dd76fdbab757fd3c183f5aa891eb13fbb4c9be8330515819a7d67e4c454fa9e5c6d38b2f860691e1f36d9ead54f2995c4105e06eeb7d35c44d751d4b5766462dff9a39ac80dbb6a808278eefc2364e672ddfb5cb5dac84ed73ea1c52747b3c5497a6edf2751421f8663247c2285aebcd7090ae7459efe89369ef682e39cb59c884d393824926c44f065c4225a42acc4331a9a109eb0e6d788927fb093bd45d4e8ef029c9396178cd010c3db664e40156959d6602af7ab0a78f10666a2ca2db76ee4470b5275f363364fb46312d9d77f52b65f35da1e080bafb76abe969de0180"}}, 0xf8) shmget(0x0, 0x1000, 0x8, &(0x7f0000002000/0x1000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='K', 0x1, r2) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)='K', 0x1, r3) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x7343f203e1a551c6) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fdatasync(r1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000040)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, {0x306, @remote}, 0x40, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 'veth1\x00'}) [ 445.541060] FAULT_INJECTION: forcing a failure. [ 445.541060] name failslab, interval 1, probability 0, space 0, times 0 [ 445.567071] CPU: 0 PID: 17211 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 445.575045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.584429] Call Trace: [ 445.587051] dump_stack+0x142/0x197 [ 445.590716] should_fail.cold+0x10f/0x159 [ 445.594898] should_failslab+0xdb/0x130 [ 445.599936] kmem_cache_alloc+0x2d7/0x780 [ 445.604147] ? find_held_lock+0x35/0x130 [ 445.608251] ? copy_tree+0x4a2/0x8a0 [ 445.612007] alloc_vfsmnt+0x28/0x7d0 [ 445.615868] clone_mnt+0x70/0xee0 [ 445.619342] ? lock_downgrade+0x740/0x740 [ 445.623510] ? do_raw_spin_unlock+0x16b/0x260 [ 445.628044] copy_tree+0x33b/0x8a0 [ 445.631628] copy_mnt_ns+0x11c/0x8c0 [ 445.635355] ? kmem_cache_alloc+0x611/0x780 [ 445.639686] ? selinux_capable+0x36/0x40 [ 445.643765] create_new_namespaces+0xc9/0x720 [ 445.648266] ? ns_capable_common+0x12c/0x160 [ 445.652690] copy_namespaces+0x284/0x310 [ 445.656762] copy_process.part.0+0x2603/0x6a70 [ 445.661360] ? debug_smp_processor_id+0x1c/0x20 [ 445.666035] ? perf_trace_lock+0x109/0x500 [ 445.670263] ? check_preemption_disabled+0x3c/0x250 [ 445.675276] ? debug_smp_processor_id+0x1c/0x20 [ 445.679962] ? __cleanup_sighand+0x50/0x50 [ 445.684203] ? lock_downgrade+0x740/0x740 [ 445.688375] _do_fork+0x19e/0xce0 [ 445.691835] ? fork_idle+0x280/0x280 [ 445.695546] ? fput+0xd4/0x150 [ 445.698729] ? SyS_write+0x15e/0x230 [ 445.702602] SyS_clone+0x37/0x50 [ 445.705966] ? sys_vfork+0x30/0x30 [ 445.709525] do_syscall_64+0x1e8/0x640 [ 445.713424] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.718282] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.723461] RIP: 0033:0x45a919 [ 445.726640] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.734356] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 21:31:27 executing program 4 (fault-call:7 fault-nth:6): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 445.741639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 445.748913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.756214] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 445.763476] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:27 executing program 5 (fault-call:8 fault-nth:45): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 445.824634] FAULT_INJECTION: forcing a failure. [ 445.824634] name failslab, interval 1, probability 0, space 0, times 0 [ 445.845993] CPU: 1 PID: 17223 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 445.853944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.863324] Call Trace: [ 445.866142] dump_stack+0x142/0x197 [ 445.869982] should_fail.cold+0x10f/0x159 [ 445.872385] FAULT_INJECTION: forcing a failure. [ 445.872385] name failslab, interval 1, probability 0, space 0, times 0 [ 445.874179] should_failslab+0xdb/0x130 [ 445.874201] kmem_cache_alloc_trace+0x2e9/0x790 [ 445.874222] ? lock_downgrade+0x740/0x740 [ 445.874242] alloc_fdtable+0x7f/0x280 [ 445.874257] dup_fd+0x693/0xa40 [ 445.874283] copy_process.part.0+0x1b5a/0x6a70 [ 445.874310] ? debug_smp_processor_id+0x1c/0x20 [ 445.914886] ? perf_trace_lock+0x109/0x500 [ 445.919232] ? check_preemption_disabled+0x3c/0x250 [ 445.924265] ? save_trace+0x290/0x290 [ 445.928066] ? SOFTIRQ_verbose+0x10/0x10 [ 445.932140] ? debug_smp_processor_id+0x1c/0x20 [ 445.936914] ? __cleanup_sighand+0x50/0x50 [ 445.941159] ? lock_downgrade+0x740/0x740 [ 445.945329] _do_fork+0x19e/0xce0 [ 445.948786] ? fork_idle+0x280/0x280 [ 445.952516] ? fput+0xd4/0x150 [ 445.955742] ? SyS_write+0x15e/0x230 [ 445.959459] SyS_clone+0x37/0x50 [ 445.962821] ? sys_vfork+0x30/0x30 [ 445.966375] do_syscall_64+0x1e8/0x640 [ 445.970271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.975133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.980353] RIP: 0033:0x45a919 [ 445.983534] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.991346] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 445.998615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 446.005962] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.013231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 446.020499] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 446.028198] CPU: 0 PID: 17228 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 446.036107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.045896] Call Trace: [ 446.048500] dump_stack+0x142/0x197 [ 446.052142] should_fail.cold+0x10f/0x159 [ 446.056290] should_failslab+0xdb/0x130 [ 446.060261] __kmalloc_track_caller+0x2ec/0x790 [ 446.064942] ? kstrdup_const+0x48/0x60 [ 446.068833] kstrdup+0x3a/0x70 [ 446.072030] kstrdup_const+0x48/0x60 [ 446.075734] alloc_vfsmnt+0xe5/0x7d0 [ 446.079456] clone_mnt+0x70/0xee0 [ 446.082907] ? lock_downgrade+0x740/0x740 [ 446.087059] ? do_raw_spin_unlock+0x16b/0x260 [ 446.091564] copy_tree+0x33b/0x8a0 [ 446.095108] copy_mnt_ns+0x11c/0x8c0 [ 446.098812] ? kmem_cache_alloc+0x611/0x780 [ 446.103130] ? selinux_capable+0x36/0x40 [ 446.107198] create_new_namespaces+0xc9/0x720 [ 446.111687] ? ns_capable_common+0x12c/0x160 [ 446.116190] copy_namespaces+0x284/0x310 [ 446.120269] copy_process.part.0+0x2603/0x6a70 [ 446.124849] ? debug_smp_processor_id+0x1c/0x20 [ 446.129694] ? perf_trace_lock+0x109/0x500 [ 446.133921] ? check_preemption_disabled+0x3c/0x250 [ 446.138941] ? debug_smp_processor_id+0x1c/0x20 [ 446.143624] ? __cleanup_sighand+0x50/0x50 [ 446.147851] ? lock_downgrade+0x740/0x740 [ 446.152009] _do_fork+0x19e/0xce0 [ 446.155463] ? fork_idle+0x280/0x280 [ 446.159287] ? fput+0xd4/0x150 [ 446.162474] ? SyS_write+0x15e/0x230 [ 446.166183] SyS_clone+0x37/0x50 [ 446.169540] ? sys_vfork+0x30/0x30 [ 446.173077] do_syscall_64+0x1e8/0x640 [ 446.176952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.181798] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.186981] RIP: 0033:0x45a919 [ 446.190169] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.197874] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 446.205141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 446.212412] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:28 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r7}}, 0xfffffe65) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 446.219681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 446.226953] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:28 executing program 5 (fault-call:8 fault-nth:46): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:28 executing program 4 (fault-call:7 fault-nth:7): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 446.328040] FAULT_INJECTION: forcing a failure. [ 446.328040] name failslab, interval 1, probability 0, space 0, times 0 [ 446.371412] CPU: 0 PID: 17239 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 446.379355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.388737] Call Trace: [ 446.391366] dump_stack+0x142/0x197 [ 446.395043] should_fail.cold+0x10f/0x159 [ 446.399243] should_failslab+0xdb/0x130 [ 446.403253] kmem_cache_alloc+0x2d7/0x780 [ 446.407413] ? find_held_lock+0x35/0x130 [ 446.411615] ? copy_tree+0x4a2/0x8a0 [ 446.411633] alloc_vfsmnt+0x28/0x7d0 [ 446.411648] clone_mnt+0x70/0xee0 [ 446.411660] ? lock_downgrade+0x740/0x740 [ 446.411762] ? do_raw_spin_unlock+0x16b/0x260 [ 446.411782] copy_tree+0x33b/0x8a0 [ 446.411809] copy_mnt_ns+0x11c/0x8c0 [ 446.438646] ? kmem_cache_alloc+0x611/0x780 [ 446.442988] ? selinux_capable+0x36/0x40 [ 446.443012] create_new_namespaces+0xc9/0x720 [ 446.443029] ? ns_capable_common+0x12c/0x160 [ 446.443050] copy_namespaces+0x284/0x310 [ 446.443073] copy_process.part.0+0x2603/0x6a70 [ 446.443101] ? proc_fail_nth_write+0x7d/0x180 21:31:28 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000000)=0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0x9, 0x0, 0x80000000, 0xd0a, 0x6, 0x1ff}) 21:31:28 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) socket(0x9, 0x6, 0xff) [ 446.451654] ? proc_cwd_link+0x1b0/0x1b0 [ 446.473301] ? __cleanup_sighand+0x50/0x50 [ 446.477572] ? lock_downgrade+0x740/0x740 [ 446.481757] _do_fork+0x19e/0xce0 [ 446.485240] ? fork_idle+0x280/0x280 [ 446.488990] ? fput+0xd4/0x150 [ 446.492213] ? SyS_write+0x15e/0x230 [ 446.495962] SyS_clone+0x37/0x50 [ 446.499358] ? sys_vfork+0x30/0x30 [ 446.502927] do_syscall_64+0x1e8/0x640 [ 446.506837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.511892] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.517114] RIP: 0033:0x45a919 21:31:28 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0x8, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsetxattr$security_ima(r3, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "88c2"}, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) preadv(r2, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 446.520326] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.528077] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 446.535373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 446.542673] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.549974] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 446.557261] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 446.619678] FAULT_INJECTION: forcing a failure. [ 446.619678] name failslab, interval 1, probability 0, space 0, times 0 [ 446.631163] CPU: 0 PID: 17259 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 446.639077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.648450] Call Trace: [ 446.651064] dump_stack+0x142/0x197 [ 446.654754] should_fail.cold+0x10f/0x159 [ 446.658990] should_failslab+0xdb/0x130 [ 446.662975] kmem_cache_alloc_trace+0x2e9/0x790 [ 446.667659] ? lock_downgrade+0x740/0x740 [ 446.671809] alloc_fdtable+0x7f/0x280 [ 446.675619] dup_fd+0x693/0xa40 [ 446.678947] copy_process.part.0+0x1b5a/0x6a70 [ 446.683552] ? debug_smp_processor_id+0x1c/0x20 [ 446.688236] ? perf_trace_lock+0x109/0x500 [ 446.692515] ? check_preemption_disabled+0x3c/0x250 [ 446.697536] ? save_trace+0x290/0x290 [ 446.701340] ? SOFTIRQ_verbose+0x10/0x10 [ 446.705408] ? debug_smp_processor_id+0x1c/0x20 [ 446.710088] ? __cleanup_sighand+0x50/0x50 [ 446.714322] ? lock_downgrade+0x740/0x740 [ 446.718468] _do_fork+0x19e/0xce0 [ 446.721919] ? fork_idle+0x280/0x280 [ 446.725630] ? fput+0xd4/0x150 [ 446.728819] ? SyS_write+0x15e/0x230 [ 446.732555] SyS_clone+0x37/0x50 [ 446.735933] ? sys_vfork+0x30/0x30 [ 446.739482] do_syscall_64+0x1e8/0x640 [ 446.743364] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.748215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.753405] RIP: 0033:0x45a919 [ 446.756847] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 21:31:28 executing program 5 (fault-call:8 fault-nth:47): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 446.764559] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 446.771829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 446.779099] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.786364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 446.793648] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:28 executing program 4 (fault-call:7 fault-nth:8): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 446.883483] FAULT_INJECTION: forcing a failure. [ 446.883483] name failslab, interval 1, probability 0, space 0, times 0 [ 446.896024] FAULT_INJECTION: forcing a failure. [ 446.896024] name failslab, interval 1, probability 0, space 0, times 0 [ 446.896120] CPU: 0 PID: 17269 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 446.915360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.924745] Call Trace: [ 446.927361] dump_stack+0x142/0x197 [ 446.931034] should_fail.cold+0x10f/0x159 [ 446.935207] should_failslab+0xdb/0x130 [ 446.939213] kmem_cache_alloc_node_trace+0x280/0x770 [ 446.944335] ? kasan_unpoison_shadow+0x35/0x50 [ 446.948919] __kmalloc_node+0x3d/0x80 [ 446.952728] kvmalloc_node+0x4e/0xe0 [ 446.956453] alloc_fdtable+0x13b/0x280 [ 446.960364] dup_fd+0x693/0xa40 [ 446.963672] copy_process.part.0+0x1b5a/0x6a70 [ 446.968256] ? debug_smp_processor_id+0x1c/0x20 [ 446.972929] ? perf_trace_lock+0x109/0x500 [ 446.977169] ? check_preemption_disabled+0x3c/0x250 [ 446.982181] ? save_trace+0x290/0x290 [ 446.985995] ? SOFTIRQ_verbose+0x10/0x10 [ 446.990057] ? debug_smp_processor_id+0x1c/0x20 [ 446.994761] ? __cleanup_sighand+0x50/0x50 [ 446.998999] ? lock_downgrade+0x740/0x740 [ 447.003151] _do_fork+0x19e/0xce0 [ 447.006605] ? fork_idle+0x280/0x280 [ 447.011111] ? fput+0xd4/0x150 [ 447.014307] ? SyS_write+0x15e/0x230 [ 447.018023] SyS_clone+0x37/0x50 [ 447.021417] ? sys_vfork+0x30/0x30 [ 447.024977] do_syscall_64+0x1e8/0x640 [ 447.028868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.033730] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.038937] RIP: 0033:0x45a919 [ 447.042122] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.049829] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 447.057102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 447.064368] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.071641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 447.078917] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 447.087538] CPU: 1 PID: 17267 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 447.095463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.104834] Call Trace: [ 447.107449] dump_stack+0x142/0x197 [ 447.111105] should_fail.cold+0x10f/0x159 [ 447.111123] should_failslab+0xdb/0x130 [ 447.111139] __kmalloc_track_caller+0x2ec/0x790 [ 447.123928] ? kstrdup_const+0x48/0x60 [ 447.127807] kstrdup+0x3a/0x70 [ 447.130989] kstrdup_const+0x48/0x60 [ 447.134688] alloc_vfsmnt+0xe5/0x7d0 [ 447.138393] clone_mnt+0x70/0xee0 [ 447.141835] ? lock_downgrade+0x740/0x740 [ 447.145971] ? do_raw_spin_unlock+0x16b/0x260 [ 447.150453] copy_tree+0x33b/0x8a0 [ 447.153987] copy_mnt_ns+0x11c/0x8c0 [ 447.157687] ? kmem_cache_alloc+0x611/0x780 [ 447.162000] ? selinux_capable+0x36/0x40 [ 447.166052] create_new_namespaces+0xc9/0x720 [ 447.170562] ? ns_capable_common+0x12c/0x160 [ 447.174961] copy_namespaces+0x284/0x310 [ 447.179009] copy_process.part.0+0x2603/0x6a70 [ 447.183588] ? debug_smp_processor_id+0x1c/0x20 [ 447.188247] ? perf_trace_lock+0x109/0x500 [ 447.192481] ? check_preemption_disabled+0x3c/0x250 [ 447.197504] ? debug_smp_processor_id+0x1c/0x20 [ 447.202172] ? __cleanup_sighand+0x50/0x50 [ 447.206394] ? lock_downgrade+0x740/0x740 [ 447.210546] _do_fork+0x19e/0xce0 [ 447.213992] ? fork_idle+0x280/0x280 [ 447.217699] ? fput+0xd4/0x150 [ 447.220879] ? SyS_write+0x15e/0x230 [ 447.224583] SyS_clone+0x37/0x50 [ 447.227934] ? sys_vfork+0x30/0x30 [ 447.232785] do_syscall_64+0x1e8/0x640 [ 447.236662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.241614] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.246788] RIP: 0033:0x45a919 [ 447.250096] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.257793] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 447.265050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 447.272306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:29 executing program 4 (fault-call:7 fault-nth:9): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:29 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1, 0x10001, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 447.279576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 447.286836] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:29 executing program 5 (fault-call:8 fault-nth:48): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:29 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000001c0)=0x20) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:31:29 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007740)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/70, 0x46}, {&(0x7f0000000240)=""/186, 0xba}], 0x6, &(0x7f00000013c0)=""/220, 0xdc}, 0x9}, {{&(0x7f00000014c0)=@ipx, 0x80, &(0x7f0000001800)=[{&(0x7f00000015c0)=""/221, 0xdd}, {&(0x7f00000016c0)=""/66, 0x42}, {&(0x7f0000001740)=""/139, 0x8b}], 0x3, &(0x7f0000001840)=""/62, 0x3e}, 0xfff}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001880)=""/124, 0x7c}, {&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f00000019c0)=""/29, 0x1d}, {&(0x7f0000001a00)=""/178, 0xb2}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/230, 0xe6}], 0x6, &(0x7f0000002c40)=""/105, 0x69}, 0x800000}, {{&(0x7f0000002cc0)=@isdn, 0x80, &(0x7f0000003100)=[{&(0x7f0000002d40)=""/218, 0xda}, {&(0x7f0000002e40)=""/246, 0xf6}, {&(0x7f0000002f40)=""/222, 0xde}, {&(0x7f0000003040)=""/182, 0xb6}], 0x4, &(0x7f0000003180)=""/207, 0xcf}, 0x4}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/163, 0xa3}, {&(0x7f0000005340)=""/77, 0x4d}, {&(0x7f00000053c0)=""/245, 0xf5}, {&(0x7f00000054c0)=""/100, 0x64}], 0x6, &(0x7f00000055c0)=""/169, 0xa9}, 0x16b9}, {{&(0x7f0000005680)=@can, 0x80, &(0x7f0000006700)=[{&(0x7f0000005700)=""/4096, 0x1000}], 0x1, &(0x7f0000006740)=""/4096, 0x1000}, 0x7f}], 0x6, 0x101, &(0x7f00000078c0)={0x0, 0x989680}) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 447.417572] FAULT_INJECTION: forcing a failure. [ 447.417572] name failslab, interval 1, probability 0, space 0, times 0 [ 447.461980] CPU: 1 PID: 17281 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 447.469917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.479293] Call Trace: [ 447.481913] dump_stack+0x142/0x197 [ 447.485582] should_fail.cold+0x10f/0x159 [ 447.489774] should_failslab+0xdb/0x130 [ 447.493783] kmem_cache_alloc+0x2d7/0x780 [ 447.497961] ? dup_fd+0x533/0xa40 [ 447.501451] copy_fs_struct+0x43/0x2d0 [ 447.504564] FAULT_INJECTION: forcing a failure. [ 447.504564] name failslab, interval 1, probability 0, space 0, times 0 [ 447.505358] copy_process.part.0+0x3974/0x6a70 [ 447.505381] ? save_trace+0x290/0x290 [ 447.505392] ? proc_fail_nth_write+0x7d/0x180 [ 447.505402] ? proc_cwd_link+0x1b0/0x1b0 [ 447.505425] ? __cleanup_sighand+0x50/0x50 [ 447.505434] ? lock_downgrade+0x740/0x740 [ 447.505450] _do_fork+0x19e/0xce0 [ 447.545505] ? fork_idle+0x280/0x280 [ 447.549283] ? fput+0xd4/0x150 [ 447.552505] ? SyS_write+0x15e/0x230 [ 447.556226] SyS_clone+0x37/0x50 [ 447.560715] ? sys_vfork+0x30/0x30 [ 447.564251] do_syscall_64+0x1e8/0x640 [ 447.568128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.572980] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.578177] RIP: 0033:0x45a919 [ 447.581371] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.589088] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 447.596382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 447.603650] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.610912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 447.618179] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 447.625467] CPU: 0 PID: 17289 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 447.633379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.642760] Call Trace: [ 447.645369] dump_stack+0x142/0x197 [ 447.649035] should_fail.cold+0x10f/0x159 [ 447.653234] should_failslab+0xdb/0x130 [ 447.657207] kmem_cache_alloc+0x2d7/0x780 [ 447.661353] ? retire_userns_sysctls+0x90/0x90 [ 447.665952] copy_pid_ns+0x1af/0xa50 [ 447.669680] create_new_namespaces+0x267/0x720 [ 447.674414] copy_namespaces+0x284/0x310 [ 447.678478] copy_process.part.0+0x2603/0x6a70 [ 447.683112] ? proc_fail_nth_write+0x7d/0x180 [ 447.687603] ? proc_cwd_link+0x1b0/0x1b0 [ 447.691672] ? __cleanup_sighand+0x50/0x50 [ 447.695926] ? lock_downgrade+0x740/0x740 [ 447.700115] _do_fork+0x19e/0xce0 [ 447.703601] ? fork_idle+0x280/0x280 [ 447.707370] ? fput+0xd4/0x150 [ 447.710586] ? SyS_write+0x15e/0x230 [ 447.714315] SyS_clone+0x37/0x50 [ 447.717672] ? sys_vfork+0x30/0x30 [ 447.721208] do_syscall_64+0x1e8/0x640 [ 447.725088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.729952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.735136] RIP: 0033:0x45a919 [ 447.738331] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.746053] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 447.753318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:29 executing program 4 (fault-call:7 fault-nth:10): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 447.760592] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.767872] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 447.775148] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 447.809771] FAULT_INJECTION: forcing a failure. [ 447.809771] name failslab, interval 1, probability 0, space 0, times 0 [ 447.823695] CPU: 1 PID: 17302 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 447.831614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.840963] Call Trace: [ 447.843547] dump_stack+0x142/0x197 [ 447.847192] should_fail.cold+0x10f/0x159 [ 447.851345] should_failslab+0xdb/0x130 [ 447.855327] kmem_cache_alloc+0x2d7/0x780 [ 447.859475] ? dup_fd+0x533/0xa40 [ 447.862945] copy_fs_struct+0x43/0x2d0 [ 447.866827] copy_process.part.0+0x3974/0x6a70 [ 447.871414] ? debug_smp_processor_id+0x1c/0x20 [ 447.876079] ? perf_trace_lock+0x109/0x500 [ 447.880304] ? check_preemption_disabled+0x3c/0x250 [ 447.885323] ? save_trace+0x290/0x290 [ 447.889113] ? SOFTIRQ_verbose+0x10/0x10 [ 447.893159] ? debug_smp_processor_id+0x1c/0x20 [ 447.897847] ? __cleanup_sighand+0x50/0x50 [ 447.902074] ? lock_downgrade+0x740/0x740 [ 447.906229] _do_fork+0x19e/0xce0 [ 447.909684] ? fork_idle+0x280/0x280 [ 447.913399] ? fput+0xd4/0x150 [ 447.916592] ? SyS_write+0x15e/0x230 [ 447.920296] SyS_clone+0x37/0x50 [ 447.923647] ? sys_vfork+0x30/0x30 [ 447.927180] do_syscall_64+0x1e8/0x640 [ 447.931055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.935917] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 447.941220] RIP: 0033:0x45a919 [ 447.944406] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.952106] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 21:31:29 executing program 4 (fault-call:7 fault-nth:11): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:29 executing program 5 (fault-call:8 fault-nth:49): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 447.959378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 447.966658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.973936] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 447.981197] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 448.068309] FAULT_INJECTION: forcing a failure. [ 448.068309] name failslab, interval 1, probability 0, space 0, times 0 [ 448.073784] FAULT_INJECTION: forcing a failure. [ 448.073784] name failslab, interval 1, probability 0, space 0, times 0 [ 448.086884] CPU: 1 PID: 17308 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 448.098812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.108177] Call Trace: [ 448.110777] dump_stack+0x142/0x197 [ 448.114422] should_fail.cold+0x10f/0x159 [ 448.118572] should_failslab+0xdb/0x130 [ 448.122534] kmem_cache_alloc+0x2d7/0x780 [ 448.126671] ? _raw_spin_unlock_irq+0x28/0x90 [ 448.131175] ? trace_hardirqs_on_caller+0x400/0x590 [ 448.136205] copy_process.part.0+0x1cd5/0x6a70 [ 448.140804] ? debug_smp_processor_id+0x1c/0x20 [ 448.145484] ? perf_trace_lock+0x109/0x500 [ 448.149712] ? check_preemption_disabled+0x3c/0x250 [ 448.154722] ? save_trace+0x290/0x290 [ 448.158510] ? SOFTIRQ_verbose+0x10/0x10 [ 448.162557] ? debug_smp_processor_id+0x1c/0x20 [ 448.167221] ? __cleanup_sighand+0x50/0x50 [ 448.171444] ? lock_downgrade+0x740/0x740 [ 448.175632] _do_fork+0x19e/0xce0 [ 448.179112] ? fork_idle+0x280/0x280 [ 448.182836] ? fput+0xd4/0x150 [ 448.186021] ? SyS_write+0x15e/0x230 [ 448.189729] SyS_clone+0x37/0x50 [ 448.193100] ? sys_vfork+0x30/0x30 [ 448.196628] do_syscall_64+0x1e8/0x640 [ 448.200509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.205348] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.210521] RIP: 0033:0x45a919 [ 448.213700] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.221411] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 448.228666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 448.235926] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.243193] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 448.251335] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 448.259010] CPU: 0 PID: 17309 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 448.266926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.276378] Call Trace: [ 448.278971] dump_stack+0x142/0x197 [ 448.282616] should_fail.cold+0x10f/0x159 [ 448.286792] should_failslab+0xdb/0x130 [ 448.290763] kmem_cache_alloc_trace+0x2e9/0x790 [ 448.295425] ? kmem_cache_alloc+0x611/0x780 [ 448.299754] copy_pid_ns+0x1f5/0xa50 [ 448.303473] create_new_namespaces+0x267/0x720 [ 448.308075] copy_namespaces+0x284/0x310 [ 448.312138] copy_process.part.0+0x2603/0x6a70 [ 448.316721] ? debug_smp_processor_id+0x1c/0x20 [ 448.321385] ? perf_trace_lock+0x109/0x500 [ 448.325614] ? check_preemption_disabled+0x3c/0x250 [ 448.330631] ? debug_smp_processor_id+0x1c/0x20 [ 448.335313] ? __cleanup_sighand+0x50/0x50 [ 448.339542] ? lock_downgrade+0x740/0x740 [ 448.343698] _do_fork+0x19e/0xce0 [ 448.347163] ? fork_idle+0x280/0x280 [ 448.350879] ? fput+0xd4/0x150 [ 448.354067] ? SyS_write+0x15e/0x230 [ 448.357785] SyS_clone+0x37/0x50 [ 448.361270] ? sys_vfork+0x30/0x30 [ 448.364850] do_syscall_64+0x1e8/0x640 [ 448.368744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.373733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.378948] RIP: 0033:0x45a919 [ 448.382141] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.389859] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 448.397138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 448.404404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.411670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 448.418939] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:30 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x3, 0x0, 0xb1cf428f320fa7f5, 0x0, 0x0, 0x400}, 0x0, 0x2, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000003c0)={r7}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r7, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x67f5, 0x1, 0x9, 0x960a, 0xf124, 0x7fffffff, 0x901, r8}, &(0x7f0000000100)=0x20) 21:31:30 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000001c0)=0x20) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:31:30 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x109000) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000080)={0x6, 0x1f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:30 executing program 4 (fault-call:7 fault-nth:12): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000200)=0x54) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x242202, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800081}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x402, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1, 0x7, 0x9, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x28002009}, 0x24000081) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x9, 0x4) 21:31:30 executing program 5 (fault-call:8 fault-nth:50): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 448.615101] FAULT_INJECTION: forcing a failure. [ 448.615101] name failslab, interval 1, probability 0, space 0, times 0 [ 448.630426] FAULT_INJECTION: forcing a failure. [ 448.630426] name failslab, interval 1, probability 0, space 0, times 0 [ 448.647234] CPU: 1 PID: 17332 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 448.655183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.664583] Call Trace: [ 448.667197] dump_stack+0x142/0x197 [ 448.670854] should_fail.cold+0x10f/0x159 [ 448.675028] should_failslab+0xdb/0x130 [ 448.679019] kmem_cache_alloc+0x2d7/0x780 [ 448.683179] ? lockdep_init_map+0x9/0x10 [ 448.687260] ? copy_pid_ns+0x4f/0xa50 [ 448.691080] alloc_pid+0x5d/0xc70 [ 448.694555] ? copy_thread_tls+0x3c8/0x7a0 [ 448.698815] copy_process.part.0+0x272f/0x6a70 [ 448.703422] ? proc_fail_nth_write+0x7d/0x180 [ 448.708149] ? proc_cwd_link+0x1b0/0x1b0 [ 448.712240] ? __cleanup_sighand+0x50/0x50 [ 448.716519] ? lock_downgrade+0x740/0x740 [ 448.720710] _do_fork+0x19e/0xce0 [ 448.724203] ? fork_idle+0x280/0x280 [ 448.727936] ? fput+0xd4/0x150 [ 448.731153] ? SyS_write+0x15e/0x230 [ 448.734884] SyS_clone+0x37/0x50 [ 448.738254] ? sys_vfork+0x30/0x30 [ 448.741800] do_syscall_64+0x1e8/0x640 [ 448.745701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.750562] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 448.755753] RIP: 0033:0x45a919 [ 448.758936] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.766655] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 448.773919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 448.781194] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.788455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 448.795718] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 448.803006] CPU: 0 PID: 17330 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 448.810914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.820292] Call Trace: [ 448.822901] dump_stack+0x142/0x197 [ 448.826544] should_fail.cold+0x10f/0x159 [ 448.830695] should_failslab+0xdb/0x130 [ 448.834854] kmem_cache_alloc+0x2d7/0x780 [ 448.839034] ? selinux_capable+0x36/0x40 [ 448.843131] create_new_namespaces+0x34/0x720 [ 448.847655] ? ns_capable_common+0x12c/0x160 [ 448.852065] copy_namespaces+0x284/0x310 [ 448.856138] copy_process.part.0+0x2603/0x6a70 [ 448.860863] ? proc_fail_nth_write+0x7d/0x180 [ 448.865400] ? proc_cwd_link+0x1b0/0x1b0 [ 448.869537] ? __cleanup_sighand+0x50/0x50 [ 448.873803] ? lock_downgrade+0x740/0x740 [ 448.877997] _do_fork+0x19e/0xce0 [ 448.881521] ? fork_idle+0x280/0x280 [ 448.885267] ? fput+0xd4/0x150 [ 448.888602] ? SyS_write+0x15e/0x230 [ 448.892389] SyS_clone+0x37/0x50 [ 448.895794] ? sys_vfork+0x30/0x30 [ 448.899333] do_syscall_64+0x1e8/0x640 [ 448.903222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.908136] entry_SYSCALL_64_after_hwframe+0x42/0xb7 21:31:30 executing program 4 (fault-call:7 fault-nth:13): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 448.913411] RIP: 0033:0x45a919 [ 448.916866] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.924583] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 448.931875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 448.939164] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.946455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 448.953828] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:30 executing program 5 (fault-call:8 fault-nth:51): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 449.034079] FAULT_INJECTION: forcing a failure. [ 449.034079] name failslab, interval 1, probability 0, space 0, times 0 [ 449.051204] CPU: 0 PID: 17348 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 449.059180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.064336] FAULT_INJECTION: forcing a failure. [ 449.064336] name failslab, interval 1, probability 0, space 0, times 0 [ 449.068543] Call Trace: [ 449.068575] dump_stack+0x142/0x197 [ 449.068604] should_fail.cold+0x10f/0x159 [ 449.068635] should_failslab+0xdb/0x130 [ 449.068650] kmem_cache_alloc+0x2d7/0x780 [ 449.068668] ? selinux_capable+0x36/0x40 [ 449.102379] create_new_namespaces+0x34/0x720 [ 449.106914] ? ns_capable_common+0x12c/0x160 [ 449.111343] copy_namespaces+0x284/0x310 [ 449.115432] copy_process.part.0+0x2603/0x6a70 [ 449.120038] ? debug_smp_processor_id+0x1c/0x20 [ 449.124709] ? perf_trace_lock+0x109/0x500 [ 449.128940] ? check_preemption_disabled+0x3c/0x250 [ 449.133976] ? debug_smp_processor_id+0x1c/0x20 [ 449.138698] ? __cleanup_sighand+0x50/0x50 [ 449.142937] ? lock_downgrade+0x740/0x740 [ 449.147119] _do_fork+0x19e/0xce0 [ 449.150595] ? fork_idle+0x280/0x280 [ 449.154317] ? fput+0xd4/0x150 [ 449.157506] ? SyS_write+0x15e/0x230 [ 449.161242] SyS_clone+0x37/0x50 [ 449.164616] ? sys_vfork+0x30/0x30 [ 449.168165] do_syscall_64+0x1e8/0x640 [ 449.172915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.177760] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 449.182945] RIP: 0033:0x45a919 [ 449.186313] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.194021] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 449.201314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 449.208591] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.215882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 449.223150] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 449.230448] CPU: 1 PID: 17349 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 449.238352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.247722] Call Trace: [ 449.250309] dump_stack+0x142/0x197 [ 449.253969] should_fail.cold+0x10f/0x159 [ 449.258112] should_failslab+0xdb/0x130 [ 449.262087] kmem_cache_alloc+0x2d7/0x780 [ 449.266224] ? check_preemption_disabled+0x3c/0x250 [ 449.271224] alloc_vfsmnt+0x28/0x7d0 [ 449.274920] vfs_kern_mount.part.0+0x2a/0x3d0 [ 449.279431] ? rcu_read_lock_sched_held+0x110/0x130 [ 449.284480] kern_mount_data+0x56/0xc0 [ 449.288414] pid_ns_prepare_proc+0x1e/0x90 [ 449.292657] alloc_pid+0x9f0/0xc70 [ 449.296190] copy_process.part.0+0x272f/0x6a70 [ 449.300774] ? debug_smp_processor_id+0x1c/0x20 [ 449.305444] ? perf_trace_lock+0x109/0x500 [ 449.310183] ? check_preemption_disabled+0x3c/0x250 [ 449.315185] ? debug_smp_processor_id+0x1c/0x20 [ 449.319978] ? __cleanup_sighand+0x50/0x50 [ 449.324207] ? lock_downgrade+0x740/0x740 [ 449.328407] _do_fork+0x19e/0xce0 [ 449.331878] ? fork_idle+0x280/0x280 [ 449.335587] ? fput+0xd4/0x150 [ 449.338778] ? SyS_write+0x15e/0x230 [ 449.342479] SyS_clone+0x37/0x50 [ 449.345836] ? sys_vfork+0x30/0x30 [ 449.349359] do_syscall_64+0x1e8/0x640 [ 449.353240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.358174] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 449.363361] RIP: 0033:0x45a919 [ 449.366532] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.374227] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 21:31:31 executing program 4 (fault-call:7 fault-nth:14): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 449.381616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 449.388873] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.396146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 449.403405] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:31 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "dc1d54e7641beb38089f0e220e5edb2656270a0adebb9653f9040bf0d60e3af6b32427b5e67c8cdf24321be0aeea1ccadcf7764dda5108ef3de9e548d063615835cb5a1be972938273709fb96c738bfe20735c851421652d688f8e4f592d0995e54dac979b265d4728f428c080e52f925ad7f01da579d10faab42de4b5aafe3c08d4751293854e5f1d25492a618ee41fd2c4d1568d54d44ebfceff8450414efaceaa9ec29fcdb8a871f512bc898e32b665ec1786c072a2121f2652d985852df3ed3daa9619cd0e39f00e8855ac0a1e2f80254b5ac0e9c2339f9b929d11117cc8579eb67af894e334a861f9272403a31398cce99035ec27d069df011fc27ef9f2", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffd) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f00000001c0)=0x20) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) 21:31:31 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'teql0\x00', {0x2, 0x4e20, @multicast1}}) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) sched_setscheduler(r4, 0x0, &(0x7f0000000000)=0x5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:31 executing program 5 (fault-call:8 fault-nth:52): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:31 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 449.580139] FAULT_INJECTION: forcing a failure. [ 449.580139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.604058] FAULT_INJECTION: forcing a failure. [ 449.604058] name failslab, interval 1, probability 0, space 0, times 0 [ 449.626013] CPU: 1 PID: 17360 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 449.633952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.643346] Call Trace: [ 449.645961] dump_stack+0x142/0x197 [ 449.649644] should_fail.cold+0x10f/0x159 [ 449.653815] ? __might_sleep+0x93/0xb0 [ 449.657734] __alloc_pages_nodemask+0x1d6/0x7a0 [ 449.662417] ? __alloc_pages_slowpath+0x2930/0x2930 [ 449.667454] alloc_pages_current+0xec/0x1e0 [ 449.671794] __get_free_pages+0xf/0x40 [ 449.675676] get_zeroed_page+0x11/0x20 [ 449.679557] mount_fs+0x1cc/0x2a1 [ 449.683016] vfs_kern_mount.part.0+0x5e/0x3d0 [ 449.687518] ? rcu_read_lock_sched_held+0x110/0x130 [ 449.692538] kern_mount_data+0x56/0xc0 [ 449.696425] pid_ns_prepare_proc+0x1e/0x90 [ 449.700665] alloc_pid+0x9f0/0xc70 [ 449.704225] copy_process.part.0+0x272f/0x6a70 [ 449.708817] ? proc_fail_nth_write+0x7d/0x180 [ 449.713328] ? proc_cwd_link+0x1b0/0x1b0 [ 449.717411] ? __cleanup_sighand+0x50/0x50 [ 449.721659] ? lock_downgrade+0x740/0x740 [ 449.725818] _do_fork+0x19e/0xce0 [ 449.729279] ? fork_idle+0x280/0x280 [ 449.733056] ? fput+0xd4/0x150 [ 449.736263] ? SyS_write+0x15e/0x230 [ 449.739993] SyS_clone+0x37/0x50 [ 449.743368] ? sys_vfork+0x30/0x30 [ 449.746924] do_syscall_64+0x1e8/0x640 [ 449.750816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.755688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 449.760879] RIP: 0033:0x45a919 [ 449.764075] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.771796] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 449.779080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 449.786360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.793672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 449.800951] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 449.813910] CPU: 0 PID: 17366 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 449.821873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.831272] Call Trace: [ 449.833895] dump_stack+0x142/0x197 [ 449.837558] should_fail.cold+0x10f/0x159 [ 449.841743] should_failslab+0xdb/0x130 [ 449.845749] kmem_cache_alloc+0x2d7/0x780 [ 449.849930] ? debug_smp_processor_id+0x1c/0x20 [ 449.854621] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 449.859567] alloc_vfsmnt+0x28/0x7d0 [ 449.863279] clone_mnt+0x70/0xee0 [ 449.866733] copy_tree+0xd0/0x8a0 [ 449.870215] copy_mnt_ns+0x11c/0x8c0 [ 449.873942] ? kmem_cache_alloc+0x611/0x780 [ 449.878273] ? selinux_capable+0x36/0x40 [ 449.882356] create_new_namespaces+0xc9/0x720 [ 449.886875] ? ns_capable_common+0x12c/0x160 [ 449.891296] copy_namespaces+0x284/0x310 [ 449.895390] copy_process.part.0+0x2603/0x6a70 [ 449.900025] ? proc_fail_nth_write+0x7d/0x180 [ 449.904524] ? proc_cwd_link+0x1b0/0x1b0 [ 449.908605] ? __cleanup_sighand+0x50/0x50 [ 449.912839] ? lock_downgrade+0x740/0x740 [ 449.916996] _do_fork+0x19e/0xce0 [ 449.920453] ? fork_idle+0x280/0x280 [ 449.924257] ? fput+0xd4/0x150 [ 449.927450] ? SyS_write+0x15e/0x230 [ 449.931294] SyS_clone+0x37/0x50 [ 449.934673] ? sys_vfork+0x30/0x30 [ 449.938243] do_syscall_64+0x1e8/0x640 [ 449.942248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.947112] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 449.952302] RIP: 0033:0x45a919 [ 449.955486] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.963194] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 449.970458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:31 executing program 4 (fault-call:7 fault-nth:15): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 449.977721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.985008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 449.992291] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:31 executing program 5 (fault-call:8 fault-nth:53): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 450.057496] FAULT_INJECTION: forcing a failure. [ 450.057496] name failslab, interval 1, probability 0, space 0, times 0 [ 450.086494] CPU: 1 PID: 17386 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 450.094436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.103901] Call Trace: [ 450.106506] dump_stack+0x142/0x197 [ 450.110191] should_fail.cold+0x10f/0x159 [ 450.115136] should_failslab+0xdb/0x130 [ 450.119196] kmem_cache_alloc+0x2d7/0x780 [ 450.123346] ? lock_downgrade+0x740/0x740 [ 450.127623] alloc_vfsmnt+0x28/0x7d0 [ 450.131330] clone_mnt+0x70/0xee0 [ 450.134791] ? is_subdir+0x222/0x389 [ 450.138526] copy_tree+0x33b/0x8a0 [ 450.142076] copy_mnt_ns+0x11c/0x8c0 [ 450.145776] ? kmem_cache_alloc+0x611/0x780 [ 450.150108] ? selinux_capable+0x36/0x40 [ 450.154194] create_new_namespaces+0xc9/0x720 [ 450.158704] ? ns_capable_common+0x12c/0x160 [ 450.163242] copy_namespaces+0x284/0x310 [ 450.167308] copy_process.part.0+0x2603/0x6a70 [ 450.171898] ? debug_smp_processor_id+0x1c/0x20 [ 450.176565] ? perf_trace_lock+0x109/0x500 [ 450.180794] ? check_preemption_disabled+0x3c/0x250 [ 450.185817] ? debug_smp_processor_id+0x1c/0x20 [ 450.190508] ? __cleanup_sighand+0x50/0x50 [ 450.194743] ? lock_downgrade+0x740/0x740 [ 450.198890] _do_fork+0x19e/0xce0 [ 450.202341] ? fork_idle+0x280/0x280 [ 450.206053] ? fput+0xd4/0x150 [ 450.209245] ? SyS_write+0x15e/0x230 [ 450.212958] SyS_clone+0x37/0x50 [ 450.216318] ? sys_vfork+0x30/0x30 [ 450.219850] do_syscall_64+0x1e8/0x640 [ 450.223738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.228577] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 450.233762] RIP: 0033:0x45a919 [ 450.236933] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.244643] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 450.251910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 450.259179] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 450.266455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 450.273718] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 450.285495] FAULT_INJECTION: forcing a failure. [ 450.285495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.297633] CPU: 1 PID: 17389 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 450.305528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.314895] Call Trace: [ 450.317516] dump_stack+0x142/0x197 [ 450.321186] should_fail.cold+0x10f/0x159 [ 450.325351] ? __might_sleep+0x93/0xb0 [ 450.329247] __alloc_pages_nodemask+0x1d6/0x7a0 [ 450.333964] ? check_preemption_disabled+0x3c/0x250 [ 450.339001] ? __alloc_pages_slowpath+0x2930/0x2930 [ 450.344019] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 450.349470] ? __alloc_pages_nodemask+0x639/0x7a0 [ 450.354415] alloc_pages_current+0xec/0x1e0 [ 450.358765] __get_free_pages+0xf/0x40 [ 450.362661] get_zeroed_page+0x11/0x20 [ 450.366662] selinux_sb_copy_data+0x2a/0x390 [ 450.371160] security_sb_copy_data+0x75/0xb0 [ 450.375568] mount_fs+0x1ec/0x2a1 [ 450.379062] vfs_kern_mount.part.0+0x5e/0x3d0 [ 450.383691] ? rcu_read_lock_sched_held+0x110/0x130 [ 450.388726] kern_mount_data+0x56/0xc0 [ 450.392700] pid_ns_prepare_proc+0x1e/0x90 [ 450.397012] alloc_pid+0x9f0/0xc70 [ 450.400561] copy_process.part.0+0x272f/0x6a70 [ 450.405141] ? debug_smp_processor_id+0x1c/0x20 [ 450.409822] ? perf_trace_lock+0x109/0x500 [ 450.414041] ? check_preemption_disabled+0x3c/0x250 [ 450.419046] ? debug_smp_processor_id+0x1c/0x20 [ 450.423712] ? __cleanup_sighand+0x50/0x50 [ 450.427931] ? lock_downgrade+0x740/0x740 [ 450.432071] _do_fork+0x19e/0xce0 [ 450.435565] ? fork_idle+0x280/0x280 [ 450.439269] ? fput+0xd4/0x150 [ 450.442451] ? SyS_write+0x15e/0x230 [ 450.446163] SyS_clone+0x37/0x50 [ 450.449523] ? sys_vfork+0x30/0x30 [ 450.453059] do_syscall_64+0x1e8/0x640 [ 450.456939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.461774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 450.466948] RIP: 0033:0x45a919 [ 450.470124] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.477819] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 450.485092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 450.492366] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 450.499629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 21:31:32 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r4], 0x2}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x336}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x893}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8b0}, 0x8000) close(r2) r5 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 450.506889] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:32 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000}) r1 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000180)=@can, 0x80, 0x0}, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r3) ioctl$void(0xffffffffffffffff, 0x5451) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a80)) geteuid() stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000ac0)='\x00', &(0x7f0000000200)) stat(0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r4, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) stat(&(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) 21:31:32 executing program 4 (fault-call:7 fault-nth:16): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:32 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6800) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe3c5b5161f0e5a7}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r2, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:32 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:32 executing program 5 (fault-call:8 fault-nth:54): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 450.698919] FAULT_INJECTION: forcing a failure. [ 450.698919] name failslab, interval 1, probability 0, space 0, times 0 [ 450.728417] CPU: 1 PID: 17409 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 450.736336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.745688] Call Trace: [ 450.745714] dump_stack+0x142/0x197 [ 450.745736] should_fail.cold+0x10f/0x159 [ 450.745755] should_failslab+0xdb/0x130 [ 450.745766] __kmalloc_track_caller+0x2ec/0x790 [ 450.764787] ? kstrdup_const+0x48/0x60 [ 450.768746] kstrdup+0x3a/0x70 [ 450.771998] kstrdup_const+0x48/0x60 [ 450.775703] alloc_vfsmnt+0xe5/0x7d0 [ 450.779524] clone_mnt+0x70/0xee0 [ 450.782988] ? is_subdir+0x222/0x389 [ 450.786707] copy_tree+0x33b/0x8a0 [ 450.790297] copy_mnt_ns+0x11c/0x8c0 [ 450.794005] ? kmem_cache_alloc+0x611/0x780 21:31:32 executing program 3: r0 = gettid() getpgid(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f00000001c0)=""/198, 0xc6}], 0x4, 0xf0ffff) [ 450.798352] ? selinux_capable+0x36/0x40 [ 450.802442] create_new_namespaces+0xc9/0x720 [ 450.806964] ? ns_capable_common+0x12c/0x160 [ 450.811382] copy_namespaces+0x284/0x310 [ 450.815501] copy_process.part.0+0x2603/0x6a70 [ 450.820093] ? proc_fail_nth_write+0x7d/0x180 [ 450.824600] ? proc_cwd_link+0x1b0/0x1b0 [ 450.828677] ? __cleanup_sighand+0x50/0x50 [ 450.832913] ? lock_downgrade+0x740/0x740 [ 450.837073] _do_fork+0x19e/0xce0 [ 450.840537] ? fork_idle+0x280/0x280 [ 450.844250] ? fput+0xd4/0x150 [ 450.847429] ? SyS_write+0x15e/0x230 [ 450.851349] SyS_clone+0x37/0x50 [ 450.854711] ? sys_vfork+0x30/0x30 [ 450.858300] do_syscall_64+0x1e8/0x640 [ 450.862185] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.867129] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 450.872308] RIP: 0033:0x45a919 [ 450.875509] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.883212] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 450.890472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 450.897821] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 450.905095] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 450.912357] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 450.922230] FAULT_INJECTION: forcing a failure. [ 450.922230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.934546] CPU: 1 PID: 17416 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 450.942462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.951846] Call Trace: [ 450.954455] dump_stack+0x142/0x197 [ 450.958101] should_fail.cold+0x10f/0x159 [ 450.962257] ? __might_sleep+0x93/0xb0 [ 450.966276] __alloc_pages_nodemask+0x1d6/0x7a0 [ 450.970937] ? check_preemption_disabled+0x3c/0x250 [ 450.975956] ? __alloc_pages_slowpath+0x2930/0x2930 [ 450.980969] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 450.986489] ? __alloc_pages_nodemask+0x639/0x7a0 [ 450.991357] alloc_pages_current+0xec/0x1e0 [ 450.995745] __get_free_pages+0xf/0x40 [ 450.999641] get_zeroed_page+0x11/0x20 [ 451.003569] selinux_sb_copy_data+0x2a/0x390 [ 451.007987] security_sb_copy_data+0x75/0xb0 [ 451.012400] mount_fs+0x1ec/0x2a1 [ 451.015846] vfs_kern_mount.part.0+0x5e/0x3d0 [ 451.020506] ? rcu_read_lock_sched_held+0x110/0x130 [ 451.025558] kern_mount_data+0x56/0xc0 [ 451.029444] pid_ns_prepare_proc+0x1e/0x90 [ 451.033678] alloc_pid+0x9f0/0xc70 [ 451.037216] copy_process.part.0+0x272f/0x6a70 [ 451.041790] ? proc_fail_nth_write+0x7d/0x180 [ 451.046291] ? proc_cwd_link+0x1b0/0x1b0 [ 451.050359] ? __cleanup_sighand+0x50/0x50 [ 451.055126] ? lock_downgrade+0x740/0x740 [ 451.059266] _do_fork+0x19e/0xce0 [ 451.062808] ? fork_idle+0x280/0x280 [ 451.066529] ? fput+0xd4/0x150 [ 451.069725] ? SyS_write+0x15e/0x230 [ 451.073447] SyS_clone+0x37/0x50 [ 451.076798] ? sys_vfork+0x30/0x30 [ 451.080326] do_syscall_64+0x1e8/0x640 [ 451.084210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.089062] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.094243] RIP: 0033:0x45a919 [ 451.097442] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 451.105140] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 451.112396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 451.119749] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.127020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 451.134277] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:32 executing program 4 (fault-call:7 fault-nth:17): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:33 executing program 5 (fault-call:8 fault-nth:55): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:33 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000080)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)={0x80000000, 0x3f, 0x1}) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f00000002c0)) [ 451.267162] FAULT_INJECTION: forcing a failure. [ 451.267162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.274938] FAULT_INJECTION: forcing a failure. [ 451.274938] name failslab, interval 1, probability 0, space 0, times 0 [ 451.298439] CPU: 1 PID: 17435 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 451.306378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.315869] Call Trace: [ 451.318525] dump_stack+0x142/0x197 [ 451.322178] should_fail.cold+0x10f/0x159 [ 451.326351] should_failslab+0xdb/0x130 [ 451.330342] kmem_cache_alloc+0x2d7/0x780 [ 451.334493] ? find_held_lock+0x35/0x130 [ 451.338553] ? copy_tree+0x4a2/0x8a0 [ 451.342275] alloc_vfsmnt+0x28/0x7d0 [ 451.346003] clone_mnt+0x70/0xee0 [ 451.349444] ? lock_downgrade+0x740/0x740 [ 451.353593] ? do_raw_spin_unlock+0x16b/0x260 [ 451.358093] copy_tree+0x33b/0x8a0 [ 451.361728] copy_mnt_ns+0x11c/0x8c0 [ 451.365491] ? kmem_cache_alloc+0x611/0x780 [ 451.369813] ? selinux_capable+0x36/0x40 [ 451.373879] create_new_namespaces+0xc9/0x720 [ 451.378395] ? ns_capable_common+0x12c/0x160 [ 451.382834] copy_namespaces+0x284/0x310 [ 451.386901] copy_process.part.0+0x2603/0x6a70 [ 451.391495] ? debug_smp_processor_id+0x1c/0x20 [ 451.396161] ? perf_trace_lock+0x109/0x500 [ 451.400385] ? check_preemption_disabled+0x3c/0x250 [ 451.405492] ? debug_smp_processor_id+0x1c/0x20 [ 451.410163] ? __cleanup_sighand+0x50/0x50 [ 451.414408] ? lock_downgrade+0x740/0x740 [ 451.418557] _do_fork+0x19e/0xce0 [ 451.422011] ? fork_idle+0x280/0x280 [ 451.425725] ? fput+0xd4/0x150 [ 451.428909] ? SyS_write+0x15e/0x230 [ 451.432615] SyS_clone+0x37/0x50 [ 451.435969] ? sys_vfork+0x30/0x30 [ 451.439516] do_syscall_64+0x1e8/0x640 [ 451.443406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.448254] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.453435] RIP: 0033:0x45a919 [ 451.456618] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 451.464314] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 451.471574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 451.478839] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.486559] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 451.493821] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 451.515422] CPU: 0 PID: 17437 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 451.523382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.532756] Call Trace: [ 451.535351] dump_stack+0x142/0x197 [ 451.539001] should_fail.cold+0x10f/0x159 [ 451.543246] ? __might_sleep+0x93/0xb0 [ 451.547441] __alloc_pages_nodemask+0x1d6/0x7a0 [ 451.552114] ? check_preemption_disabled+0x3c/0x250 [ 451.557133] ? __alloc_pages_slowpath+0x2930/0x2930 [ 451.562155] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 451.567612] ? __alloc_pages_nodemask+0x639/0x7a0 [ 451.572458] alloc_pages_current+0xec/0x1e0 [ 451.576788] __get_free_pages+0xf/0x40 [ 451.580754] get_zeroed_page+0x11/0x20 [ 451.584648] selinux_sb_copy_data+0x2a/0x390 [ 451.589065] security_sb_copy_data+0x75/0xb0 [ 451.593473] mount_fs+0x1ec/0x2a1 [ 451.596951] vfs_kern_mount.part.0+0x5e/0x3d0 [ 451.601453] ? rcu_read_lock_sched_held+0x110/0x130 [ 451.606502] kern_mount_data+0x56/0xc0 [ 451.610403] pid_ns_prepare_proc+0x1e/0x90 [ 451.614650] alloc_pid+0x9f0/0xc70 [ 451.618210] copy_process.part.0+0x272f/0x6a70 [ 451.622807] ? debug_smp_processor_id+0x1c/0x20 [ 451.627560] ? perf_trace_lock+0x109/0x500 [ 451.631787] ? check_preemption_disabled+0x3c/0x250 [ 451.636801] ? debug_smp_processor_id+0x1c/0x20 [ 451.641580] ? __cleanup_sighand+0x50/0x50 [ 451.645810] ? lock_downgrade+0x740/0x740 [ 451.649965] _do_fork+0x19e/0xce0 [ 451.653419] ? fork_idle+0x280/0x280 [ 451.657131] ? fput+0xd4/0x150 [ 451.660331] ? SyS_write+0x15e/0x230 [ 451.664255] SyS_clone+0x37/0x50 [ 451.667625] ? sys_vfork+0x30/0x30 [ 451.671176] do_syscall_64+0x1e8/0x640 [ 451.675056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.679922] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.685105] RIP: 0033:0x45a919 [ 451.688288] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 451.695998] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 451.703270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 451.710533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:33 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x116c, 0x0, 0x3, 0x400, 0x70bd2b, 0x25dfdbff, {0x7}, [@typed={0xc, 0x22, @u64=0x3}, @typed={0x68, 0x42, @binary="fd7aad3f85c927192de8c7202f75a398989c8c8e0882a9ce21427148b8786fbd30a37c7927ce0ca7edb600d336f00052dac503d622fa791852b9c661ffa49578b302782d3e08df109c807f1a8a9b8bbcc142684014182069cb81e31cfdd7d7447e8337"}, @typed={0x8, 0x93, @uid=r6}, @typed={0x1c, 0x77, @str='wlan0&trustedcgroup!\x00'}, @nested={0x10ac, 0x66, [@typed={0xc, 0x33, @u64=0x4}, @typed={0x8, 0x0, @uid=r7}, @typed={0xc, 0x1, @u64=0x9}, @generic="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", @typed={0xc, 0xc, @str=')Hwlan0\x00'}, @generic="a2d5c91260531cab8cab2e67744ba8ee64c632607b50b6b11a26db30e977ae9b791dad6627e3e5ca0728a6831245cf36304e90d5f762cc785f942fe52e1f84bcdc25124474f5409a1c87e657f028e72b437882c119825b4891a1f081b72099ce80688b027d8b3fb6ba644e97c19b81763a0cc9678f169ad344a9"]}, @typed={0x14, 0x6c, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x116c}, 0x1, 0x0, 0x0, 0x40080b0}, 0x4004000) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:33 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0xcb621c532507778d) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x4, 0x6, 0x2, 0x0, 0x0, [{{r0}, 0x2}, {{r2}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r4 = socket$vsock_dgram(0x28, 0x2, 0x0) dup3(0xffffffffffffffff, r4, 0x0) preadv(r3, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 451.717808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 451.725074] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:33 executing program 5 (fault-call:8 fault-nth:56): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) 21:31:33 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) 21:31:33 executing program 4 (fault-call:7 fault-nth:18): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) [ 451.940715] FAULT_INJECTION: forcing a failure. [ 451.940715] name failslab, interval 1, probability 0, space 0, times 0 [ 451.950237] FAULT_INJECTION: forcing a failure. [ 451.950237] name failslab, interval 1, probability 0, space 0, times 0 [ 451.957335] CPU: 1 PID: 17461 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 451.971429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.980807] Call Trace: [ 451.983403] dump_stack+0x142/0x197 [ 451.987044] should_fail.cold+0x10f/0x159 [ 451.991188] should_failslab+0xdb/0x130 [ 451.995149] __kmalloc+0x2f0/0x7a0 [ 451.998679] ? __list_lru_init+0x6b/0x660 [ 452.002841] __list_lru_init+0x6b/0x660 [ 452.006816] sget_userns+0x4e0/0xc30 [ 452.010517] ? set_anon_super+0x20/0x20 [ 452.014481] ? get_empty_filp.cold+0x3b/0x3b [ 452.018891] mount_ns+0x6d/0x190 [ 452.022242] ? proc_get_inode+0x620/0x620 [ 452.026385] proc_mount+0x6a/0xa0 [ 452.029823] mount_fs+0x97/0x2a1 [ 452.033176] vfs_kern_mount.part.0+0x5e/0x3d0 [ 452.037658] ? rcu_read_lock_sched_held+0x110/0x130 [ 452.042659] kern_mount_data+0x56/0xc0 [ 452.046530] pid_ns_prepare_proc+0x1e/0x90 [ 452.050760] alloc_pid+0x9f0/0xc70 [ 452.054304] copy_process.part.0+0x272f/0x6a70 [ 452.058897] ? proc_fail_nth_write+0x7d/0x180 [ 452.063409] ? proc_cwd_link+0x1b0/0x1b0 [ 452.067489] ? __cleanup_sighand+0x50/0x50 [ 452.071735] ? lock_downgrade+0x740/0x740 [ 452.075910] _do_fork+0x19e/0xce0 [ 452.079372] ? fork_idle+0x280/0x280 [ 452.083080] ? fput+0xd4/0x150 [ 452.086364] ? SyS_write+0x15e/0x230 [ 452.090073] SyS_clone+0x37/0x50 [ 452.093420] ? sys_vfork+0x30/0x30 [ 452.096948] do_syscall_64+0x1e8/0x640 [ 452.100818] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.105675] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.110860] RIP: 0033:0x45a919 [ 452.114040] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.121822] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 452.129077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 452.136333] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.143585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 452.151101] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 452.159063] CPU: 0 PID: 17465 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 452.166990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.176415] Call Trace: [ 452.179003] dump_stack+0x142/0x197 [ 452.182697] should_fail.cold+0x10f/0x159 [ 452.186853] should_failslab+0xdb/0x130 [ 452.190829] __kmalloc_track_caller+0x2ec/0x790 [ 452.195554] ? kstrdup_const+0x48/0x60 [ 452.199439] kstrdup+0x3a/0x70 [ 452.202665] kstrdup_const+0x48/0x60 [ 452.206386] alloc_vfsmnt+0xe5/0x7d0 [ 452.210109] clone_mnt+0x70/0xee0 [ 452.213557] ? lock_downgrade+0x740/0x740 [ 452.217696] ? do_raw_spin_unlock+0x16b/0x260 [ 452.222199] copy_tree+0x33b/0x8a0 [ 452.225765] copy_mnt_ns+0x11c/0x8c0 [ 452.229488] ? kmem_cache_alloc+0x611/0x780 [ 452.233840] ? selinux_capable+0x36/0x40 [ 452.237913] create_new_namespaces+0xc9/0x720 [ 452.242408] ? ns_capable_common+0x12c/0x160 [ 452.246815] copy_namespaces+0x284/0x310 [ 452.250993] copy_process.part.0+0x2603/0x6a70 [ 452.255610] ? proc_fail_nth_write+0x7d/0x180 [ 452.260118] ? proc_cwd_link+0x1b0/0x1b0 [ 452.264201] ? __cleanup_sighand+0x50/0x50 [ 452.268528] ? lock_downgrade+0x740/0x740 [ 452.272689] _do_fork+0x19e/0xce0 [ 452.276150] ? fork_idle+0x280/0x280 [ 452.279971] ? fput+0xd4/0x150 [ 452.283170] ? SyS_write+0x15e/0x230 [ 452.286889] SyS_clone+0x37/0x50 [ 452.290247] ? sys_vfork+0x30/0x30 [ 452.293785] do_syscall_64+0x1e8/0x640 [ 452.297665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.302614] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.307798] RIP: 0033:0x45a919 [ 452.310982] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.318713] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 452.325988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 452.333338] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:31:34 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 452.340613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 452.347877] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:34 executing program 4 (fault-call:7 fault-nth:19): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:34 executing program 5 (fault-call:8 fault-nth:57): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 452.437001] FAULT_INJECTION: forcing a failure. [ 452.437001] name failslab, interval 1, probability 0, space 0, times 0 [ 452.455730] Unknown ioctl 8836 [ 452.472736] CPU: 1 PID: 17477 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 452.480675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.490044] Call Trace: [ 452.492658] dump_stack+0x142/0x197 [ 452.496349] should_fail.cold+0x10f/0x159 [ 452.500529] should_failslab+0xdb/0x130 [ 452.504519] kmem_cache_alloc+0x2d7/0x780 [ 452.508681] ? find_held_lock+0x35/0x130 [ 452.512759] ? copy_tree+0x4a2/0x8a0 [ 452.516577] alloc_vfsmnt+0x28/0x7d0 [ 452.520299] clone_mnt+0x70/0xee0 [ 452.523754] ? lock_downgrade+0x740/0x740 [ 452.527921] ? do_raw_spin_unlock+0x16b/0x260 [ 452.532964] copy_tree+0x33b/0x8a0 [ 452.536537] copy_mnt_ns+0x11c/0x8c0 [ 452.540272] ? kmem_cache_alloc+0x611/0x780 [ 452.544599] ? selinux_capable+0x36/0x40 [ 452.544616] create_new_namespaces+0xc9/0x720 [ 452.544629] ? ns_capable_common+0x12c/0x160 [ 452.544643] copy_namespaces+0x284/0x310 [ 452.553201] copy_process.part.0+0x2603/0x6a70 [ 452.553218] ? debug_smp_processor_id+0x1c/0x20 [ 452.553229] ? perf_trace_lock+0x109/0x500 [ 452.553237] ? check_preemption_disabled+0x3c/0x250 [ 452.553250] ? debug_smp_processor_id+0x1c/0x20 21:31:34 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRES64=r3, @ANYBLOB="e27dd4fdfc6ca68a5115dba1867939f87b19a0c9bf4ee074abd0f8addb1ca3550b9dd0a05bed860b92fb8793824b7dd4bdf8ba3cb302ffea2e57ca17edeb7c7b62be7cb2990a1090f9c535364c562acd1f7f7f867dfcb8e63a8c2519fb206a5203a6f6ecb071384d40064204"], 0xa2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x9070803cb6dbeaa5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200000, 0x0) connect$inet6(r10, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xb3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000003c0)={r11}, &(0x7f0000000400)=0x14) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000440)={{0x2, 0x0, 0x9, 0x4, 0x20, 0x4, 0x4, 0x4, 0x40, 0x29, 0x7, 0x4c}, {0x9004, 0x4, 0x0, 0x40, 0x7, 0x3f, 0x8, 0x6a, 0x8, 0x7, 0x9, 0x7}, {0x1000, 0x116000, 0x4, 0x20, 0x6, 0x6, 0x6, 0x4, 0xff, 0xc8, 0x4, 0x3}, {0x6000, 0x3000, 0x3, 0x5b, 0x1, 0x1, 0x8, 0x3, 0x8, 0x0, 0x8, 0x7}, {0x0, 0xf000, 0xa, 0x0, 0x9, 0x7f, 0x7, 0x83, 0x7, 0x23, 0x9, 0x8}, {0x2000, 0x2, 0x3, 0xd, 0xd6, 0x1, 0x2b, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x122269c3419b58fc, 0x2, 0xf, 0x3f, 0x7a, 0x7f, 0x9, 0x80, 0x6, 0x3, 0x60}, {0x1000, 0x100000, 0x0, 0x9, 0x8a, 0x7, 0x6, 0x6, 0x4, 0x5, 0x4, 0x4}, {0x1000, 0x5000}, {0x2, 0x5000}, 0x20021, 0x0, 0xf000, 0x8a, 0xc, 0x1c000, 0x3000, [0x340, 0x4, 0x4, 0xb6]}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000200)={0x3, 0x0, 0x400, 0x6, r11}, 0x10) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000100)=r4) openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$inet(0x2, 0xa7c4ba65875ef98c, 0x7f) [ 452.553274] ? __cleanup_sighand+0x50/0x50 [ 452.553285] ? lock_downgrade+0x740/0x740 [ 452.553304] _do_fork+0x19e/0xce0 [ 452.553320] ? fork_idle+0x280/0x280 [ 452.600857] ? fput+0xd4/0x150 [ 452.604068] ? SyS_write+0x15e/0x230 [ 452.607998] SyS_clone+0x37/0x50 [ 452.611380] ? sys_vfork+0x30/0x30 [ 452.614960] do_syscall_64+0x1e8/0x640 [ 452.618866] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.623748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.628944] RIP: 0033:0x45a919 21:31:34 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'batadv0\x00', {0x606}, 0x8}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x4, 0x1, 0x2, 0xba}, {0x4, 0x1, 0x1, 0x1aa2}, {0xfff8, 0x9, 0x9, 0xffffffff}, {0x8, 0x9, 0x2, 0x7fffffff}, {0x8, 0x0, 0x6, 0x8}, {0x7, 0x7f, 0x40, 0x2}, {0xfb, 0x1f, 0x3, 0xff}, {0x1f, 0x7, 0x3f, 0x9}]}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'veth0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200d959b9812aaa020ca65857db94ff07db495839146f1af6eb04b836dc09d9e67bf94cbd0888e78ec37efe6dbb16a6af42ac33e3324e09c12faa6fd27861492148e1697d96de58646d7727fa4e8d4edb0d74be5ad139c97140f1a286ef13cefc00"/138], 0x34}}, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@delneigh={0x78, 0x1d, 0x301, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x0, r8, 0x20, 0x24, 0xa}, [@NDA_DST_MAC={0xc}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NDA_IFINDEX={0x8, 0x8, r12}, @NDA_CACHEINFO={0x14, 0x3, {0x3, 0xfffffffb, 0x5, 0x8}}, @NDA_IFINDEX={0x8, 0x8, r16}, @NDA_VNI={0x8, 0x7, 0x7}, @NDA_VNI={0x8, 0x7, 0x8000000}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}]}, 0x78}}, 0x24000010) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r19 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000001c0)={0x7fffffff, 0x0, 0x4, 0x200000, 0x6, {r17, r18/1000+10000}, {0x3, 0x2, 0x36, 0x9, 0x8, 0x1, "11c8129c"}, 0x0, 0x3, @planes=&(0x7f0000000180)={0x8002, 0x6, @fd=r19, 0x8}, 0x5, 0x0, r2}) ioctl$TIOCSWINSZ(r20, 0x5414, &(0x7f0000000240)={0x8, 0x6, 0x400, 0x7}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000004c0)="fa4add417833ce45ae26ca3534c688d4c3f9e31edc000e17fe30c83c6556ba9e96d073adeb0d21cbce7d046c5671fd9dec8a15d96b24ee892baf45976795daf489afa05448bf55a5bf21d5690508635d1b338dad10fdd2", 0x57) fcntl$setpipe(r21, 0x407, 0x0) write(r21, &(0x7f0000000340), 0x41395527) read(r21, &(0x7f0000000400)=""/182, 0xb6) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r22, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r22, 0xc0a85322, &(0x7f0000000540)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 21:31:34 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x6, 0x4) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 452.632136] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.639858] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 452.647912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 452.655175] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.655181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 452.655187] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 452.697755] FAULT_INJECTION: forcing a failure. [ 452.697755] name failslab, interval 1, probability 0, space 0, times 0 [ 452.709348] CPU: 1 PID: 17481 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 452.717257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.726618] Call Trace: [ 452.726643] dump_stack+0x142/0x197 [ 452.726668] should_fail.cold+0x10f/0x159 [ 452.726690] should_failslab+0xdb/0x130 [ 452.732894] __kmalloc+0x2f0/0x7a0 [ 452.732918] ? __list_lru_init+0x6b/0x660 [ 452.732936] __list_lru_init+0x6b/0x660 [ 452.732959] sget_userns+0x4e0/0xc30 [ 452.732973] ? set_anon_super+0x20/0x20 [ 452.732990] ? get_empty_filp.cold+0x3b/0x3b [ 452.733003] mount_ns+0x6d/0x190 [ 452.769053] ? proc_get_inode+0x620/0x620 [ 452.773225] proc_mount+0x6a/0xa0 [ 452.776922] mount_fs+0x97/0x2a1 [ 452.780289] vfs_kern_mount.part.0+0x5e/0x3d0 [ 452.784790] ? rcu_read_lock_sched_held+0x110/0x130 [ 452.790076] kern_mount_data+0x56/0xc0 [ 452.793976] pid_ns_prepare_proc+0x1e/0x90 [ 452.798215] alloc_pid+0x9f0/0xc70 [ 452.801780] copy_process.part.0+0x272f/0x6a70 [ 452.806381] ? debug_smp_processor_id+0x1c/0x20 [ 452.811072] ? perf_trace_lock+0x109/0x500 [ 452.815315] ? check_preemption_disabled+0x3c/0x250 [ 452.820337] ? debug_smp_processor_id+0x1c/0x20 [ 452.825016] ? __cleanup_sighand+0x50/0x50 [ 452.829255] ? lock_downgrade+0x740/0x740 [ 452.833482] _do_fork+0x19e/0xce0 [ 452.837000] ? fork_idle+0x280/0x280 [ 452.840735] ? fput+0xd4/0x150 [ 452.843945] ? SyS_write+0x15e/0x230 [ 452.847649] SyS_clone+0x37/0x50 [ 452.851004] ? sys_vfork+0x30/0x30 [ 452.854585] do_syscall_64+0x1e8/0x640 [ 452.858516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.863363] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 452.868570] RIP: 0033:0x45a919 [ 452.871798] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.879495] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 452.886783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:34 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xccd, 0x7, "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", 0x6, 0x4, 0x9, 0x4e, 0x40, 0x6, 0x5c}}}, 0x120) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 452.894046] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.901318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 452.908575] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 21:31:34 executing program 4 (fault-call:7 fault-nth:20): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:34 executing program 5 (fault-call:8 fault-nth:58): perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mkdir(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) syz_open_procfs(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x28444) [ 452.987633] bond0: Enslaving bridge4 as an active interface with an up link [ 453.049926] FAULT_INJECTION: forcing a failure. [ 453.049926] name failslab, interval 1, probability 0, space 0, times 0 [ 453.062081] FAULT_INJECTION: forcing a failure. [ 453.062081] name failslab, interval 1, probability 0, space 0, times 0 [ 453.066963] CPU: 1 PID: 17511 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 453.081302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.091014] Call Trace: [ 453.093611] dump_stack+0x142/0x197 [ 453.097248] should_fail.cold+0x10f/0x159 [ 453.101400] should_failslab+0xdb/0x130 [ 453.105367] __kmalloc+0x2f0/0x7a0 [ 453.108916] ? lock_downgrade+0x740/0x740 [ 453.113061] ? register_shrinker+0xbd/0x220 [ 453.117375] register_shrinker+0xbd/0x220 [ 453.121511] sget_userns+0x9bf/0xc30 [ 453.125220] ? set_anon_super+0x20/0x20 [ 453.129198] ? get_empty_filp.cold+0x3b/0x3b [ 453.133658] mount_ns+0x6d/0x190 [ 453.137037] ? proc_get_inode+0x620/0x620 [ 453.141192] proc_mount+0x6a/0xa0 [ 453.144658] mount_fs+0x97/0x2a1 [ 453.148047] vfs_kern_mount.part.0+0x5e/0x3d0 [ 453.152540] ? rcu_read_lock_sched_held+0x110/0x130 [ 453.157555] kern_mount_data+0x56/0xc0 [ 453.161445] pid_ns_prepare_proc+0x1e/0x90 [ 453.165670] alloc_pid+0x9f0/0xc70 [ 453.169211] copy_process.part.0+0x272f/0x6a70 [ 453.173787] ? proc_fail_nth_write+0x7d/0x180 [ 453.178270] ? proc_cwd_link+0x1b0/0x1b0 [ 453.182339] ? __cleanup_sighand+0x50/0x50 [ 453.186571] ? lock_downgrade+0x740/0x740 [ 453.190720] _do_fork+0x19e/0xce0 [ 453.194171] ? fork_idle+0x280/0x280 [ 453.197878] ? fput+0xd4/0x150 [ 453.201061] ? SyS_write+0x15e/0x230 [ 453.204765] SyS_clone+0x37/0x50 [ 453.208119] ? sys_vfork+0x30/0x30 [ 453.211657] do_syscall_64+0x1e8/0x640 [ 453.215536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.220397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 453.225591] RIP: 0033:0x45a919 [ 453.228789] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.236498] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 453.243755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 453.251101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 453.258361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 453.265626] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 453.273013] CPU: 0 PID: 17512 Comm: syz-executor.4 Not tainted 4.14.160-syzkaller #0 [ 453.280919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.290310] Call Trace: [ 453.292917] dump_stack+0x142/0x197 [ 453.296672] should_fail.cold+0x10f/0x159 [ 453.300849] should_failslab+0xdb/0x130 [ 453.304870] kmem_cache_alloc+0x2d7/0x780 [ 453.309023] ? find_held_lock+0x35/0x130 [ 453.313094] ? copy_tree+0x4a2/0x8a0 [ 453.316815] alloc_vfsmnt+0x28/0x7d0 [ 453.320546] clone_mnt+0x70/0xee0 [ 453.323989] ? lock_downgrade+0x740/0x740 [ 453.328144] ? do_raw_spin_unlock+0x16b/0x260 [ 453.332666] copy_tree+0x33b/0x8a0 [ 453.336244] copy_mnt_ns+0x11c/0x8c0 [ 453.339959] ? kmem_cache_alloc+0x611/0x780 [ 453.344310] ? selinux_capable+0x36/0x40 [ 453.348388] create_new_namespaces+0xc9/0x720 [ 453.353068] ? ns_capable_common+0x12c/0x160 [ 453.357515] copy_namespaces+0x284/0x310 [ 453.361597] copy_process.part.0+0x2603/0x6a70 [ 453.366203] ? proc_fail_nth_write+0x7d/0x180 [ 453.370717] ? proc_cwd_link+0x1b0/0x1b0 [ 453.374815] ? __cleanup_sighand+0x50/0x50 [ 453.379060] ? lock_downgrade+0x740/0x740 [ 453.383223] _do_fork+0x19e/0xce0 [ 453.386683] ? fork_idle+0x280/0x280 [ 453.390408] ? fput+0xd4/0x150 [ 453.393594] ? SyS_write+0x15e/0x230 [ 453.397307] SyS_clone+0x37/0x50 [ 453.400680] ? sys_vfork+0x30/0x30 [ 453.404225] do_syscall_64+0x1e8/0x640 [ 453.408103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.412951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 453.418132] RIP: 0033:0x45a919 [ 453.421313] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.429020] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 453.436314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 453.443581] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 453.450844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 453.458116] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 453.520739] ================================================================== [ 453.528583] BUG: KASAN: use-after-free in put_pid_ns+0x80/0x90 [ 453.534573] Read of size 8 at addr ffff8880593e5350 by task syz-executor.5/17511 [ 453.542201] [ 453.543845] CPU: 1 PID: 17511 Comm: syz-executor.5 Not tainted 4.14.160-syzkaller #0 [ 453.551733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.561104] Call Trace: [ 453.563714] dump_stack+0x142/0x197 [ 453.567362] ? put_pid_ns+0x80/0x90 [ 453.570998] print_address_description.cold+0x7c/0x1dc [ 453.576288] ? put_pid_ns+0x80/0x90 [ 453.579929] kasan_report.cold+0xa9/0x2af [ 453.584099] __asan_report_load8_noabort+0x14/0x20 [ 453.589045] put_pid_ns+0x80/0x90 [ 453.592519] free_nsproxy+0x104/0x200 [ 453.596326] switch_task_namespaces+0x98/0xb0 [ 453.600822] exit_task_namespaces+0x18/0x20 [ 453.605136] copy_process.part.0+0x3c67/0x6a70 [ 453.609726] ? proc_fail_nth_write+0x7d/0x180 [ 453.614207] ? proc_cwd_link+0x1b0/0x1b0 [ 453.618260] ? __cleanup_sighand+0x50/0x50 [ 453.622484] ? lock_downgrade+0x740/0x740 [ 453.626625] _do_fork+0x19e/0xce0 [ 453.630154] ? fork_idle+0x280/0x280 [ 453.633861] ? fput+0xd4/0x150 [ 453.637053] ? SyS_write+0x15e/0x230 [ 453.640762] SyS_clone+0x37/0x50 [ 453.644120] ? sys_vfork+0x30/0x30 [ 453.647649] do_syscall_64+0x1e8/0x640 [ 453.651528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.660898] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 453.666083] RIP: 0033:0x45a919 [ 453.669270] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 453.676978] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 453.684234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 453.691499] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 453.698844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 453.707055] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 453.714322] [ 453.715945] Allocated by task 17511: [ 453.719652] save_stack_trace+0x16/0x20 [ 453.723613] save_stack+0x45/0xd0 [ 453.727088] kasan_kmalloc+0xce/0xf0 [ 453.730873] kasan_slab_alloc+0xf/0x20 [ 453.734746] kmem_cache_alloc+0x12e/0x780 [ 453.738881] copy_pid_ns+0x1af/0xa50 [ 453.742603] create_new_namespaces+0x267/0x720 [ 453.747347] copy_namespaces+0x284/0x310 [ 453.751396] copy_process.part.0+0x2603/0x6a70 [ 453.755974] _do_fork+0x19e/0xce0 [ 453.759414] SyS_clone+0x37/0x50 [ 453.762769] do_syscall_64+0x1e8/0x640 [ 453.766649] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 453.771844] [ 453.773456] Freed by task 17486: [ 453.776807] save_stack_trace+0x16/0x20 [ 453.780767] save_stack+0x45/0xd0 [ 453.784222] kasan_slab_free+0x75/0xc0 [ 453.788269] kmem_cache_free+0x83/0x2b0 [ 453.792241] delayed_free_pidns+0x89/0xb0 [ 453.796373] rcu_process_callbacks+0x7b8/0x12b0 [ 453.801040] __do_softirq+0x244/0x9a0 [ 453.804824] [ 453.806439] The buggy address belongs to the object at ffff8880593e4b18 [ 453.806439] which belongs to the cache pid_namespace of size 2264 [ 453.819344] The buggy address is located 2104 bytes inside of [ 453.819344] 2264-byte region [ffff8880593e4b18, ffff8880593e53f0) [ 453.831463] The buggy address belongs to the page: [ 453.836378] page:ffffea000164f900 count:1 mapcount:0 mapping:ffff8880593e41c0 index:0x0 compound_mapcount: 0 [ 453.846332] flags: 0xfffe0000008100(slab|head) [ 453.850901] raw: 00fffe0000008100 ffff8880593e41c0 0000000000000000 0000000100000003 [ 453.858767] raw: ffffea000205f620 ffffea0002235ea0 ffff8882194af200 0000000000000000 [ 453.866631] page dumped because: kasan: bad access detected [ 453.872420] [ 453.874030] Memory state around the buggy address: [ 453.878945] ffff8880593e5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.886294] ffff8880593e5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.893644] >ffff8880593e5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 453.900998] ^ [ 453.906979] ffff8880593e5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 453.914338] ffff8880593e5400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fb fb 21:31:35 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x30b}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:35 executing program 3: clock_getres(0x6, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) 21:31:35 executing program 4 (fault-call:7 fault-nth:21): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) pipe(0x0) syz_open_dev$audion(0x0, 0x0, 0x0) 21:31:35 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="f6ccd892e6d5008f5213d1991c9cd76d7a7c63697a80fd783dbc541c89d5d628c29b9f9030912686a7658124fbf02d80a0fe8c621202e986bbd08d90411a23ebffc68201ddcbdcb38a2db865dedc6195906c0c848ff1723f85306bdda34303cd00e53708611c96a93cad103b92bb9cbd5070d8c2d7b86f25ce4607a63a09a21855ae9d3b69c27799e2dd18873664925344d0fb98b63df46bf855e874157acdfe12a1ad94dd2a7e0add82e77b0291475bb6321f424f8ab5e3db3a0e968de36e5a5915b724fd12c4439b1ed5e5a903e43acc4c0152344c2ff9c3fea01a4e04d58fbf98926a3e6e5d169af1336ea8093528f0450cbe9eea1934b176141b8744b5145ad1cc7893c58b2fcb16d330ec742d8f4a8234ba181b8ebdbac36437109d304a9fb920bb2ec418df3b63e200c93cf121547477919cdafbbd3d8c0d8ce62a48caeb5ada0418fd68461adef1d7a020c69d0583c33aa58ee4c76f0b740c0d9e53bb09d4748a8e2d9d2b61f8692bdb0f9d9414d7ce167fc1015e61e96b3d323c7dea84fe4441266c24c28ba9f27dc1a40131af45b59cd5961e6e4deff15f8b37936115c54ccdd236bc37554d42279ce2f8f88a966782eef4a1bbe168d6d01a306bcaba7cae5122b0af8f2f2a0153d3f264442c4fe85391e0c61fbf64bb7e2f17292182b6d57d2d922ead58173819fd5a5e30759e040a17918111a82cbf58d935681458077be76de373291aaf52a49e0e420e73cb005fe7b98f788a387ad2475d10c11c8fb6391fbfa6501ae5e1aa3d7ed2b0aa8131c78bde8a32d79eb47762123c1690b0333f2a2387741d1f96556c5a88219ef934bb771a931bebb07c5528920fbc69dd16aa10a61e36da40a591a9e40ccd376d3def0b8ba5dae7b515f201b1375f30b367fea7a547a9c3e20d662e60bc1ee9106156440ff3df93183a3397e49000f831469367b14aa99c0655d03beccc23cd2149dbbe44754268c12ae56b9faff8ddc19ec89e859dde69f2a4688cb6eebb3a923e860991d57ed536d03b5d750bb9f3ca8b51160979a8fdd8ecf1e2c26a6ef17d4e8bbb22fd2602418b4d94ca5871d22232e234969b5f9490a8c1ea21911e46784acb7223c74e642945e0870c699b232aeffe72abfc2a97601d23d62c97dc0e1ee2ea864eb9694fbb0030af130e92493cec7036e8f525230a0c5c80983a2c5c9d6ed229445839eb323a1e99216fe3f26a71c78102495f31bee068c95521593e9e982ec69e64d8f93f78b52fd92fab8658286cb3246be13ecab6de2ff2d38cd4a84504d9a2638535d16ff490772aa878c4157954ac550ebd85f0da535d819684bc6cec224c78b9b41112636e8ea8d5f842acd7085c70d63ad1ed06f50834c4cfacd71d8aa0e4fec8d42fd6a50aa172b97fd465f32d546127c7b491e05ea7baffa86660e83477c798ee377728752380333e4a20c1785a5374446928308cc3e30839a421d6d6517dc76a61c2f255eb4b9af5c96c7b21b2f678657c18d3ec5196eb0b7e80de38cbbc8f52de4d3bff4d1a92e39b0f7db5fb118187d4fd8a0d4483304d470301b8fa9e52e263e692e8ac9334d784dcb69d6d73e83ed6d92ddc30e2aef3ca5980117bd498ac9127c5d9173ee9f5d8b7ed6cef7ebedbeab5340289d92db81fb34b3e56427ff24119f16b08633c08e77027601781a4cc26db4f1898c8a1ad808c93e8c741be3ada186c621aeb739a667c93418253f959a3bb477b5cdf423631b863ae37578b50c4eeb82c68657837aa7fc3d149a7e1d63a5e3661288b831ad51875e60de77961fb4b75715f9fec453cce1232dd14cdedbe7263f599f0a17c19096536bac2159f2ad5c7e085a1a4a60243a674b5bb6f6bd3ed79e01026ded97bd2fe519f882d48a1da8edea54460765d948958e1c8947b44c00fa66d3f97e16f56317adcfe530cd469c8e37f16a662307c9a9d178f2efaa44e072307f30b7ea3f7007debd19c2e1e5ee69778530d9df13c057d3c1234b5d067545db6255ccbe05e06a6d53e39be0c99c94394d2161929569c41637a4d8c4ec2b12c986500abda10b4809a03b3dfebc0fdbefb8b331374018fdd47f9009ea3a36d8ebc59890cc92c1bf7197b93710fd2957726e3386ba3e5dcce8f7522422ff3e18bb93d0dbd3b832227567f7951cacad5600aa14f98932ac4cbf4cb6c693c4fa8f707e35b58325e1a8bec9226e0502d010bca92334e542266d50cf59402a51fdefca4554d7cc48ce38a727d8f9f4179f71a52caa5b23e6e0052b3c64fe1da82383599a4edc6d745c9011f7ab7ccf26d363226a17de20131ce8ccd5042bc3405f58bc687504a830652ec1adef98fbd96a3f36ea1e8d5eb1f18b37464371947f14a382d635f8b1dd075d13acb6512030b67a1774809f7db5d1402b857c50ebc97a70dc7c4205e1d2a0e96e0b65cb172e0ab5ec0cc3c858890ad21f383418ab8189c2da0aa7efe6df5120ab1dfa591c6687d85cca64e61c3b7980b76d8577d2744d41f51549b581fef2332110f67645c205feaeff545f42d63e439a8fb4b9f2c19e36d29ac4ed02427128c0cb3054682a9b2c3e27b7ec2d5c59f9cdee5ecc99c98a85eeb0dc86406b8d09d2d984558f15d4c47611c8cf8fb885d2d325453c9fd77db20a6d5e47bcbb4550d3a2d284b2c4ff398d585ea2a95ea78a616ed67763f5662d023c81e97ec6767894ee2f06c92fce57b2c6b2e528e2a7a07a78949cd7d3677b41a4c7b64a8e971b73ba1add8f3d6d0f07c8ddabc20a728579acf46a9d312b1d5e10e29794e0dd8f0000b639a77857b26246d2751dab7c826260eb000ff7a04b252cb4bdf7c880e99f38fb260e99fb01481ae47703a72734e1ce59575f91ac633ab28712ec0c95e6e49b0976416f08769f2686dc4aebc3187ac5e9bb6260d4cf84fefa12005e2e37f3d5cda375f2ad7dff85cc0c3d1b40459860c51a8eaf0376e1c6c8748eef0bdb9187157fc9b3110cf4124796c49e38660134fdb754cd2e905846edac87c1db0b4acaba51d94d2d7e5c1f66d78a5907f4ad8a696659ad546fa7c31dd1c88af7564393ccdb8a341612d62561672b9523c747ee2e5958b70f88ad07ae7f3de71b5ed8436298b467551c97ec0ffbad2a83c247e8a83875b2c0c69946a54b202e9a947d1519b39160945d8765ff12baa1d99a54142c898a06d1042ae74b8ab572ca4e2041f9e6e97a26e73543ba136ff953b82fe2ba8f95133d7dd78e0396540b043ad1a82f7988161bb3d7cb5204c8cd4cb17c50fbe53fcbefe4f2e13c68aefbd52113d09100e97d26c0cc58b7529b0b303d7037ee69350fc587889775a2db8e4beb5392c9e1711687504146ace4aff87fb349170ef7e4070516123dd7c985c6d16976f7bb33795acbcd8fac963082c605758aff84bd2377740009210c692a0b81d8bfddded190e4c992975faf3b2e2284c544a250669514c9f4d3a2bbb1d2a89f06a0dc43bd6f3d7b75aa75d72e37b3c9fe841d80026022195f79f633ccb6e28b67751a7d6b0d74ec4e1ee7f94e99c7a90bf3539c7da8f79d969a094f6dd9311a7e78831af5a9586e83daddcc746d6d2344b6c4eed1ca40e5788bfcf9f4920704d7624ab039cd02124546b539c5a0d6907dd7c602bcbab33369d4ca62e6f5964c5cb2229aa36d977e423bc5564a042b8e37820ee0a0f889c84bed8106bf2b1bf4df766b5decf330011d926d1e7959f2c33db9bcea29731d79c212c86998e145ef645e428d4066fc8d943c991a22b558df5c2f60b32da45e2a40bc89ce968ea0fe094b58a30abfc0f57385d52d39747a511a3984e86d80945bbb595fc43e1a3a0e164c6a122a19b611be171b4980500b1e903bae93988a9dddd3bc88126ee002bf14b94e7f594f9da0757ed0ddce25bee728f1ee80c70861d484012cc9b1d9811dfc9fc02f16b1cf0a63cc0b707b030d08625ca6ec73bcb8d10b9b794cfa6b78bbfb98295d93491f6d7d549bf8a72f25d94cc01a7335ec8dc8ab8bfbf059f43b6b1d82f189a42d4f10bacfc3dd2d88cf20a060eebc24aa3e9b993987401bccde79ae898bf5ca1b2f70fd9f979476b87ed414b220faf30030add8aba60362846e3d94d5d936723f8ed1419d64dd32663e075bb55a37cd0c46e1707578f1c92e8a89f32cc0619c9acb1ef69973dc59a1ceee6e3129b1e80a85587e0afb87f8c7c065b4bd0366697417f4ad020644742699fd473d5b5206212edc33fbeed4df4731749597f6e21cf3466b5d8052c89524f5884a144dfb92c0c39db9967b4a07c9a787a6f6d0c011abd1f46bd3b067e7e45e5662aef026c43b7bb3ee0677cd43239203a94ea0545ba1382e7b7172a784be35674019182bcdb5527ee7739858af89aa8d4e573d7570aad8cbe793853a8a21ad376e612f7f329bbae5aab41f21b65ea33da9338be4657d08c27666f5fbbd78e0133063686db01af0980cfa998c367dbd46465f726ab7f52275f49dd57ba43914dc156ae895e13562f8a60bf04bc2d8a28ac98e500d95548a991d45dbb305f4acc21bf21d616a265316fc87a032f775969e54d98f16b5180b92eaeb2974e1fb8afe1f61a72ce986edda07656b9f25ca15fe5b89caabb902beb318cd06118a28168d93f64b14866b1d9727d74ef9573622fec392c748bb63b637138eb3b4be722ac1c12bef3e40b6078d4dcba7ee8221e27492ccb11a407a5d39daf94ff81d5e32324f57d238eee97f0beb0393d187877d4a208e88617b5b65d7fdc851567e6e60c38f2ce8048dd28f5cdd045d37141b4f99d72e804620f1a61eb1b6248a24b367059a501fff911e5e145dffb3f0572634ebab59c0fba6df887dfc98e330ab5c46fa0650d2b85745bdce01e08e3f6fef94226f06e48cb330462db879e92dc4920952fbb83a74b7c3f013c29495e77fd46e4b4b97e7e77c89a740b6942c16eb6649bb4085d48216e5c5e44e90ee8bf940292fc3f898196c78582f676c429e0563c161b3b5b187a7fff42f3881cecf3014a209ba6467e7af518a0430abb3989b1614913ffd54af4330bc34421f16bc8c7ed7df7ec49248a258aab48f54001c151c2f39b1fe1ec74b7f468125c9de1f3f4ed2c7da3639ef2c2544dc8c3dcc28f68d0fb76e7e8a1b323ee91f6e7902592015e607ca5fed09b05fd6fb308d7c452b6261a238d75544719cb58425297377adc6c710543ab46ba0c94cc995c09738ae9c9d8504c3858eb1094e6fe184f192ca45e9955143d6435320119551871b08610d1702838e7617186e15e0d1d79b9f8c77dfa286879caff1c096768ac89043606ff79ebea405a8026d21a43b40105284a8bc901ac2e09c77396bba72140c92c51e2c3e8abc8e795edf610e3b67b80576a7fe9ae013b356ec329901750434c4b3ecd6be0bc7c5d21e0278869bd0eeab1e31a4796acf0409c75ed3972f6b93f8a8177cf73115e17bcf9032b229faf335e62b1a8ab37c99c7d9fa226f5e3bdb684755cc76ce254ac05a49cc7cb3db27136f198bd35a25b7458ef8760cae122dc0cb4ad7a733a98e3dbfc7ed14b6d86bfe671de7046ef9f195ceded6808d752180d5d0091668267393552fc527dd29922ec01bd6ce138d24f0da26d13c3832db6ff12b1968c249486425d27ceea9bece3f23a0a6fe2113c49708ce8cd7a6f651c052e37d79f296772dce4fd4e4663eb8e779a54b92f88fafbc778aeb1e4d2e80cbbedb92c2e0ed7b47e225076d9af0536c7269308b456f3941a994fd197814857ca77ffafa432a987b2aec465ba61afbb4a922281255f3af425bb5533f1ab7e7d", @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16=r0, @ANYRES64]], @ANYRES64], 0x4240a331) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x6, 0xb5, 0x81, 0x4}, {0x7, 0x3, 0x0, 0xff}, {0x72, 0x81, 0x6, 0x3}, {0x3f, 0x0, 0x8, 0x2}, {0x200, 0x7, 0x9f, 0x800}, {0x7ff, 0x33, 0x7, 0x9}, {0x400, 0x1, 0x99, 0x4f}, {0x40, 0x1, 0x0, 0x10000}, {0xef2, 0x1, 0x20, 0x3f}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x5bb}, 0x1c) 21:31:35 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140), 0x800) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r6}}, 0xfffffe65) fcntl$setpipe(r5, 0x407, 0xfffffffffffffffd) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/108) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f00000001c0)=0x20) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 453.921685] ================================================================== [ 453.929031] Disabling lock debugging due to kernel taint 21:31:35 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) sendmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ccf7b6fc69433e49ab8e99a7f3cd8a1b37a4c52f83a45dff85e371ee04c27a1770ad4b97aa", 0x25}, {&(0x7f0000000040)="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", 0xfe}, {&(0x7f0000000140)="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", 0xfc}], 0x3, &(0x7f00000003c0)=[{0xa0, 0x115, 0xfffffff8, "b0baac2a7422b3acd8fb532ec6ccbf2120c817735f31e7aa5693012466e3dad0245dedfeca0adef2c0a7424f19d076a13f1c4c2b63e02232e6092827c6cba22a15b076b509372904edd447901908077c574d2da37e289381b9d3857c519a7af6e7399e4d227e3c81b9d7a4cf6511767aa58f6b25cb052c068de0613287737f82f394b61a3f25a5b8525ccdf69a3f"}, {0x80, 0x22c, 0x8, "012fa9789a7d77819151a013c047ab05d393c15ef89c4ed090f4290f88eb426585992154676f567ef993e36b268c064fa6059f967e61f1d67e3c8ee2ab9b558bff0ee83f676715394593cdf2f83a81f5e45cd8c86ccba83240281740900e8bcfdc83451f4492c0360f4586b1"}, {0x40, 0x104, 0x21598d47, "d3f952c7d6fcf7025558a25f70c3be13945cc3e1d3433ed0a12ee10b8727c621ce081c60410ec9ebfd20fd39"}, {0x110, 0x188, 0x9, "5b60e3b1caad8fad28f7d006fba59e54eb4a586b242b682dff40efdcb3287e3b1b2e3776c2ad72ebe2237d8e0ae74f888747bdaf56f868a3996f880f82068c9ba9170bd2540eb685cc0528b180ec94dac98e2445ef7554d85d42d683d21742ec788d7d24df972b33c49b9f6cf0f6a7b446d80bcf6657a6c90bd293cc2a1031a22570d9a0a4946638aa21dc86b6f31ec31c53a9f7bc0b3a36276dde1c82bd987729dcebb03eb96eb7a3edc01a5aa73ade5e34216cc193170e430bd01c629cbe4867c1976eab93413e1bc511776da74f779e1a396b07f860685300513634877f4bcfa3c5cf381b35561db19f112b2f5b9bed7f3b30709a1315c6"}], 0x270}}, {{&(0x7f0000000280)=@l2={0x1f, 0x9, {0x1, 0x66, 0x1, 0x4, 0x9, 0x1}, 0x0, 0x5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)="dc2819f94254b46d192e323c4d04ab266cd4b2aa9ed288df71cbc03653b2ad1c3c115e2142fb59fb8bcd5d1f31b8fd44e1086c0c4cd9712f275ed99371fdc9ff7c8ac6b0fc61615003d89401", 0x4c}, {&(0x7f0000000640)="9b36206ba411fb6ce4862b3e5a074cad04c55940b0fe455de7c206a1bb1c9cb4175ec9cd20ec5d732aa637561657b6003519097a7cfe708664738b37af1e12f7f50a6e535d31f5acd67d93dd2c2483d1f33c42faa40295389a90e52065a8f5cf9825f6dba81b16a34deb68", 0x6b}, {&(0x7f00000006c0)="9e9c9db8916370b8c7729c2a3b7a89677df7d88edb16977cc17f26e2f149dea16ca6abfd113925bfa3f152f23f957412331ee47e03d258ce582c4c818103ac1740258d88257ff3064d35a1c53a00c5d6b4c20b74a349e8025eb5f57ce319305d4a3ef21cf11fdfccad62f6ef618a9e1cbef5a6779df410ebef8a0724839d631ad657512f2c60d83178419f2e684db647", 0x90}, {&(0x7f0000000780)="1babc23c", 0x4}], 0x4, &(0x7f0000000800)=[{0x10, 0xff, 0x101}, {0xe8, 0x10d, 0x7fffffff, "48addd6412050cfce2b3c82e533c09318fe0eced130f62b24c87e80edae96ef9ecaea7869f5c969cb9290f2aa39f15baac3be37a22c4899b76e25027aa5734b47319ad1c9b4997fc7144b1c2a71b9b1492b5799fd2652651d97558467d6b4e3613c6947c13af72352a4017fb94e40eb7d536c2fd82580fd98d6aeec165403e2aef12bea9a8d153e4306db8510ce1b9829683983c3d60c6b8959f82d339e09fbf715c2beb4e2c21828bbf77d911f1060f5ef9f3de7a599d71cabc16654245481140e6bbffa48e9378f7419795a8df92daf34cfd72fa766175"}], 0xf8}}, {{&(0x7f0000000900)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)="a504912717ed7b6663a227b7be9fc8d5287bed82e9d5dc3f2c06008b2a155a0cfea70e5e0887b010e75f0b394d13974df83aed81", 0x34}], 0x1, &(0x7f0000000a00)=[{0x68, 0x112, 0x5, "8200bde79f92bd10dc860ab0f0cca7888b1e306e22a220ab2ef604397acd595d1ae0a67fbf77e66dde43d0b2725b83998c30d951f711cc6f9e346c84501c41117b8335d6a9b577c71aa7dc04c2448a202f7705e65621481b"}, {0x50, 0x107, 0x3, "09ed74168e1df901b052a88c5e4158540313a3fd016b64d77c3c7702bf9ca3159fbeacc73901408ee8de9d3a0f8a5a3bd8c454bb05f407aeecf30f5220e1"}, {0xf0, 0xff, 0x6, "fd7758f61e554052a3adf6960a27597a4fc524e33c83dc3761a1c177cf18e6d430d75afb771da763461c94d19596c0ed66aadb90e7b5f5294f79d83666dd49c5f531a2b24e1de99698652c0b4d740236638a7d3ff82629b22e20c043f816c41955b789213ab1ca2cd40a1ac6e7e01c74b9fed36ea9c282958241ec18556e893cce4de657316b6227dc893387a639a9e8755f935e4997a9eee226d8e01fa6590c2e5832f8a2e16d1120ef00b8e01b662f61883fa6bface4b8137bc8a748f2721a9d864b144ea8ad433a7b3225d8353994154308212b31a67fa5dc89fc"}], 0x1a8}}, {{&(0x7f0000000bc0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="2e427d6b3545d8db06cefbc8b2122bb0542388e3ec625e93faf1335cb5060b384d78694408f839c1214fce8aaffebaed613850e109ece48ed14ed9f17644d510d8aa36d7db09ffa69196908b4389a147ba6fcc0ebcdb9fe87e9f2449934b0cad6da84d889e39", 0x66}, {&(0x7f0000000cc0)="0c16e25229ad6cef135319848f00ade5bec63f42f143c28680298a08d43258c6a89725af057f571d2c455c6e1466e3a7f256d87ac0306439446f0545e33588f6e15783842a80bd", 0x47}, {&(0x7f0000000d40)="9f7f0c7ba4d0a75025e12bf9c081bec8bca271e05255e62e4aca1527361de95276e877531753a472698953c2f9f21893b7790947889e8bbbb76180d09ced556ce2b342375fac441efb5780ecf37f778bdc75c2530902a080660ae850", 0x5c}, {&(0x7f00000015c0)="5d62544877400e1432a806bcffa0c7e24181e59db4072058338bb0b81aaf364ee4cd1c8435b1c4e1eb729f4fbc66b49b3a9170f2cb82c8e1d9342d4f0829ccde9e3e86c7fc0ff9b1774fd2c46f0c7e917a75ebba52f8df9cf5649c37f9024478d0a602eefef505848ff21ab4cb6ee3bf2b39edb4675aa95cdb6ea2880ed7931b17ea776e7e0de9ae5d8c4efe7e578e83098e2164460996f610406f13265d6f87b8713ca86eb3c7ef088136b34b4000c94f20b9d4c404c50a581b51b6361387699fe5315b6fb4c1ffa9b0e04c56144f7358dbb3b7c43a6e8510d49165ddf68098513d9fee69dbe6e82364a644a6a87c0dfcc5efe19b69574e258c0d7770edac6092f20cd74b93afc14c651f1d641913d069d07df1cec2545cbddfec413731c69f187b16fbe0bc294b8ad90a5695a3ab7acdba802a1438be44b53788ea19bc2b776921e1b6b0e1e20073bc9e42b5376c494ad4845fa303ddf5792a61fe75c330067467d74a4e4dea13f8aa6aa76f477baebcd89f3caf2045d40e3ff0d4a12ca734a03426d24338a9834d52b27799e781caf3f2f377150fa4793aa115f04538c75b92c669c14dc4a8ba3fa38b7bc09305bc0f57ab0ec9b6c0ddd15aaae31f3b5353e2d3b0b982a9c38c499a0d9578bc94b1f3a8b963b3365c582458b560a3734094cfc7f01a9a6b2cc55e8a95c1c9163aef9e9620d57660bd3d6ba78f260277e1d9ad7cd16a856b10a77407b70638f1ac751d3464ed2aa17add0c177b4654820266475247d0082267c6c54633af3a2949595791845e837f48e403eb5adbf282f8185d81fdb889c17cdc3f0cb875de9933b754dfe435bfb28163677da4efae3daecaac9f1dfc9fb117109d80e6619e3ca5728859058b516ea61d9ea9638456a6965f7cd95dd4ee74023146ae8fad3b56c8e2c61026f1540c1982b77aa1bba165c6200879b9f0860ec01bc80d6684fdc3ca42d07d80bcba2d619e1fdbda857e050bd5621245aa04cf3a4fd0ec0f765202fb7e8dd08817142b059efbec221b6c0bd8ac9c6b1638719ce5bae5735733b732f74922f12b362330613d05ce9dbb1f389ef261da3e8e893e4fc5bea15adb66024131fa6650966f4b7668c2c5bdee1abf5a4b5a4e8fd4a1eba0238eed63d25ba3f55b42fa090b0a77a8789b56ac10a5bbc29a96f680ee3a69676c48a93001836f90f4dd4c639921e10fa2684c8428628afac6a960b72fc86f74cdc9879b0909c10d179a2990ebbff30dd4ef89c21e9264dcbeed9f54e5487aba30f7a9fff8280221641afd03710cacb8b768cf99a86a67cd3203a8c7d6d2370d8d3f56bc56f30eae10f58cd85cf363033a452a0bdb482dca3ea9a7c7cf09a4405a4889834accfab4c8ae014ff5cb49a3488fc1c1b1a3fa379bb2b3a3cb50bdaf53f1ad64bb02eed5cc9e90e22c4815161f5cfa639d6c7f8d89108cb279fbcceba1e0914a5e4f25f4ad4a0ce80844491c212069857a16b9562404ab20d33f32d8c003d05a36abae704ef314b2430afe43c57c444d07469b37c5223214a477373d060330187527dfab6030b6ccf74ef8a7d313d8cf327865493d70afb7e905328984a92052bc190e0017fa0d4de1d1434d80e545ceef8b0c28546ae1fa990e26bad31b2338fc48dcbe335072fed865915ebd1c5185f27b201a7ee518b58d328888f7c3204478419d1e2111e7dd8789549b740ae3466b94a1d85bb01288770e0b74a1bb2c8baa18ee9f5398ae33183dafc2df03ac0edaf1625930a10bd63e69cd7be9f71e6ffd076bdcfdacd9a4f8d8693f66ce92690621c90ede455880683b0931df2cc37f606137c15d0690486da65c6a0a7cbb17c8645bfa57c090b7ecd77e99ec0d2fe0d87c1238e3f58dc235ff45d1d3ac25ebc741835b0dba0a4c23e0f0b92838d37805393de559b64d6837d5d87442d4a0ec37aec5d20c3b6f4555359ebd66746eb33535ba9644a4c14526357b9b4c4a670e6c7c745a5a668ae1eecc7166db6e4817299280676a4e73ed0511b69f552ac733deb80a76552ad0603841cdfda7664c5208620c15f8cb48b1d76f422af1434749a7023b63c882c917a6f6fd2265fca6ec4f2ca1b9728440fe486b1ce0642b7e4a1e0ff4ac8df2ed947b93f7dfb98803a437dc12c6742ea57de2ea2285e3b990c7d964d59de0a673b0772fe5f67ebd8be95c14d0da046b1eb574cc3e437709389ec78e2b766a04ce605112e6b6b3940006e3c21823a9590f8682367ac728adcee183d2b4adeb96985912f2ae99c28110e1eeb6174ff99d9d369439f60f15239b70e584c7c6f5e569c76304c07955d41eff3b5da3731c192477899e51bfded0fae8caef8bde9befc59585590d3b9e1ca49db91bedc34d6e18ceeced1036e320bb505dc4ca45899c6317643c4ebca285423d5bbd636ba70bf6c7af30e9a0117f367fcb6eab4986a78232b609f8c7d411960462b603535ed6d0aae8e9437e07aaca96785b54f523547eda0c6e25effb87637a92face27fcfff0c5fa0df2b5fb0b0ef52058f791ac8ce332b06b73194904fe08097683f7afc783fa39cbcb5a016203f67dfeec2b8a16f495c37f41e0ffa394e3b7b52e7e0e1937e79d01d4c5ba5fa3daf7461c49c4b42f4def50b164be471ccbe9eeafb25ac43b90317c32146754eb1603b7c5f595511e05719d6ad53cd8a2fcd21c4524cd862ed66dc06ecbf611ebe7649658fb33acd0114e08373dcd0eb0d265dc276ed328b1fa94cb2ae1e8c4076cde3d76fa7d58ba3caedda6396eb698c18a9baa23fcd7059aed3db1919143727aec218f6fa616514cfd4dee4f1580326cb48504efee48eda96732a544113b1f0380d7115db9e8b8bf7759501fed4fc1f329f8c3bf44974283ecc30e7a19c3bb41339d712352cc5f2907c70a991c485e16582c6def5cf53ebba2f396645d914da50b45da4b7a78de2af137ed3056a84f52231fb85fb0cb153c01df60a50b7deeb2f2ab61bb71fcaeb37a95e18e4ebe04dab70a0c91776931123811d6951d4f0ef630be8c8f58ce75b3c01772b1d2f23e482ad392c960b30692d2b0e1e2de75776a8afd92b0299be680e953772160f718cfaa7cba015543325247c8cf60eb9bef33a5198a13056c82c4ec4264ec63f8a6f622f68d70971a8e4f76a4ecbc5c0a277d4551619f09659e689fadb70766b043add78f94ab88cb8edbeb4e0dcc1f0f69fd5b3f649fdeb3dd7202746e4460b6d8d91e6e9b5eccd2b7a5ac8790333fa9a01fb8f33e4c5ba7afa6c03b80b0005c0016ff9608192f49940f5af0681b1852c729850376f497de27f5c59aba6a75f496b05c0e9838224a23c71434b6f5da203ec7ae7815dcb32fa521ab26cf5b2c6ff880adc1d35eba62c2a8c06c4add9a5cb32532af9bb91e5b9ce27dab2b1f9a1b57186cb3b63c56dcc9af7e8b717414d5e9bc4617ff1ce05449ca121490e18673582e20b97ca1ca60828481be19328103d11015c7c67eb5859022a2f92d8ea80867d82254cce4d841fcb3401f57cb414e0fa9aee7ec22c1b52000ece17a2995ff07f99a8b752e26373c0c290d79ae195298a7442f8bc75859dcdce3238cdadacfe2ced983ae37c890ad713d2c5656096722b716956819b6870f658252c0ffead76a2aba62173a2360429ce472cd11f372d6ed378e06af2f8095915c483f7d9c4bbe7caf89f3643c84878e286adecba595f717886d6c5221da099a216554a3449b1468c071375973f6b292e4b9a1e81fe7b12b1d1ee4252b1a8bc970ca056725f8730b51a09ff7ae5c163ed5131089b1e7c1635d47ff30b53507bae76cbcc71c63280cdbfe76afe7f5914aaa72b99c5e74264bda8274ee9d7814fc19634c67f085de891a22583ee8e797c834788e4addb6fe9797afe324b24df4bdcab3d029be80963a7d40b14cd6c848f3b0cdc3599e0c6a92f72c3c9ec90db8255fa02fd9a532214224ff30e00b8bab23a5b3837775c90387e86396b4a34a549ab4a119b94faf5e45ada405003445d6850a6f0f1d0a1255b07b1b0221a0c2c9e24a9b7a33c23620ae7dcc398f7abe5b81e06a155f8d05481abb1328d2171af78a0396ae3e827d6f158524cc3825d880b621b199934de4bbcd5cfebe9201229c73cd6469a14420feb0c22637136fbf29e6bad8e61eb9ed22f80fc89436d6d552dbd8907e867d47981e71f67f217ad8fc1bef9d6196e85b2bd784f0db2ade8d173c7179cee50c57f5d30caee02e506021d4696440e6c4a4aa1138b6db769985c914746098286635cf6b4a4deb3a017cfc73493c28e4ffa73cdc517d5c91a11f935a0741ae49ccf73b8a4b74cd06ff4b9139e379d2b1dd77423609ea7ee6659bad4e1dd2412b80dda226dcb4486ff5a0fd95b90b6d5b075e590c2d99c6c7b65545c2668499a41c110cef3cf04a2859dccef2f0c34a94855add65dd089492e8569a3fa46c44f02f6fd3229d6a4bf062c58c35b659ecb7a6a43586abee3d83bf343e0209e2b0846bb70f75307339e2f344bf81e69a765c141b0d363fc8d567940451862ffa55826a7869d181032cd1bb5e637a46b75b231c745e218cdd49a1fc84731d814341a632fdc4eb49bb4a4e20911ffbf51261edcdbd8313f2f0d40b49dc2a919f6fcb66df37b0fcb1d7ae89d3b0c49f2885e94a1028982cb2497da0700836e3e00503454828b318dbc82c438633693dcdc0de0dbef342160cbf626b7f1348ab9c30e0c236bb005d58622866cefc64e2c7ab1d1fe27f7439d5c0d9fbbce95dc8498a352bdb9e99d74cdee69d90fe48f6902add38b187a3041c788f143611022e931f9defc6a69c01640ee99f1d947a40f227e4baba32f7bc86341eee3bb75f40d7d0133c6704eae22ab0ee71c895ba48721800bb96c1678a903295d9a4bc26091d61cd389335ca8a0279574f25ef8631f04459e387b39225e5aad544ebb3e86710f5f5dda18b8ae44558166e7a7c3a95cf1ad78e8bedca20ea074e4c71bd05ec605eb4a60dcb6e4639290443cb72c2e46a858d85530130bfc4460e855f258c9d2fa60b6691a9470922326af8796c242681419beca074ff3708b6f30bd19d6fdbb69ba6ea65b3c74fc4edeeb3cba1e7b10fdd16a566e1cc391434d9c2ec9811d94260d48354b1eabf87c0fada77b95da604716e34d2187beb54a86f88bc235950373e74aa2fec11ef78e97f8e60c74ae5a765d17a6609dda6ece2f54e3acbe29712345364975c58d371cea3138f384d194c442b1a9ac110177cf177a5c60e5720cd0bbc1dcca3b0a47bdb5beeb573af16cd67f65393719aa893960b40a6c02e2a9e353588525bd5308f309b370978e89fc0fdad9c82d61135d282dcd5a3b87f4477809e42469a62fa9423e94190303eec87d7bbc9c21b01ad0e0e9198471df9f2dec008f8fdbdd2b1c2f018c9e3c39fd2548bca27dbf0cad3e76cd4677cec8aa569c3e8cee9656048f35305149df09964ed188973a7e9c6b94098f9378ff5338720db43f6dc17dd7e10c2bead72b0373a5e2baae5acecde9d0804616ae2ae9c3dac08b6b75d853056b381ecf5bb26612711154c329d72021eaedb55ffa2a872e71688280735666636091449c34b9fadaa432f5336e30c962d934aca60fdec0196a3817007b833985df5638e08a40f04e74baa436da470a7cd1c0bef91ffb7a142366a56bcfa3073ffb67c3528d42000215282efefbb4a175b65ad1ed6ef69b8bf70d43915a16db93be6c1f4a56b5d00f15c773b3503ae25f32d29fc8efeb7395c4d550f4ffe8ca50326665eb688cd4ee93737a390ab90e2b85c9835047d", 0x1000}], 0x4, &(0x7f0000000e00)=[{0x60, 0x107, 0x20, "e3b7815ac0405274bcb3854a50419f76d2a3ddf9c3a2bf973f162f00e244dbc4aa52d99d0dae6097f70cd6a2c51f471dd2ff4d67e169923b8ef3f601d073fcdad706d41e7f48f4572b5cbd390da7"}, {0x78, 0x119, 0x10001, "c1c70b9d8e20a08a5a82c52d2d8fe9029f7b6ae2d7355b5d78f00a18b3a8e7cecb1dee8e2542195a93060812b6421f331fec0664eb4b2bfd603c26bf55735ab55f20b69c9a4f584a9d49a807e4bdc6d7d65fe2abcb70f3b7b81255a5e7864b131d892a09"}, {0xe8, 0x0, 0x4, "d6b284362c5d66bbb3c37dcdfd189508d8b452a1ce8817b201adce06c343a8a3c09934389a31a60477b6f8ec1e6cc0f6ec80c072e8f8d03e7c656cebad75e6ec42c39ba69108d37d0662fbf9da5f83980e1eae196e398230a6118f64d17e6b82b240c33d0f74dd23e2a345b85d15a65e55cabe9993dde92be072d2a2f2ab916e2c58c7de6da5da79c762ac3ee16716ddbd8ba5b18c13bb2aae2c8fef304c2ba79aac1e025f04d51e16d4117b5d08230aa6c780b03d288f4ae69297d71cb4fd5f95c56cd32250f807f0b6973f0ebfc913c8508ad3"}, {0x88, 0x10e, 0x5, "f1f3e55dd30efb0b9c3cf8cb32b3d2d00f1a242d0ddf742c6f1610a161fb42a9dbcb93e241b1d3f469be9a11d3258674a3a7086e0f7a99bb650acab7abc9784086397880816facbe1a176aa3f004701a00a2d33499ebb5cf5a7a2577d84a6f0e5b7b4003dc251f06cebfa73425dcbfe78a87"}, {0x68, 0xa7ee166810ae1688, 0x2, "71159487473412db436bc781e7e06dddb9e0cd690e5744e9a36d2b65f1318d7cf001a651ef38821b32c8e166f70a239aec5c1743d30067f3dc47f3be3048bc6c7f34dbd29142d6f5f22c898ecd8b265291f0e36bbec9ad"}, {0xb0, 0x10b, 0x101, "1a177d6945d08545624933fa7940aef08b538cc63d471e2ad00ec5d517870217f470868a987afbb1eed273a4e8295124d758a724deab8a2c3dc6524df7e0ff5ff81cc3a878c24c61ca7488916c13f551c39a5eff303ff93683192e17dc373db6c3db275b15de850691082bf3d188ceb3e0efd8a0380b460d736108ec980c55d7c679a9947b9780404e31dd8a2df05694a78f5e8d062ee1b4defc29392978ae"}, {0x68, 0x10b, 0x800, "d55170061e6d3c99d5e1635a1dc92eb5e6302161848e034390de1b4a72a21ce91dace8b0f792d2afaa6a1302065dcb64f5d110d34859076fa7f9fcb0c5fa212c4196cb02cdeaf13f5c442f755c309f5cf0f7d1fc7295ac81"}, {0x30, 0x1, 0x1, "f5e4d616fc23b9b026d51cd5ec24d11c1ce31a6a34e22298f133ba03b6"}], 0x3f8}}], 0x4, 0x44004) [ 454.025397] FAULT_INJECTION: forcing a failure. [ 454.025397] name failslab, interval 1, probability 0, space 0, times 0 [ 454.043721] CPU: 0 PID: 17537 Comm: syz-executor.4 Tainted: G B 4.14.160-syzkaller #0 [ 454.052878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.062258] Call Trace: [ 454.064879] dump_stack+0x142/0x197 [ 454.068544] should_fail.cold+0x10f/0x159 [ 454.072734] should_failslab+0xdb/0x130 [ 454.076742] kmem_cache_alloc+0x2d7/0x780 [ 454.080932] alloc_vfsmnt+0x28/0x7d0 [ 454.084671] clone_mnt+0x70/0xee0 [ 454.088145] ? lock_downgrade+0x740/0x740 [ 454.092322] ? do_raw_spin_unlock+0x16b/0x260 [ 454.096843] copy_tree+0x33b/0x8a0 [ 454.100422] copy_mnt_ns+0x11c/0x8c0 [ 454.104155] ? kmem_cache_alloc+0x31f/0x780 [ 454.108500] ? selinux_capable+0x36/0x40 [ 454.112615] create_new_namespaces+0xc9/0x720 [ 454.117155] ? ns_capable_common+0x12c/0x160 [ 454.121679] copy_namespaces+0x284/0x310 [ 454.125763] copy_process.part.0+0x2603/0x6a70 [ 454.130378] ? get_pid_task+0xbf/0x140 [ 454.134287] ? proc_fail_nth_write+0x7d/0x180 [ 454.138804] ? proc_cwd_link+0x1b0/0x1b0 [ 454.142903] ? __cleanup_sighand+0x50/0x50 [ 454.147160] ? lock_downgrade+0x740/0x740 [ 454.151337] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 454.158036] _do_fork+0x19e/0xce0 [ 454.161543] ? fork_idle+0x280/0x280 [ 454.165285] ? fput+0xd4/0x150 [ 454.168516] ? SyS_write+0x15e/0x230 [ 454.172261] SyS_clone+0x37/0x50 [ 454.175650] ? sys_vfork+0x30/0x30 [ 454.179220] do_syscall_64+0x1e8/0x640 [ 454.183126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.188007] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 454.192310] Kernel panic - not syncing: panic_on_warn set ... [ 454.192310] [ 454.193737] RIP: 0033:0x45a919 [ 454.204295] RSP: 002b:00007fcc80e97c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 454.212002] RAX: ffffffffffffffda RBX: 00007fcc80e97c90 RCX: 000000000045a919 [ 454.219262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 21:31:35 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r4 = dup3(r2, r3, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}}, 0x18) write$P9_RSTAT(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="700000007d0200000069000700050000000100000000040000000000000800000004180000000300000007000000000000000b0028747275737465646c6f40180073797374656d707070302d76626f786e65743170726f63180700697036677265000c002d76626f786e6574312a7d40"], 0x70) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000002c0)={r5, 0x5}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r5, &(0x7f0000000000)=""/42}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 454.226521] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 454.233803] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc80e986d4 [ 454.241065] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 454.248351] CPU: 1 PID: 17511 Comm: syz-executor.5 Tainted: G B 4.14.160-syzkaller #0 [ 454.257450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.259856] kobject: 'loop3' (ffff8880a40baca0): kobject_uevent_env [ 454.266812] Call Trace: 21:31:36 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = getuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) preadv(r0, &(0x7f00000017c0), 0x1a0, 0xf0ffff) [ 454.266829] dump_stack+0x142/0x197 [ 454.266842] ? put_pid_ns+0x80/0x90 [ 454.266851] panic+0x1f9/0x42d [ 454.266862] ? add_taint.cold+0x16/0x16 [ 454.273357] kobject: 'loop3' (ffff8880a40baca0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 454.275828] ? ___preempt_schedule+0x16/0x18 [ 454.275844] kasan_end_report+0x47/0x4f [ 454.308444] kasan_report.cold+0x130/0x2af [ 454.312695] __asan_report_load8_noabort+0x14/0x20 [ 454.317634] put_pid_ns+0x80/0x90 [ 454.321103] free_nsproxy+0x104/0x200 [ 454.325003] switch_task_namespaces+0x98/0xb0 [ 454.329509] exit_task_namespaces+0x18/0x20 [ 454.333852] copy_process.part.0+0x3c67/0x6a70 [ 454.338452] ? proc_fail_nth_write+0x7d/0x180 [ 454.342955] ? proc_cwd_link+0x1b0/0x1b0 [ 454.347032] ? __cleanup_sighand+0x50/0x50 [ 454.351278] ? lock_downgrade+0x740/0x740 [ 454.355450] _do_fork+0x19e/0xce0 [ 454.359033] ? fork_idle+0x280/0x280 [ 454.362862] ? fput+0xd4/0x150 [ 454.366068] ? SyS_write+0x15e/0x230 [ 454.369815] SyS_clone+0x37/0x50 [ 454.373180] ? sys_vfork+0x30/0x30 [ 454.376722] do_syscall_64+0x1e8/0x640 [ 454.380605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.385451] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 454.390630] RIP: 0033:0x45a919 [ 454.393805] RSP: 002b:00007f4b18fe7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 454.401501] RAX: ffffffffffffffda RBX: 00007f4b18fe7c90 RCX: 000000000045a919 [ 454.408755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 03000000a0160101 [ 454.416009] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 454.423276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b18fe86d4 [ 454.430533] R13: 00000000004c1007 R14: 00000000004d4d48 R15: 0000000000000005 [ 454.439175] Kernel Offset: disabled [ 454.442847] Rebooting in 86400 seconds..